{ "data": { "similar": [ { "grade": "B", "json": "https://www.anchorterminal.com/tools/uipath.json", "name": "UiPath", "score": 68.2, "shared": [ "desktop.rpa", "desktop.orchestration", "desktop.control" ], "slug": "uipath" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/robocorp.json", "name": "Robocorp", "score": 65.5, "shared": [ "desktop.rpa", "desktop.control", "desktop.orchestration" ], "slug": "robocorp" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/robot-framework.json", "name": "Robot Framework", "score": 76.4, "shared": [ "desktop.rpa" ], "slug": "robot-framework" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/autohotkey.json", "name": "AutoHotkey", "score": 52.8, "shared": [ "desktop.control" ], "slug": "autohotkey" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/autoit.json", "name": "AutoIt", "score": 46.3, "shared": [ "desktop.control" ], "slug": "autoit" } ], "tool": { "slug": "automation-anywhere", "name": "Automation Anywhere", "vendor": "Automation Anywhere", "vendorUrl": "https://www.automationanywhere.com", "kind": "http-api", "category": "desktop-automation", "summary": "Automation Anywhere's Automation 360 is a cloud robotic process automation platform whose Control Room deploys bots that operate desktop and web applications. Outside agents run automations through the Control Room REST API or its MCP inbound endpoint.", "url": "https://www.anchorterminal.com/tools/automation-anywhere", "markdownUrl": "https://www.anchorterminal.com/tools/automation-anywhere.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/automation-anywhere.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/automation-anywhere.json", "license": "Proprietary service under Automation Anywhere's customer agreement and product-specific terms", "transports": [ "http" ], "remoteUrl": "https://\u003ccontrol-room\u003e/mcp", "packages": [], "auth": "mixed", "authNotes": "Control Room API calls carry either `X-Authorization` with a JSON token from the Authentication API or `Authorization: Bearer` with an OAuth token (v.27 and later), not both. MCP inbound uses OAuth 2.0. An administrator registers OAuth services in Settings, creates an OAuth client (regular web or single-page application) under Manage \u003e OAuth client, and enters the client ID, secret and URLs in the MCP client by hand, adding the client's redirect URL afterwards. Users sign in through the Control Room's OIDC or SAML identity provider, and RBAC decides which automations they can discover and run.", "pricing": "freemium", "pricingNotes": "Community Edition is free with no credit card required, for students, developers and small businesses under the stated limits. Paid Automation 360 Cloud plans have no published prices on automationanywhere.com, and the A+ Tokens and Accelerators terms refer to order forms. Whether Community Edition includes Control Room API or MCP inbound access was not stated (checked 2026-10-14).", "priceSummary": "Freemium", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Control Room API pages, the MCP inbound pages or the product-specific terms (checked 2026-10-14).", "endpoints": [] }, "toolCount": 3, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://docs.automationanywhere.com/r/control-room-apis", "llmsTxt": "https://www.automationanywhere.com/llms.txt", "capabilities": [ "desktop.rpa", "desktop.orchestration", "desktop.control" ], "tags": [ "hosted", "official", "oauth", "enterprise", "mcp", "closed-source", "audit-log", "freemium" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 50.9, "grade": "D", "agentReady": false, "rank": 815, "ranked": true, "rankOf": 1076, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 66, "payments": 15, "reliability": 35, "schema": 55, "security": 64, "transparency": 73 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 35, "points": 7, "reason": "Graded on the hosted Control Room API and MCP inbound. A public status site lists Control Room components by region with incident and maintenance history (20). The history we received showed maintenance notices and Enterprise Knowledge outages without dates, so the 90-day record of Control Room incidents could not be read (5). No rate limits found in the public Control Room API pages (0). No 429 or retry guidance found (0). No SLA found in the product-specific terms (0). The Control Room API is generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 55, "points": 8.94, "reason": "Every Control Room serves Swagger at /swagger/, which needs a Control Room of one's own. The endpoint reference did not render in the pages we could fetch (15 of 25). llms.txt on the website covers marketing pages, and no Markdown docs or docs llms.txt were found (0). Overview pages describe each module's purpose and MCP tool pages say when to use each tool and what fails (10 of 20). MCP inbound variables are typed (String, Number, Boolean, List, Dictionary, DateTime, Record) and marked required or optional (9 of 15). The response code table lists only generic HTTP statuses, with tool troubleshooting notes (6 of 15). Versioned modules v1 to v4, dated deprecations and dated release notes (15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 60, "points": 9.75, "reason": "Three standard MCP tools plus the inbound tools an administrator adds, and DiscoverAutomation returns at most nine matches (22 of 25). Filtering, sorting and pagination documented for list endpoints (20). Generic HTTP statuses with no documented error bodies. GetAutomationResult returns error details for failed runs (9 of 20). No idempotency key or MCP tool annotations found, with 409 for duplicates (4 of 20). Two-step auth before calls, case-sensitive JSON names, and no official SDK found (5 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 64, "points": 11.2, "reason": "OAuth 2.0 bearer tokens or Authentication API tokens, with