{ "data": { "a": { "slug": "text-generation-webui", "name": "TextGen", "vendor": "oobabooga", "vendorUrl": "https://github.com/oobabooga", "kind": "platform", "category": "local-ai", "summary": "Open-source desktop and browser app for running language models on the owner's hardware, formerly text-generation-webui. With `--api` it serves an OpenAI and Anthropic-compatible local API with tool calling, vision, embeddings and image generation.", "url": "https://www.anchorterminal.com/tools/text-generation-webui", "markdownUrl": "https://www.anchorterminal.com/tools/text-generation-webui.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/text-generation-webui.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/text-generation-webui.json", "repo": "https://github.com/oobabooga/textgen", "license": "AGPL-3.0", "transports": [ "http" ], "packages": [], "auth": "api-key", "authNotes": "The API takes one optional key from `--api-key`, off by default, sent as `Authorization: Bearer` on the OpenAI routes and as `x-api-key` on `/v1/messages`. A second key from `--admin-key` guards model and LoRA loading, unloading and listing, and equals the API key when unset. Keys are set at launch, have no scopes and change only with a restart. Without `--listen` or `--public-api` the server binds 127.0.0.1, rejects other Host headers and limits CORS to localhost. The web UI has no login unless `--gradio-auth` is set.", "pricing": "free", "pricingNotes": "Free and AGPL-3.0, with no account, card or paid edition. Portable builds and source are on GitHub (checked 2026-10-08).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs folder or the API source (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 47700, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://github.com/oobabooga/textgen/wiki", "capabilities": [ "inference.local", "inference.open-weights", "agent.mcp-client", "embed.text", "image.generate" ], "tags": [ "open-source", "local", "self-hosted", "free", "no-card", "account-free", "openai-compatible", "open-weights", "streaming", "mcp", "docker", "no-telemetry" ], "lastRelease": "2026-05-20", "graded": true, "anchor": { "graded": true, "score": 45.1, "grade": "E", "agentReady": false, "rank": 872, "ranked": true, "rankOf": 950, "categoryRank": 16, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 50, "maintenance": 24, "payments": 60, "reliability": 51, "schema": 61, "security": 40, "transparency": 49 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -4, "negativeNotes": [ "2026-03-18. Two Critical advisories at 9.1. GHSA-jg96-p5p6-q3cv (CVE-2026-35050) let a user of the web UI write Python files through a path traversal in extension settings and run them, in 4.1 and earlier, fixed in 4.1.1. GHSA-4p45-76cc-7p62 let a caller write or delete files through a character name on instances started with `--listen`, fixed in 4.0. Both fixed and published, -2. https://github.com/oobabooga/textgen/security/advisories/GHSA-jg96-p5p6-q3cv", "2026-03-18. GHSA-fpwc-4mvr-7jpr (High, 7.1). `/v1/chat/completions` and `/v1/completions` fetched any `image_url` from the server side, so a caller could reach internal addresses, in 4.1 and earlier. Fixed in 4.1.1 and published, -1. https://github.com/oobabooga/textgen/security/advisories/GHSA-fpwc-4mvr-7jpr", "2025-10-13 to 2026-04-03. Seven more advisories in the year, four High and three Moderate, among them a file read through an uploaded symbolic link, four path traversals in preset, grammar, template and prompt loading, an SSRF in the superbooga extensions and a Gradio path-check bypass fixed in 4.3. All published with fixes, -1. https://github.com/oobabooga/textgen/security" ], "verdict": "AGPL-3.0 with no telemetry, and a local API on 127.0.0.1:5000 that checks the Host header, limits CORS to localhost and separates an admin key from the caller's key. No release since v4.9 on 20 May 2026, no code commits since 31 May, no test suite, and ten security advisories in the year, all fixed.", "bestFor": "A person who wants one app for several backends (llama.cpp, ExLlamaV3, Transformers) with an OpenAI and Anthropic-compatible endpoint, LoRA training and image generation.", "strengths": [ "AGPL-3.0, with analytics switched off in the source and a README that states zero telemetry", "One server answers `/v1/chat/completions`, `/v1/completions` and Anthropic's `/v1/messages`, with tool calling and streaming", "Since v4.9 the API rejects Host headers other than localhost and 127.0.0.1 and limits CORS to localhost unless `--listen` or `--public-api` is set", "A separate `--admin-key` guards model and LoRA loading, apart from the `--api-key` callers use", "Ten security advisories published on GitHub with patched versions named, the newest on 3 April 2026" ], "weaknesses": [ "No release since v4.9 on 20 May 2026 and no code commit on `main` or `dev` since 31 May 2026", "No test suite. The seven GitHub workflows only build release packages on manual dispatch", "807 open issues and 40 open pull requests, with no SECURITY.md or disclosure address", "Two Critical advisories (9.1) published on 18 March 2026, both path traversals in the web UI, fixed in 4.0 and 4.1.1", "The API key is off by default, set only at launch, and has no scopes or per-client keys", "No rate limits, error list or published OpenAPI file in the docs. The schema is served only by a running server at `/docs`" ], "agentNotes": [ "Ask the owner to launch with `--api`. Nothing listens on port 5000 without it, and a model must be loaded first", "Call `http://127.0.0.1:5000/v1`. Any Host header other than localhost or 127.0.0.1 gets 400 `Invalid host header` unless `--listen` is set", "Send the key as `Authorization: Bearer` on OpenAI routes and as `x-api-key` on `/v1/messages`. Model loading needs the admin key", "Read `http://127.0.0.1:5000/docs` or `modules/api/typing.py` for parameters. `max_tokens` defaults to 512 on chat completions", "Run tool calls yourself. The API returns `finish_reason: \"tool_calls\"` and executes nothing on the server", "Use the repository name `oobabooga/textgen`. The old `text-generation-webui` URL redirects" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 45.1 } ], "editorialScores": { "ergonomics": 50, "maintenance": 24, "payments": 60, "reliability": 51, "schema": 61, "security": 40, "transparency": 70 }, "provenanceScore": 27 }, "connect": { "install": "git clone https://github.com/oobabooga/textgen\ncd textgen\npython -m venv venv\nsource venv/bin/activate\npip install -r requirements/portable/requirements.txt --upgrade\npython server.py --portable --api --auto-launch", "http": "curl http://127.0.0.1:5000/v1/chat/completions \\\n -H \"Content-Type: application/json\" \\\n -d '{\"messages\": [{\"role\": \"user\", \"content\": \"Hello!\"}], \"temperature\": 0.6, \"top_p\": 0.95, \"top_k\": 20}'" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/text-generation-webui" }, "area": "models", "provenance": { "legalEntity": "", "domain": "github.com/oobabooga", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/oobabooga/textgen/releases", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The project belongs to a developer who publishes as oobabooga. The LICENSE is the AGPL-3.0 text and names no legal entity, and the README acknowledges a grant from Andreessen Horowitz in August 2023.", "No vendor domain. The README links only the GitHub repository, its wiki, a subreddit, a Substack and a Hugging Face space.", "No terms of use and no privacy policy were found in the repository, the README or the wiki, so both fields are left out. The README states zero telemetry.", "No SECURITY.md (the Security tab says none is set up) and no security.txt of the project's own.", "There's no hosted endpoint. The API answers on the owner's machine, at 127.0.0.1:5000 by default." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/text-generation-webui.json", "live": { "slug": "text-generation-webui", "versions": [ { "registry": "github", "name": "oobabooga/textgen", "version": "v4.9", "released": "2026-05-20", "seenAt": "2026-10-09T17:24:08.366300849Z" } ], "githubStars": 47723, "updatedAt": "2026-10-09T17:24:08.366300849Z" } }, "answer": "vLLM scores 57.7 (C) on agent readiness against TextGen's 45.1 (E), and leads in 6 of 7 scored categories.", "b": { "slug": "vllm", "name": "vLLM", "vendor": "vLLM project (PyTorch Foundation)", "vendorUrl": "https://vllm.ai", "kind": "http-api", "category": "local-ai", "summary": "vLLM is an open-source inference and serving engine for open-weight language models. `vllm serve` runs an HTTP server with OpenAI-compatible, Anthropic Messages, embedding, reranking and transcription routes on the owner's own GPUs or CPUs.", "url": "https://www.anchorterminal.com/tools/vllm", "markdownUrl": "https://www.anchorterminal.com/tools/vllm.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vllm.