users authenticated through OIDC or SAML. No scopes beyond `openid` were documented for MCP (20 of 30). RBAC privileges such as View my bots and Run my bots limit discovery and runs, and missing required variables are prompted from the user (12 of 20). AI Governance logs for MCP inbound exist, with no prompt-injection guidance found (4 of 15). Audit log events for agent connection changes and every MCP-triggered run, plus an Audit API (15). A vulnerability disclosure policy with optional compensation and ISO 27001 and SOC 2 claimed on the website. No security.txt (13 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 15, "points": 1.88, "reason": "No x402, MPP or L402 (0). No published prices for paid plans (0). Community Edition is free with no credit card required, but whether it includes API or MCP inbound access was not stated (15 of 20). A person signs up and an administrator creates the OAuth client (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 66, "points": 5.78, "reason": "Cloud build 53728 went out on 7 October 2026 (30). Dated updates on 16 September, 5 October and 7 October 2026 (20). Public release notes and a community forum. Support was not tested (10 of 15). No official SDK and no entry in the official MCP registry (3 of 15). No package to assess (3 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 73, "points": 6.39, "note": "editorial 59, provenance 86", "reason": "Closed service with published website terms, an Intelligent Automation Agreement and product-specific terms (15). The privacy policy, modified 1 April 2026, gives retention rules such as up to 90 days for support data. No DPA or subprocessor list was read (16 of 30). A written API deprecation policy with minimum support and notice periods, and dated end-of-life notices (20). Regions are listed on the status site. Subprocessors were not found (8 of 20)." } ], "assessment": { "date": "2026-10-14", "basis": "public evidence", "confidence": "low", "notes": { "ergonomics": "Three standard MCP tools plus the inbound tools an administrator adds, and DiscoverAutomation returns at most nine matches (22 of 25). Filtering, sorting and pagination documented for list endpoints (20). Generic HTTP statuses with no documented error bodies. GetAutomationResult returns error details for failed runs (9 of 20). No idempotency key or MCP tool annotations found, with 409 for duplicates (4 of 20). Two-step auth before calls, case-sensitive JSON names, and no official SDK found (5 of 15).", "maintenance": "Cloud build 53728 went out on 7 October 2026 (30). Dated updates on 16 September, 5 October and 7 October 2026 (20). Public release notes and a community forum. Support was not tested (10 of 15). No official SDK and no entry in the official MCP registry (3 of 15). No package to assess (3 of 10).", "payments": "No x402, MPP or L402 (0). No published prices for paid plans (0). Community Edition is free with no credit card required, but whether it includes API or MCP inbound access was not stated (15 of 20). A person signs up and an administrator creates the OAuth client (0).", "reliability": "Graded on the hosted Control Room API and MCP inbound. A public status site lists Control Room components by region with incident and maintenance history (20). The history we received showed maintenance notices and Enterprise Knowledge outages without dates, so the 90-day record of Control Room incidents could not be read (5). No rate limits found in the public Control Room API pages (0). No 429 or retry guidance found (0). No SLA found in the product-specific terms (0). The Control Room API is generally available (10).", "schema": "Every Control Room serves Swagger at /swagger/, which needs a Control Room of one's own. The endpoint reference did not render in the pages we could fetch (15 of 25). llms.txt on the website covers marketing pages, and no Markdown docs or docs llms.txt were found (0). Overview pages describe each module's purpose and MCP tool pages say when to use each tool and what fails (10 of 20). MCP inbound variables are typed (String, Number, Boolean, List, Dictionary, DateTime, Record) and marked required or optional (9 of 15). The response code table lists only generic HTTP statuses, with tool troubleshooting notes (6 of 15). Versioned modules v1 to v4, dated deprecations and dated release notes (15).", "security": "OAuth 2.0 bearer tokens or Authentication API tokens, with users authenticated through OIDC or SAML. No scopes beyond `openid` were documented for MCP (20 of 30). RBAC privileges such as View my bots and Run my bots limit discovery and runs, and missing required variables are prompted from the user (12 of 20). AI Governance logs for MCP inbound exist, with no prompt-injection guidance found (4 of 15). Audit log events for agent connection changes and every MCP-triggered run, plus an Audit API (15). A vulnerability disclosure policy with optional compensation and ISO 27001 and SOC 2 claimed on the website. No security.txt (13 of 20).", "transparency": "Closed service with published website terms, an Intelligent Automation Agreement and product-specific terms (15). The privacy policy, modified 1 April 2026, gives retention rules such as up to 90 days for support data. No DPA or subprocessor list was read (16 of 30). A written API deprecation policy with minimum support and notice periods, and dated end-of-life notices (20). Regions are listed on the status site. Subprocessors were not found (8 of 20)." }, "sources": [ { "what": "Control Room APIs overview, versions and deprecation policy", "url": "https://docs.automationanywhere.com/r/control-room-apis/cloud-control-room-apis", "seen": "2026-10-14" }, { "what": "filtering, pagination and sorting", "url": "https://docs.automationanywhere.com/r/control-room-apis/cloud-api-filter-request", "seen": "2026-10-14" }, { "what": "API response