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vllm.json", "repo": "https://github.com/vllm-project/vllm", "license": "Apache-2.0", "transports": [ "http" ], "packages": [ { "registry": "pypi", "name": "vllm" }, { "registry": "oci", "name": "vllm/vllm-openai" } ], "auth": "none", "authNotes": "No credential by default. `--api-key` (one or several keys) or `VLLM_API_KEY` turns on a Bearer check for paths under `/v1`, `/v2`, `/inference` and `/cohere` only, so `/invocations`, `/pooling`, `/classify`, `/score`, `/rerank` and control routes such as `/pause` stay open. Keys have no scopes and change with a restart. The key is read from the `Authorization` header, never the query string. gRPC has no authentication (https://github.com/vllm-project/vllm/blob/main/docs/usage/security.md).", "pricing": "free", "pricingNotes": "Free under Apache-2.0, with no account, key or card. Nothing is sold by the project. You pay for your own hardware and electricity.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 93444, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.vllm.ai/en/stable/", "capabilities": [ "inference.local", "inference.open-weights", "embed.text", "rerank", "speech.stt", "inference.decision", "agent.mcp-client" ], "tags": [ "open-source", "local", "self-hosted", "free", "no-card", "openai-compatible", "docker", "pre-1.0", "telemetry-default-on" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 57.7, "grade": "C", "agentReady": false, "rank": 600, "ranked": true, "rankOf": 950, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 88, "payments": 60, "reliability": 62, "schema": 68, "security": 50, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -6, "negativeNotes": [ "2026-06-02. GHSA-94f4-hr76-p5j6 (CVE-2026-48746, 9.1), a crafted Host header bypassed the API key check on the OpenAI routes, fixed in 0.22.0. With GHSA-4r2x-xpjr-7cvv (CVE-2026-22778, 9.8) of 2 February 2026, code execution through video decoding fixed in 0.14.1, these are the two critical advisories of the last 12 months. Both were fixed and published with CVEs, so they decay, -3. https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6; https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv", "2026-10-06. GHSA-h3rc-6mm3-gc2m (8.1), a request field could select the processor code a server started with `--trust-remote-code` imports, fixed in 0.31.0, one of 50 advisories published since 11 July 2026 (10 high, 36 medium, 4 low), most of them requests that crash or exhaust the engine. All name a fixed version, and eleven were published on 9 October 2026 months after their fixes, -3. https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-6mm3-gc2m; https://github.com/vllm-project/vllm/security/advisories" ], "verdict": "Apache-2.0 software with a release about every two weeks, each with notes that list breaking changes and security fixes. The optional API key covers only some path prefixes, so `/invocations` and control routes such as `/pause` answer without it, and at least 81 security advisories were published in the 12 months to 9 October 2026.", "bestFor": "An owner with a GPU server who wants many concurrent requests against one open-weight model behind OpenAI or Anthropic compatible routes.", "strengths": [ "OpenAI chat, completions, responses and embeddings, Anthropic `/v1/messages`, Cohere embed and rerank, transcription and `/v1/systemone` from one server", "Apache-2.0, with a written three-stage deprecation policy and release notes that carry a breaking changes section", "Eight stable releases between 12 July and 2 October 2026, and v0.31.0 lists 717 commits from 307 contributors", "A 650-line security guide names every route the API key does and does not protect, and the limits of multi-tenant use", "Usage statistics are documented field by field, with `VLLM_NO_USAGE_STATS`, `DO_NOT_TRACK` or a file as opt-outs" ], "weaknesses": [ "`--api-key` guards only the `/v1`, `/v2`, `/inference` and `/cohere` prefixes. `/invocations`, `/pooling`, `/classify`, `/score`, `/rerank`, `/pause` and `/update_weights` answer without it", "No key by default, the server binds every interface when `--host` is unset, and CORS allows any origin", "At least 81 GitHub security advisories in 12 months, two critical, most of them remote crashes or resource exhaustion", "Pre-1.0 (0.31.0), with breaking changes in each fortnightly release and compatibility kept for a limited number of minor versions", "Usage statistics are sent to stats.vllm.ai by default, and no privacy policy or retention period for them was found" ], "agentNotes": [ "Put a reverse proxy that allowlists routes in front of the server. `--api-key` leaves `/invocations` and the control routes open", "Pass `--host 127.0.0.1` for single-machine use. With no `--host` the server listens on every interface", "Set `VLLM_NO_USAGE_STATS=1` or `DO_NOT_TRACK=1` before starting if nothing should be sent to stats.vllm.ai", "Start with `--enable-auto-tool-choice` and the `--tool-call-parser` for the model before sending tools. Tool calling is off without them", "Send `max_tokens` on every request, and read the breaking changes section of the release notes before upgrading a minor version" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.7 } ], "editorialScores": { "ergonomics": 64, "maintenance": 88, "payments": 60, "reliability": 62, "schema": 68, "security": 50, "transparency": 80 }, "provenanceScore": 53 }, "connect": { "install": "uv pip install vllm --torch-backend=auto\nvllm serve Qwen/Qwen2.5-1.5B-Instruct # listens on port 8000", "http": "curl http://localhost:8000/v1/chat/completions \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"model\": \"Qwen/Qwen2.5-1.5B-Instruct\",\n \"messages\": [\n {\"role\": \"system\", \"content\": \"You are a helpful assistant.\"},\n {\"role\": \"user\", \"content\": \"Who won the world series in 2020?\"}\n ]\n }'", "claudeCode": "ANTHROPIC_BASE_URL=http://localhost:8000 \\\nANTHROPIC_API_KEY=dummy \\\nANTHROPIC_AUTH_TOKEN=dummy \\\nANTHROPIC_DEFAULT_OPUS_MODEL=my-model \\\nANTHROPIC_DEFAULT_SONNET_MODEL=my-model \\\nANTHROPIC_DEFAULT_HAIKU_MODEL=my-model \\\nclaude" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/vllm" }, "area": "models", "provenance": { "legalEntity": "The Linux Foundation (vLLM is a PyTorch Foundation project)", "domain": "vllm.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/vllm-project/vllm/releases", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "vllm.ai links no terms and no privacy policy, and its footer reads © 2026 vLLM. The project publishes none for the software or for stats.vllm.ai, so the Apache-2.0 licence stands in for terms.", "pytorch.org/projects/vllm/ lists vLLM among PyTorch Foundation projects and says UC Berkeley contributed it to the Linux Foundation in July 2024. The Linux Foundation's policies are linked from that page and are not specific to vLLM.", "vllm.ai/.well-known/security.txt and docs.vllm.ai/.well-known/security.txt return 404. SECURITY.md asks for private reports through GitHub.", "There's no shared hosted endpoint. The server runs on the owner's hardware. The software posts usage statistics to stats.vllm.ai unless turned off." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vllm.json", "live": { "slug": "vllm", "versions": [ { "registry": "github", "name": "vllm-project/vllm", "version": "v0.31.0", "released": "2026-10-05", "seenAt": "2026-10-09T17:27:30.444059802Z" }, { "registry": "pypi", "name": "vllm", "version": "0.31.0", "released": "2026-10-05", "seenAt": "2026-10-09T17:27:30.259454009Z" } ], "githubStars": 93457, "pypiWeekly": 444466, "updatedAt": "2026-10-09T17:27:30.444059802Z" } }, "facts": [ { "a": "Model platform", "b": "HTTP API", "name": "Kind" }, { "a": "oobabooga", "b": "vLLM project (PyTorch Foundation)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "API key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "AGPL-3.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-05-20", "b": "2026-10-02", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "48k stars", "b": "93k stars", "name": "Popularity" } ], "faq": [ { "answer": "vLLM scores 57.7 (C) on agent readiness against TextGen's 45.1 (E), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, TextGen or vLLM?" }, { "answer": "No hosted endpoint is listed for TextGen. No hosted endpoint is listed for vLLM.", "question": "Can an agent call TextGen and vLLM without installing anything?" }, { "answer": "Yes. TextGen is open source (AGPL-3.0). vLLM is open source (Apache-2.0).", "question": "Are TextGen and vLLM open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "A person who wants one app for several backends (llama.cpp, ExLlamaV3, Transformers) with an OpenAI and Anthropic-compatible endpoint, LoRA training and image generation.", "slug": "text-generation-webui", "watchFor": "No release since v4.9 on 20 May 2026 and no code commit on `main` or `dev` since 31 May 2026" }, { "aheadOn": [ "Reliability, 62 against 51", "Schema \u0026 documentation, 68 against 61", "Agent