codes", "url": "https://docs.automationanywhere.com/r/control-room-apis/common-return-codes", "seen": "2026-10-14" }, { "what": "MCP tools", "url": "https://docs.automationanywhere.com/r/automation-360/mcp-tools-in-automation-anywhere", "seen": "2026-10-14" }, { "what": "MCP inbound tool setup", "url": "https://docs.automationanywhere.com/r/automation-360/set-up-an-mcp-inbound-connection", "seen": "2026-10-14" }, { "what": "MCP inbound OAuth", "url": "https://docs.automationanywhere.com/r/automation-360/oauth-mcp-inbound", "seen": "2026-10-14" }, { "what": "MCP inbound audit log events", "url": "https://docs.automationanywhere.com/r/automation-360/mcp-inbound-audit-log-agent-connections", "seen": "2026-10-14" }, { "what": "v.42 release notes", "url": "https://docs.automationanywhere.com/r/automation-360/automation-360-v42", "seen": "2026-10-14" }, { "what": "cloud service status overview", "url": "https://docs.automationanywhere.com/r/automation-360/cloud-service-status-overview", "seen": "2026-10-14" }, { "what": "status site", "url": "https://status.automationanywhere.digital", "seen": "2026-10-14" }, { "what": "Community Edition", "url": "https://www.automationanywhere.com/products/enterprise/community-edition", "seen": "2026-10-14" }, { "what": "website terms", "url": "https://www.automationanywhere.com/legal/terms", "seen": "2026-10-14" }, { "what": "privacy policy", "url": "https://www.automationanywhere.com/legal/privacy", "seen": "2026-10-14" }, { "what": "product-specific terms", "url": "https://www.automationanywhere.com/legal/product-specific-terms", "seen": "2026-10-14" }, { "what": "vulnerability disclosure policy", "url": "https://www.automationanywhere.com/legal/vulnerability-disclosure-policy", "seen": "2026-10-14" }, { "what": "llms.txt with certification claims", "url": "https://www.automationanywhere.com/llms.txt", "seen": "2026-10-14" } ], "openQuestions": [ "unchecked: the Control Room API endpoint reference and authentication details, which render only in a browser or behind a Control Room's /swagger/", "unchecked: pages under docs.automationanywhere.com/bundle/, which robots.txt disallows for our crawler. A search snippet of one such page said connecting MCP-aware agents was not generally available, which we could not confirm on an allowed page", "unchecked: dated incident history on status.automationanywhere.digital for the last 90 days", "unchecked: whether Community Edition includes Control Room API and MCP inbound access", "unchecked: a cloud SLA, DPA and subprocessor list" ] }, "negative": 0, "verdict": "The Control Room's /mcp endpoint gives an MCP client three standard tools to discover, run and read automations under RBAC, with each run in the audit log. No API rate limits, error catalogue, SLA or prices were found in public pages, and DiscoverAutomation and RunAutomation need an Enterprise licence with the Process Reasoning Engine in the US or Europe.", "bestFor": "A company already running Automation 360 bots that wants an assistant such as Copilot or Claude to find and start them.", "strengths": [ "MCP inbound at https://\u003ccontrol-room\u003e/mcp with DiscoverAutomation, RunAutomation, GetAutomationResult and custom inbound tools with typed input and output variables", "Each run started through MCP is logged as device acquired, bot sent, deployed and finished in the Control Room audit log", "Written API deprecation policy, with at least two years of support and at least a year's notice before end of life", "Filtering, sorting and pagination documented for list endpoints, with Swagger on every Control Room at /swagger/", "Community Edition is free with no credit card required" ], "weaknesses": [ "No API rate limits, 429 handling or retry guidance found in the public Control Room API pages", "The published response code table lists only generic HTTP statuses, with no error bodies", "DiscoverAutomation and RunAutomation need an Enterprise licence with the Process Reasoning Engine, supported in the US and Europe only", "Cloud prices are not published and no SLA was found in the product-specific terms", "MCP OAuth requires manual client setup in the Control Room and supports only the Manual OAuth type in the client" ], "agentNotes": [ "Call DiscoverAutomation with a specific query such as `Discover automations to create invoice in SAP`. It returns at most nine matches", "Keep the job ID from RunAutomation and poll GetAutomationResult until the status leaves Running/InProgress", "Send either `X-Authorization` with a token from the Authentication API or `Authorization: Bearer` from OAuth, never both in one request", "Match the case of every JSON parameter name. The Control Room API treats names as case-sensitive", "Use the v4 WLM endpoints. Eight v3 WLM endpoints were deprecated in v.43 and end with v.46" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.9 } ], "editorialScores": { "ergonomics": 60, "maintenance": 66, "payments": 15, "reliability": 35, "schema": 55, "security": 64, "transparency": 59 }, "provenanceScore": 86 }, "connect": {}, "letme": { "capability": "https://letme.dev/desktop.rpa", "tool": "https://letme.dev/automation-anywhere" }, "notable": [ "MCP inbound tools DiscoverAutomation, RunAutomation and GetAutomationResult. The first two need an Enterprise licence with the Process Reasoning Engine, supported in the US and Europe only (https://docs.automationanywhere.com/r/automation-360/mcp-tools-in-automation-anywhere)", "Custom inbound tools wrap a Task Bot, API Task or AI Agent with a 1 to 128 character tool name, a required description and typed input and output variables (https://docs.automationanywhere.com/r/automation-360/set-up-an-mcp-inbound-connection)", "API versions v1 to v4. Eight v3 WLM endpoints are deprecated from v.43 with end of life at v.46, and v1 Bot Scheduler endpoints end in January 2028 (https://docs.automationanywhere.com/r/control-room-apis/cloud-control-room-apis)", "Automation 360 v.42 was released on 16 September 2026, with Cloud build 53728 on 7 October 2026 (https://docs.automationanywhere.com/r/automation-360/automation-360-v42)", "The website terms, last modified 5 November 2018, forbid collecting information from the sites with automated tools or using automated means to access them (https://www.automationanywhere.com/legal/terms)", "docs.automationanywhere.com's robots.txt disallows everything except listed paths such as /r/*, so the older /bundle/ documentation pages were not read" ], "area": "developer", "details": [ { "label": "Interfaces", "value": "Control Room REST API (v1 to v4 modules, Swagger at https://{control-room}/swagger/) and MCP inbound over HTTP at https://\u003ccontrol-room\u003e/mcp" }, { "label": "Starting a run", "value": "Bot Deploy API v4 deploys bots from the public workspace to Bot Runner devices. Through MCP, RunAutomation starts a bot, process, AI agent or API task and returns a job ID for GetAutomationResult" }, { "label": "MCP tools", "value": "DiscoverAutomation (top nine matches, Enterprise with PRE), RunAutomation (Enterprise with PRE), GetAutomationResult (Base or Enterprise), plus custom inbound tools configured under AI \u003e Agent connections" }, { "label": "Credentials", "value": "Authentication API token in X-Authorization, or OAuth bearer token. MCP inbound uses an OAuth client created by an administrator, with users signing in through OIDC or SAML" }, { "label": "Audit", "value": "Agent connection created, updated and deleted, and device acquired, bot sent, run deployed and run finished for each MCP-triggered run (https://docs.automationanywhere.com/r/automation-360/mcp-inbound-audit-log-agent-connections)" }, { "label": "Deprecation policy", "value": "APIs supported at least two years, then available at least one more year (four releases) after a deprecation notice" }, { "label": "Maintenance windows", "value": "Release updates are announced at least two weeks ahead on the status site and typically last two hours per region" }, { "label": "Regions", "value": "Control Room components listed on the status site for the US, Canada, Brazil, Europe, India, Japan, Singapore, Australia, Bahrain and South Africa" }, { "label": "Free tier", "value": "Community Edition on Automation 360 Cloud, free with no credit card required, for students, developers and organisations below 250 machines, 250 users or $5 million revenue" } ], "provenance": { "legalEntity": "Automation Anywhere, Inc.", "domain": "automationanywhere.com", "domainRegistered": "2006-02-15", "domainNote": "Cloud Control Rooms answer on customer subdomains of automationanywhere.digital, for example https://abc-prod-automationanywhere.digital per the MCP docs. www.automationanywhere.com/.well-known/security.txt returns 404.", "endpointOnVendorDomain": true, "terms": "https://www.automationanywhere.com/legal/terms", "privacy": "https://www.automationanywhere.com/legal/privacy", "statusPage": "https://status.automationanywhere.digital", "changelog": "https://docs.automationanywhere.com/r/automation-360/cloud-release-notes", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The terms link is the website terms, last modified 5 November 2018. Customer use is governed by the Intelligent Automation Agreement and product-specific terms at /legal/intelligent-automation-agreement and /legal/product-specific-terms.", "The privacy policy was last modified on 1 April 2026.", "The vulnerability disclosure policy sends reports to disclosure@automationanywhere.com, promises a response within five business days and allows monetary compensation at the company's discretion.", "The status site is a Site24x7 StatusIQ page. Incident entries were readable but their dates were not in the page we received.", "RDAP for automationanywhere.com gives a registration date of 2006-02-15." ], "score": 86, "checks": [ { "check": "Legal entity named", "value": "Automation Anywhere, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "automationanywhere.com, registered 2006-02-15 (20 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "\u003ccontrol-room\u003e", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects", "points": 8.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects, and has 1 clause that costs points", "points": 8, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.automationanywhere.digital", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.automationanywhere.com/legal/terms", "state": "read", "readAt": "2026-10-14", "statedDate": "2018-11-05", "words": 3892, "points": 8.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Modified: November 5, 2018", "says": "Last updated 2018-11-05" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "…including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of the State of California without giving effect to any choice or conflict of law provision or rule.", "says": "The law of the State of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "…LOSS, DAMAGE, OR INJURY UNDER ANY LEGAL THEORY RELATING IN ANY WAY TO THE SUBJECT MATTER OF THESE TERMS, IN NO EVENT WILL AUTOMATION ANYWHERE’S AGGREGATE LIABILITY TO YOU OR ANY THIRD PARTY EXCEED THE TOTAL AMOUNT OF FEES, IF ANY, PAID BY YOU TO AUTOMATION ANYWHERE IN THE TWELVE (12) MONTH PERIOD PRECEDING THE EVENT G…", "says": "Capped at the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Automation Anywhere has the right to deny access to, and to suspend or terminate your access to, the Sites or to any features or portions thereof, at any time and for any reason, including if you violate these Terms." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You may not copy or post any Content on any network computer or broadcast it in any media without our prior written agreement." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "old", "label": "Has not been updated for three years or more", "found": true, "quote": "Last Modified: November 5, 2018" } ], "notes": [ { "date": "2026-10-14", "text": "Liability is capped at the fees paid in the previous twelve months or 100 US dollars, whichever is less.", "quote": "IN NO EVENT WILL AUTOMATION ANYWHERE’S AGGREGATE LIABILITY TO YOU OR ANY THIRD PARTY EXCEED THE TOTAL AMOUNT OF FEES, IF ANY, PAID BY YOU TO AUTOMATION ANYWHERE IN THE TWELVE (12) MONTH PERIOD PRECEDING THE EVENT GIVING RISE TO THE CLAIM OR U.S. $100.00, WHICHEVER IS LESS." }, { "date": "2026-10-14", "text": "Users grant Automation Anywhere, and third parties it gives access to, a sublicensable licence to copy, modify, reverse engineer and otherwise use their user-generated content.", "quote": "When you provide User-Generated Content, you grant Automation Anywhere, and any third parties Automation Anywhere provides access to such User-Generated Content, a transferable, royalty-free, sub-licensable, non-exclusive, worldwide license" } ] }, { "kind": "privacy", "url": "https://www.automationanywhere.com/legal/privacy", "state": "read", "readAt": "2026-10-14", "statedDate": "2026-04-01", "words": 4942, "points": 8, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Modified: April 1, 2026", "says": "Last updated 2026-04-01" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "We collect this information to help us measure app usage and better understand user demographics and event attendance." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We may retain your personal information for as long as it is needed to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, or enforce our agreements.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Personal information may relate to our customer’s employees, contractors, customers, or service providers." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Automation Anywhere may also share or transfer information, including your personal information, in connection with the sale, transfer, acquisition, merger, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy, or other change or ownership or control by Automation Anywhere or any affiliated…" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "For purposes of the European Union General Data Protection Regulation (GDPR), Automation Anywhere is both a data controller and processor of personal information collected by it via the Site." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "We encourage you to first reach out to us at privacy@automationanywhere.com.", "says": "privacy@automationanywhere.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "…under an agreement that includes jurisdictionally appropriate requirements for such transfers, such as standard contractual clauses.", "says": "Relies on standard contractual clauses" } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "We also use these data for our internal training and quality purposes and to enhance, research, and analyze our service offerings and models.", "costsPoints": true } ], "notes": [ { "date": "2026-10-14", "text": "Personal information collected through use of the services is kept for up to 30 days after the contract ends.", "quote": "(ii) all other personal information collected through use of our services, for up to 30 days after the termination of the applicable contract between you, your company or our customer, and us." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/automation-anywhere.json", "live": { "slug": "automation-anywhere", "probe": { "target": "https://\u003ccontrol-room\u003e/mcp", "method": "get", "lastAt": "2026-10-14T10:27:53.009547599Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "DNS lookup failed", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 25, "samples30d": 25, "days": [ { "date": "2026-10-14", "probes": 25, "ok": 0 } ], "outages": [ { "start": "2026-10-14T08:07:20.705930222Z", "end": "0001-01-01T00:00:00Z", "note": "DNS lookup failed" } ] }, "vendorStatus": { "page": "https://status.automationanywhere.digital", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-14T08:52:44.216279023Z" }, "updatedAt": "2026-10-14T10:27:53.009547599Z" } }, "verify": { "accepts": "a page on automationanywhere.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/automation-anywhere.svg", "body": { "slug": "automation-anywhere", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/automation-anywhere", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/automation-anywhere\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/automation-anywhere.svg\" alt=\"Automation Anywhere on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Automation Anywhere on Anchor Terminal](https://www.anchorterminal.com/badges/automation-anywhere.svg)](https://www.anchorterminal.com/tools/automation-anywhere)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/automation-anywhere\"\u003eAutomation Anywhere on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/automation-anywhere", "json": "https://www.anchorterminal.com/tools/automation-anywhere.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/automation-anywhere.md", "slim": "https://www.anchorterminal.com/tools/automation-anywhere.min.md" }, "markdown": "## Overview\n\n**Grade D · 50.9/100 · rank #815 of 1076 · #5 in Desktop \u0026 mobile app control · not agent-ready · confidence low**\n\n\n## Assessment\n\nThe Control Room's /mcp endpoint gives an MCP client three standard tools to discover, run and read automations under RBAC, with each run in the audit log. No API rate limits, error catalogue, SLA or prices were found in public pages, and DiscoverAutomation and RunAutomation need an Enterprise licence with the Process Reasoning Engine in the US or Europe.