ergonomics, 64 against 50", "Security \u0026 auth, 50 against 40", "Maintenance \u0026 community, 88 against 24", "Transparency \u0026 trust, 67 against 49" ], "also": [ "No key needed to call it" ], "goodFor": "An owner with a GPU server who wants many concurrent requests against one open-weight model behind OpenAI or Anthropic compatible routes.", "slug": "vllm", "watchFor": "`--api-key` guards only the `/v1`, `/v2`, `/inference` and `/cohere` prefixes. `/invocations`, `/pooling`, `/classify`, `/score`, `/rerank`, `/pause` and `/update_weights` answer without it" } ], "job": { "capability": "inference.local", "name": "Local inference" }, "others": [ { "json": "https://www.anchorterminal.com/compare/anythingllm-vs-text-generation-webui.json", "title": "AnythingLLM vs TextGen", "url": "https://www.anchorterminal.com/compare/anythingllm-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/anythingllm-vs-vllm.json", "title": "AnythingLLM vs vLLM", "url": "https://www.anchorterminal.com/compare/anythingllm-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/docker-model-runner-vs-text-generation-webui.json", "title": "Docker Model Runner vs TextGen", "url": "https://www.anchorterminal.com/compare/docker-model-runner-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/docker-model-runner-vs-vllm.json", "title": "Docker Model Runner vs vLLM", "url": "https://www.anchorterminal.com/compare/docker-model-runner-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/foundry-local-vs-text-generation-webui.json", "title": "Foundry Local vs TextGen", "url": "https://www.anchorterminal.com/compare/foundry-local-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/foundry-local-vs-vllm.json", "title": "Foundry Local vs vLLM", "url": "https://www.anchorterminal.com/compare/foundry-local-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/ghost-core-vs-text-generation-webui.json", "title": "Core vs TextGen", "url": "https://www.anchorterminal.com/compare/ghost-core-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/ghost-core-vs-vllm.json", "title": "Core vs vLLM", "url": "https://www.anchorterminal.com/compare/ghost-core-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui.json", "title": "GPT4All vs TextGen", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-vllm.json", "title": "GPT4All vs vLLM", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/jan-vs-text-generation-webui.json", "title": "Jan vs TextGen", "url": "https://www.anchorterminal.com/compare/jan-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/jan-vs-vllm.json", "title": "Jan vs vLLM", "url": "https://www.anchorterminal.com/compare/jan-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/khoj-vs-text-generation-webui.json", "title": "Khoj vs TextGen", "url": "https://www.anchorterminal.com/compare/khoj-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/khoj-vs-vllm.json", "title": "Khoj vs vLLM", "url": "https://www.anchorterminal.com/compare/khoj-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/koboldcpp-vs-text-generation-webui.json", "title": "KoboldCpp vs TextGen", "url": "https://www.anchorterminal.com/compare/koboldcpp-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/koboldcpp-vs-vllm.json", "title": "KoboldCpp vs vLLM", "url": "https://www.anchorterminal.com/compare/koboldcpp-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/lemonade-vs-text-generation-webui.json", "title": "Lemonade vs TextGen", "url": "https://www.anchorterminal.com/compare/lemonade-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/lemonade-vs-vllm.json", "title": "Lemonade vs vLLM", "url": "https://www.anchorterminal.com/compare/lemonade-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/llama-cpp-vs-text-generation-webui.json", "title": "llama.cpp vs TextGen", "url": "https://www.anchorterminal.com/compare/llama-cpp-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/llama-cpp-vs-vllm.json", "title": "llama.cpp vs vLLM", "url": "https://www.anchorterminal.com/compare/llama-cpp-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/lm-studio-vs-text-generation-webui.json", "title": "LM Studio vs TextGen", "url": "https://www.anchorterminal.com/compare/lm-studio-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/lm-studio-vs-vllm.json", "title": "LM Studio vs vLLM", "url": "https://www.anchorterminal.com/compare/lm-studio-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/localai-vs-text-generation-webui.json", "title": "LocalAI vs TextGen", "url": "https://www.anchorterminal.com/compare/localai-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/localai-vs-vllm.json", "title": "LocalAI vs vLLM", "url": "https://www.anchorterminal.com/compare/localai-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/mlx-lm-vs-text-generation-webui.json", "title": "MLX LM vs TextGen", "url": "https://www.anchorterminal.com/compare/mlx-lm-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/mlx-lm-vs-vllm.json", "title": "MLX LM vs vLLM", "url": "https://www.anchorterminal.com/compare/mlx-lm-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/ollama-vs-text-generation-webui.json", "title": "Ollama vs TextGen", "url": "https://www.anchorterminal.com/compare/ollama-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/ollama-vs-vllm.json", "title": "Ollama vs vLLM", "url": "https://www.anchorterminal.com/compare/ollama-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/open-webui-vs-text-generation-webui.json", "title": "Open WebUI vs TextGen", "url": "https://www.anchorterminal.com/compare/open-webui-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/open-webui-vs-vllm.json", "title": "Open WebUI vs vLLM", "url": "https://www.anchorterminal.com/compare/open-webui-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/screenpipe-vs-text-generation-webui.json", "title": "screenpipe vs TextGen", "url": "https://www.anchorterminal.com/compare/screenpipe-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/screenpipe-vs-vllm.json", "title": "screenpipe vs vLLM", "url": "https://www.anchorterminal.com/compare/screenpipe-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/text-generation-webui-vs-underdog.json", "title": "TextGen vs Underdog", "url": "https://www.anchorterminal.com/compare/text-generation-webui-vs-underdog" }, { "json": "https://www.anchorterminal.com/compare/underdog-vs-vllm.json", "title": "Underdog vs vLLM", "url": "https://www.anchorterminal.com/compare/underdog-vs-vllm" } ], "scores": [ { "by": 11, "edge": "vllm", "key": "reliability", "name": "Reliability", "text-generation-webui": 51, "vllm": 62, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 7, "edge": "vllm", "key": "schema", "name": "Schema \u0026 documentation", "text-generation-webui": 61, "vllm": 68, "weight": 13 }, { "by": 14, "edge": "vllm", "key": "ergonomics", "name": "Agent ergonomics", "text-generation-webui": 50, "vllm": 64, "weight": 13 }, { "by": 10, "edge": "vllm", "key": "security", "name": "Security \u0026 auth", "text-generation-webui": 40, "vllm": 50, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "text-generation-webui": 60, "vllm": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 64, "edge": "vllm", "key": "maintenance", "name": "Maintenance \u0026 community", "text-generation-webui": 24, "vllm": 88, "weight": 7 }, { "by": 18, "edge": "vllm", "key": "transparency", "name": "Transparency \u0026 trust", "text-generation-webui": 49, "vllm": 67, "weight": 7 } ], "summary": "vLLM scores 57.7 (C) on agent readiness against TextGen's 45.1 (E), and leads in 6 of 7 scored categories. Both do local inference.", "verdicts": { "text-generation-webui": "AGPL-3.0 with no telemetry, and a local API on 127.0.0.1:5000 that checks the Host header, limits CORS to localhost and separates an admin key from the caller's key. No release since v4.9 on 20 May 2026, no code commits since 31 May, no test suite, and ten security advisories in the year, all fixed.", "vllm": "Apache-2.0 software with a release about every two weeks, each with notes that list breaking changes and security fixes. The optional API key covers only some path prefixes, so `/invocations` and control routes such as `/pause` answer without it, and at least 81 security advisories were published in the 12 months to 9 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm", "json": "https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm.md", "slim": "https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm.min.md" }, "markdown": "vLLM scores 57.7 (C) on agent readiness against TextGen's 45.1 (E), and leads in 6 of 7 scored categories. Both do local inference.