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Automation Anywhere (https://www.automationanywhere.com) |\n| Kind | HTTP API |\n| Category | Desktop \u0026 mobile app control (https://www.anchorterminal.com/categories/desktop-automation) |\n| Transport | HTTP |\n| Endpoint | `https://\u003ccontrol-room\u003e/mcp` |\n| Auth | OAuth or key · Control Room API calls carry either `X-Authorization` with a JSON token from the Authentication API or `Authorization: Bearer` with an OAuth token (v.27 and later), not both. MCP inbound uses OAuth 2.0. An administrator registers OAuth services in Settings, creates an OAuth client (regular web or single-page application) under Manage \u003e OAuth client, and enters the client ID, secret and URLs in the MCP client by hand, adding the client's redirect URL afterwards. Users sign in through the Control Room's OIDC or SAML identity provider, and RBAC decides which automations they can discover and run. |\n| Pricing | Freemium (Freemium) · Community Edition is free with no credit card required, for students, developers and small businesses under the stated limits. Paid Automation 360 Cloud plans have no published prices on automationanywhere.com, and the A+ Tokens and Accelerators terms refer to order forms. Whether Community Edition includes Control Room API or MCP inbound access was not stated (checked 2026-10-14). |\n| x402 | No · No x402, MPP or L402 in the Control Room API pages, the MCP inbound pages or the product-specific terms (checked 2026-10-14). |\n| Licence | Proprietary service under Automation Anywhere's customer agreement and product-specific terms |\n| Tools exposed | 3 |\n| Docs | https://docs.automationanywhere.com/r/control-room-apis |\n| llms.txt | https://www.automationanywhere.com/llms.txt |\n| Last release | 2026-10-07 |\n| Interfaces | Control Room REST API (v1 to v4 modules, Swagger at https://{control-room}/swagger/) and MCP inbound over HTTP at https://\u003ccontrol-room\u003e/mcp |\n| Starting a run | Bot Deploy API v4 deploys bots from the public workspace to Bot Runner devices. Through MCP, RunAutomation starts a bot, process, AI agent or API task and returns a job ID for GetAutomationResult |\n| MCP tools | DiscoverAutomation (top nine matches, Enterprise with PRE), RunAutomation (Enterprise with PRE), GetAutomationResult (Base or Enterprise), plus custom inbound tools configured under AI \u003e Agent connections |\n| Credentials | Authentication API token in X-Authorization, or OAuth bearer token. MCP inbound uses an OAuth client created by an administrator, with users signing in through OIDC or SAML |\n| Audit | Agent connection created, updated and deleted, and device acquired, bot sent, run deployed and run finished for each MCP-triggered run (https://docs.automationanywhere.com/r/automation-360/mcp-inbound-audit-log-agent-connections) |\n| Deprecation policy | APIs supported at least two years, then available at least one more year (four releases) after a deprecation notice |\n| Maintenance windows | Release updates are announced at least two weeks ahead on the status site and typically last two hours per region |\n| Regions | Control Room components listed on the status site for the US, Canada, Brazil, Europe, India, Japan, Singapore, Australia, Bahrain and South Africa |\n| Free tier | Community Edition on Automation 360 Cloud, free with no credit card required, for students, developers and organisations below 250 machines, 250 users or $5 million revenue |\n| Capabilities | desktop.rpa, desktop.orchestration, desktop.control |\n| Tags | hosted, official, oauth, enterprise, mcp, closed-source, audit-log, freemium |\n| JSON | https://www.anchorterminal.com/api/v1/tools/automation-anywhere.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-14 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: low. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 35 | 7.0 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 55 | 8.9 |\n| Agent ergonomics | 13% | 16.2 | 60 | 9.8 |\n| Security \u0026 auth | 14% | 17.5 | 64 | 11.2 |\n| Payments \u0026 pricing | 10% | 12.5 | 15 | 1.9 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 66 | 5.8 |\n| Transparency \u0026 trust (editorial 59, provenance 86) | 7% | 8.8 | 73 | 6.4 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **50.9 → D** |\n\n### Why each score\n\n- Reliability 35: Graded on the hosted Control Room API and MCP inbound. A public status site lists Control Room components by region with incident and maintenance history (20). The history we received showed maintenance notices and Enterprise Knowledge outages without dates, so the 90-day record of Control Room incidents could not be read (5). No rate limits found in the public Control Room API pages (0). No 429 or retry guidance found (0). No SLA found in the product-specific terms (0). The Control Room API is generally available (10).\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 55: Every Control Room serves Swagger at /swagger/, which needs a Control Room of one's own. The endpoint reference did not render in the pages we could fetch (15 of 25). llms.txt on the website covers marketing pages, and no Markdown docs or docs llms.txt were found (0). Overview pages describe each module's purpose and MCP tool pages say when to use each tool and what fails (10 of 20). MCP inbound variables are typed (String, Number, Boolean, List, Dictionary, DateTime, Record) and marked required or optional (9 of 15). The response code table lists only generic HTTP statuses, with tool troubleshooting notes (6 of 15). Versioned modules v1 to v4, dated deprecations and dated release notes (15).\n- Agent ergonomics 60: Three standard MCP tools plus the inbound tools an administrator adds, and DiscoverAutomation returns at most nine matches (22 of 25). Filtering, sorting and pagination documented for list endpoints (20). Generic HTTP statuses with no documented error bodies. GetAutomationResult returns error details for failed runs (9 of 20). No idempotency key or MCP tool annotations found, with 409 for duplicates (4 of 20). Two-step auth before calls, case-sensitive JSON names, and no official SDK found (5 of 15).\n- Security \u0026 auth 64: OAuth 2.0 bearer tokens or Authentication API tokens, with users authenticated through OIDC or SAML. No scopes beyond `openid` were documented for MCP (20 of 30). RBAC privileges such as View my bots and Run my bots limit discovery and runs, and missing required variables are prompted from the user (12 of 20). AI Governance logs for MCP inbound exist, with no prompt-injection guidance found (4 of 15). Audit log events for agent connection changes and every MCP-triggered run, plus an Audit API (15). A vulnerability disclosure policy with optional compensation and ISO 27001 and SOC 2 claimed on the website. No security.txt (13 of 20).\n- Payments \u0026 pricing 15: No x402, MPP or L402 (0). No published prices for paid plans (0). Community Edition is free with no credit card required, but whether it includes API or MCP inbound access was not stated (15 of 20). A person signs up and an administrator creates the OAuth client (0).\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 66: Cloud build 53728 went out on 7 October 2026 (30). Dated updates on 16 September, 5 October and 7 October 2026 (20). Public release notes and a community forum. Support was not tested (10 of 15). No official SDK and no entry in the official MCP registry (3 of 15). No package to assess (3 of 10).\n- Transparency \u0026 trust 73: Closed service with published website terms, an Intelligent Automation Agreement and product-specific terms (15). The privacy policy, modified 1 April 2026, gives retention rules such as up to 90 days for support data. No DPA or subprocessor list was read (16 of 30). A written API deprecation policy with minimum support and notice periods, and dated end-of-life notices (20). Regions are listed on the status site. Subprocessors were not found (8 of 20).\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (15 items): https://www.anchorterminal.com/fixes/automation-anywhere.md (JSON https://www.anchorterminal.com/fixes/automation-anywhere.json)\n\n### What we couldn't check\n\n- unchecked: the Control Room API endpoint reference and authentication details, which render only in a browser or behind a Control Room's /swagger/\n- unchecked: pages under docs.automationanywhere.com/bundle/, which robots.txt disallows for our crawler. A search snippet of one such page said connecting MCP-aware agents was not generally available, which we could not confirm on an allowed page\n- unchecked: dated incident history on status.automationanywhere.digital for the last 90 days\n- unchecked: whether Community Edition includes Control Room API and MCP inbound access\n- unchecked: a cloud SLA, DPA and subprocessor list\n\n### Sources\n\n- Control Room APIs overview, versions and deprecation policy: \u003chttps://docs.automationanywhere.com/r/control-room-apis/cloud-control-room-apis\u003e (seen 2026-10-14)\n- filtering, pagination and sorting: \u003chttps://docs.automationanywhere.com/r/control-room-apis/cloud-api-filter-request\u003e (seen 2026-10-14)\n- API response codes: \u003chttps://docs.automationanywhere.com/r/control-room-apis/common-return-codes\u003e (seen 2026-10-14)\n- MCP tools: \u003chttps://docs.automationanywhere.com/r/automation-360/mcp-tools-in-automation-anywhere\u003e (seen 2026-10-14)\n- MCP inbound tool setup: \u003chttps://docs.automationanywhere.com/r/automation-360/set-up-an-mcp-inbound-connection\u003e (seen 2026-10-14)\n- MCP inbound OAuth: \u003chttps://docs.automationanywhere.com/r/automation-360/oauth-mcp-inbound\u003e (seen 2026-10-14)\n- MCP inbound audit log events: \u003chttps://docs.automationanywhere.com/r/automation-360/mcp-inbound-audit-log-agent-connections\u003e (seen 2026-10-14)\n- v.42 release notes: \u003chttps://docs.automationanywhere.com/r/automation-360/automation-360-v42\u003e (seen 2026-10-14)\n- cloud service status overview: \u003chttps://docs.automationanywhere.com/r/automation-360/cloud-service-status-overview\u003e (seen 2026-10-14)\n- status site: \u003chttps://status.automationanywhere.digital\u003e (seen 2026-10-14)\n- Community Edition: \u003chttps://www.automationanywhere.com/products/enterprise/community-edition\u003e (seen 2026-10-14)\n- website terms: \u003chttps://www.automationanywhere.com/legal/terms\u003e (seen 2026-10-14)\n- privacy policy: \u003chttps://www.automationanywhere.com/legal/privacy\u003e (seen 2026-10-14)\n- product-specific terms: \u003chttps://www.automationanywhere.com/legal/product-specific-terms\u003e (seen 2026-10-14)\n- vulnerability disclosure policy: \u003chttps://www.automationanywhere.com/legal/vulnerability-disclosure-policy\u003e (seen 2026-10-14)\n- llms.txt with certification claims: \u003chttps://www.automationanywhere.com/llms.txt\u003e (seen 2026-10-14)\n\n## Who's behind it (provenance 86/100, checked 2026-10-14)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Automation Anywhere, Inc. | 20/20 |\n| Domain age | automationanywhere.com, registered 2006-02-15 (20 years) | 15/15 |\n| Endpoint on the vendor's domain | \u003ccontrol-room\u003e | 15/15 |\n| Terms of service | read, states 5 of the 7 things a reader expects | 8.3/10 |\n| Privacy policy | read, states 8 of the 8 things a reader expects, and has 1 clause that costs points | 8/10 |\n| Status page | status.automationanywhere.digital | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | not found | 0/10 |\n\nCloud Control Rooms answer on customer subdomains of automationanywhere.digital, for example https://abc-prod-automationanywhere.digital per the MCP docs. www.automationanywhere.com/.well-known/security.txt returns 404.