\n\n- TextGen: grade E, 45.1/100, rank #872 of 950. Markdown https://www.anchorterminal.com/tools/text-generation-webui.md · JSON https://www.anchorterminal.com/api/v1/tools/text-generation-webui.json\n- vLLM: grade C, 57.7/100, rank #600 of 950. Markdown https://www.anchorterminal.com/tools/vllm.md · JSON https://www.anchorterminal.com/api/v1/tools/vllm.json\n- Best local AI models and assistants: https://www.anchorterminal.com/best/local-ai/index.md\n- All 184 local ai comparisons: https://www.anchorterminal.com/compare/local-ai/index.md\n\n## Which one, for what\n\n### TextGen (E)\n\nGood for: A person who wants one app for several backends (llama.cpp, ExLlamaV3, Transformers) with an OpenAI and Anthropic-compatible endpoint, LoRA training and image generation.\n\nWatch for: No release since v4.9 on 20 May 2026 and no code commit on `main` or `dev` since 31 May 2026\n\n### vLLM (C)\n\nGood for: An owner with a GPU server who wants many concurrent requests against one open-weight model behind OpenAI or Anthropic compatible routes.\n\nAhead on:\n- Reliability, 62 against 51\n- Schema \u0026 documentation, 68 against 61\n- Agent ergonomics, 64 against 50\n- Security \u0026 auth, 50 against 40\n- Maintenance \u0026 community, 88 against 24\n- Transparency \u0026 trust, 67 against 49\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: `--api-key` guards only the `/v1`, `/v2`, `/inference` and `/cohere` prefixes. `/invocations`, `/pooling`, `/classify`, `/score`, `/rerank`, `/pause` and `/update_weights` answer without it\n\n\n## Score by category\n\n| Category | Weight | TextGen | vLLM | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 51 | 62 | vLLM +11 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 61 | 68 | vLLM +7 |\n| Agent ergonomics | 13% (16.2 this run) | 50 | 64 | vLLM +14 |\n| Security \u0026 auth | 14% (17.5 this run) | 40 | 50 | vLLM +10 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 24 | 88 | vLLM +64 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 49 | 67 | vLLM +18 |\n| Negative events | ≤15 | -4 | -6 | |\n| **Total** | | **45.1 · E** | **57.7 · C** | |\n\n## Facts side by side\n\n| Fact | TextGen | vLLM |\n| --- | --- | --- |\n| Kind | Model platform | HTTP API |\n| Vendor | oobabooga | vLLM project (PyTorch Foundation) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | API key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | AGPL-3.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-05-20 | 2026-10-02 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 48k stars | 93k stars |\n\n## Verdicts\n\n**TextGen.** AGPL-3.0 with no telemetry, and a local API on 127.0.0.1:5000 that checks the Host header, limits CORS to localhost and separates an admin key from the caller's key. No release since v4.9 on 20 May 2026, no code commits since 31 May, no test suite, and ten security advisories in the year, all fixed.\n\n**vLLM.** Apache-2.0 software with a release about every two weeks, each with notes that list breaking changes and security fixes. The optional API key covers only some path prefixes, so `/invocations` and control routes such as `/pause` answer without it, and at least 81 security advisories were published in the 12 months to 9 October 2026.\n\n## Before you call either\n\n### TextGen\n\n1. Ask the owner to launch with `--api`. Nothing listens on port 5000 without it, and a model must be loaded first\n2. Call `http://127.0.0.1:5000/v1`. Any Host header other than localhost or 127.0.0.1 gets 400 `Invalid host header` unless `--listen` is set\n3. Send the key as `Authorization: Bearer` on OpenAI routes and as `x-api-key` on `/v1/messages`. Model loading needs the admin key\n4. Read `http://127.0.0.1:5000/docs` or `modules/api/typing.py` for parameters. `max_tokens` defaults to 512 on chat completions\n5. Run tool calls yourself. The API returns `finish_reason: \"tool_calls\"` and executes nothing on the server\n6. Use the repository name `oobabooga/textgen`. The old `text-generation-webui` URL redirects\n\n### vLLM\n\n1. Put a reverse proxy that allowlists routes in front of the server. `--api-key` leaves `/invocations` and the control routes open\n2. Pass `--host 127.0.0.1` for single-machine use. With no `--host` the server listens on every interface\n3. Set `VLLM_NO_USAGE_STATS=1` or `DO_NOT_TRACK=1` before starting if nothing should be sent to stats.vllm.ai\n4. Start with `--enable-auto-tool-choice` and the `--tool-call-parser` for the model before sending tools. Tool calling is off without them\n5. Send `max_tokens` on every request, and read the breaking changes section of the release notes before upgrading a minor version\n\n## Questions\n\n### Which is better for AI agents, TextGen or vLLM?\n\nvLLM scores 57.7 (C) on agent readiness against TextGen's 45.1 (E), and leads in 6 of 7 scored categories.\n\n### Can an agent call TextGen and vLLM without installing anything?\n\nNo hosted endpoint is listed for TextGen. No hosted endpoint is listed for vLLM.\n\n### Are TextGen and vLLM open source?\n\nYes. TextGen is open source (AGPL-3.0). vLLM is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm.json, and with the fewest tokens: https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"text-generation-webui\", \"b\": \"vllm\"}`. From a terminal: `anchor compare text-generation-webui vllm`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/text-generation-webui.json and https://www.anchorterminal.com/api/v1/tools/vllm.json\n\n## Other comparisons with TextGen or vLLM\n\n- [AnythingLLM vs TextGen](https://www.anchorterminal.com/compare/anythingllm-vs-text-generation-webui.md)\n- [AnythingLLM vs vLLM](https://www.anchorterminal.com/compare/anythingllm-vs-vllm.md)\n- [Docker Model Runner vs TextGen](https://www.anchorterminal.com/compare/docker-model-runner-vs-text-generation-webui.md)\n- [Docker Model Runner vs vLLM](https://www.anchorterminal.com/compare/docker-model-runner-vs-vllm.md)\n- [Foundry Local vs TextGen](https://www.anchorterminal.com/compare/foundry-local-vs-text-generation-webui.md)\n- [Foundry Local vs vLLM](https://www.anchorterminal.com/compare/foundry-local-vs-vllm.md)\n- [Core vs TextGen](https://www.anchorterminal.com/compare/ghost-core-vs-text-generation-webui.md)\n- [Core vs vLLM](https://www.anchorterminal.com/compare/ghost-core-vs-vllm.md)\n- [GPT4All vs TextGen](https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui.md)\n- [GPT4All vs vLLM](https://www.anchorterminal.com/compare/gpt4all-vs-vllm.md)\n- [Jan vs TextGen](https://www.anchorterminal.com/compare/jan-vs-text-generation-webui.md)\n- [Jan vs vLLM](https://www.anchorterminal.com/compare/jan-vs-vllm.md)\n- [Khoj vs TextGen](https://www.anchorterminal.com/compare/khoj-vs-text-generation-webui.md)\n- [Khoj vs vLLM](https://www.anchorterminal.com/compare/khoj-vs-vllm.md)\n- [KoboldCpp vs TextGen](https://www.anchorterminal.com/compare/koboldcpp-vs-text-generation-webui.md)\n- [KoboldCpp vs vLLM](https://www.anchorterminal.com/compare/koboldcpp-vs-vllm.md)\n- [Lemonade vs TextGen](https://www.anchorterminal.com/compare/lemonade-vs-text-generation-webui.md)\n- [Lemonade vs vLLM](https://www.anchorterminal.com/compare/lemonade-vs-vllm.md)\n- [llama.cpp vs TextGen](https://www.anchorterminal.com/compare/llama-cpp-vs-text-generation-webui.md)\n- [llama.cpp vs vLLM](https://www.anchorterminal.com/compare/llama-cpp-vs-vllm.md)\n- [LM Studio vs TextGen](https://www.anchorterminal.com/compare/lm-studio-vs-text-generation-webui.md)\n- [LM Studio vs vLLM](https://www.anchorterminal.com/compare/lm-studio-vs-vllm.md)\n- [LocalAI vs TextGen](https://www.anchorterminal.com/compare/localai-vs-text-generation-webui.md)\n- [LocalAI vs vLLM](https://www.anchorterminal.com/compare/localai-vs-vllm.md)\n- [MLX LM vs TextGen](https://www.anchorterminal.com/compare/mlx-lm-vs-text-generation-webui.md)\n- [MLX LM vs vLLM](https://www.anchorterminal.com/compare/mlx-lm-vs-vllm.md)\n- [Ollama vs TextGen](https://www.anchorterminal.com/compare/ollama-vs-text-generation-webui.md)\n- [Ollama vs vLLM](https://www.anchorterminal.com/compare/ollama-vs-vllm.md)\n- [Open WebUI vs TextGen](https://www.anchorterminal.com/compare/open-webui-vs-text-generation-webui.md)\n- [Open WebUI vs vLLM](https://www.anchorterminal.com/compare/open-webui-vs-vllm.md)\n- [screenpipe vs TextGen](https://www.anchorterminal.com/compare/screenpipe-vs-text-generation-webui.md)\n- [screenpipe vs vLLM](https://www.anchorterminal.com/compare/screenpipe-vs-vllm.md)\n- [TextGen vs Underdog](https://www.anchorterminal.com/compare/text-generation-webui-vs-underdog.md)\n- [Underdog vs vLLM](https://www.anchorterminal.com/compare/underdog-vs-vllm.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "TextGen vs vLLM", "url": "" } ], "description": "vLLM scores 57.7 (C) to TextGen's 45.1 (E) for local inference. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "TextGen E 45.1", "vLLM C 57.7", "scores" ], "h1": "TextGen vs vLLM", "image": "https://www.anchorterminal.com/assets/og/compare-text-generation-webui-vs-vllm.png", "path": "/compare/text-generation-webui-vs-vllm", "published": "2026-10-01", "section": "tools", "title": "TextGen vs vLLM for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm" }, "tokens": { "markdown": 2550, "slim": 530 }, "version": 1 }