\n\nThe terms link is the website terms, last modified 5 November 2018. Customer use is governed by the Intelligent Automation Agreement and product-specific terms at /legal/intelligent-automation-agreement and /legal/product-specific-terms.\n\nThe privacy policy was last modified on 1 April 2026.\n\nThe vulnerability disclosure policy sends reports to disclosure@automationanywhere.com, promises a response within five business days and allows monetary compensation at the company's discretion.\n\nThe status site is a Site24x7 StatusIQ page. Incident entries were readable but their dates were not in the page we received.\n\nRDAP for automationanywhere.com gives a registration date of 2006-02-15.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://www.automationanywhere.com/legal/terms), read 2026-10-14, dated 2018-11-05, states 5 of the 7 things a reader expects.\n\n- To know. Has not been updated for three years or more. \"Last Modified: November 5, 2018\"\n- Gives the date it was last updated. Last updated 2018-11-05.\n- Names the governing law or courts. The law of the State of California.\n- States a limit on its liability. Capped at the fees paid in the 12 months before the claim.\n- Not found in the text. Says how changes to the terms are announced.\n- Not found in the text. Refers to a service level or uptime commitment.\n- Also in the text (2026-10-14). Liability is capped at the fees paid in the previous twelve months or 100 US dollars, whichever is less. \"IN NO EVENT WILL AUTOMATION ANYWHERE’S AGGREGATE LIABILITY TO YOU OR ANY THIRD PARTY EXCEED THE TOTAL AMOUNT OF FEES, IF ANY, PAID BY YOU TO AUTOMATION ANYWHERE IN THE TWELVE (12) MONTH PERIOD PRECEDING THE EVENT GIVING RISE TO THE CLAIM OR U.S. $100.00, WHICHEVER IS LESS.\"\n- Also in the text (2026-10-14). Users grant Automation Anywhere, and third parties it gives access to, a sublicensable licence to copy, modify, reverse engineer and otherwise use their user-generated content. \"When you provide User-Generated Content, you grant Automation Anywhere, and any third parties Automation Anywhere provides access to such User-Generated Content, a transferable, royalty-free, sub-licensable, non-exclusive, worldwide license\"\n\n**Privacy policy** (https://www.automationanywhere.com/legal/privacy), read 2026-10-14, dated 2026-04-01, states 8 of the 8 things a reader expects.\n\n- To know. Says it may use customer content to train or improve models, and no opt-out was found (costs points). \"We also use these data for our internal training and quality purposes and to enhance, research, and analyze our service offerings and models.\"\n- Gives the date it was last updated. Last updated 2026-04-01.\n- Says how long data is kept. For as long as needed, with no period named.\n- Gives a privacy contact. privacy@automationanywhere.com.\n- Says where data is transferred or stored. Relies on standard contractual clauses.\n- Also in the text (2026-10-14). Personal information collected through use of the services is kept for up to 30 days after the contract ends. \"(ii) all other personal information collected through use of our services, for up to 30 days after the termination of the applicable contract between you, your company or our customer, and us.\"\n\n## Live (updated 2026-10-14 10:27 UTC)\n\n- Right now: down, n/a, checked 2026-10-14 10:27 UTC (get on `https://\u003ccontrol-room\u003e/mcp`)\n- Uptime 24h 0.0% (25 probes) · 30 days 0.0% (25 probes) · p50 n/a · p95 n/a\n- Vendor status page: unknown, no machine-readable status found\n- Always current: https://www.anchorterminal.com/api/v1/live/automation-anywhere.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- MCP inbound at https://\u003ccontrol-room\u003e/mcp with DiscoverAutomation, RunAutomation, GetAutomationResult and custom inbound tools with typed input and output variables\n- Each run started through MCP is logged as device acquired, bot sent, deployed and finished in the Control Room audit log\n- Written API deprecation policy, with at least two years of support and at least a year's notice before end of life\n- Filtering, sorting and pagination documented for list endpoints, with Swagger on every Control Room at /swagger/\n- Community Edition is free with no credit card required\n\n## Weaknesses\n\n- No API rate limits, 429 handling or retry guidance found in the public Control Room API pages\n- The published response code table lists only generic HTTP statuses, with no error bodies\n- DiscoverAutomation and RunAutomation need an Enterprise licence with the Process Reasoning Engine, supported in the US and Europe only\n- Cloud prices are not published and no SLA was found in the product-specific terms\n- MCP OAuth requires manual client setup in the Control Room and supports only the Manual OAuth type in the client\n\n## Before you call it (notes for agents)\n\n1. Call DiscoverAutomation with a specific query such as `Discover automations to create invoice in SAP`. It returns at most nine matches\n2. Keep the job ID from RunAutomation and poll GetAutomationResult until the status leaves Running/InProgress\n3. Send either `X-Authorization` with a token from the Authentication API or `Authorization: Bearer` from OAuth, never both in one request\n4. Match the case of every JSON parameter name. The Control Room API treats names as case-sensitive\n5. Use the v4 WLM endpoints. Eight v3 WLM endpoints were deprecated in v.43 and end with v.46\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| UiPath | B | 68.2 | 237 | desktop.rpa, desktop.orchestration, desktop.control | no | https://www.anchorterminal.com/tools/uipath.md |\n| Robocorp | B | 65.5 | 337 | desktop.rpa, desktop.control, desktop.orchestration | no | https://www.anchorterminal.com/tools/robocorp.md |\n| Robot Framework | BB | 76.4 | 35 | desktop.rpa | no | https://www.anchorterminal.com/tools/robot-framework.md |\n| AutoHotkey | D | 52.8 | 771 | desktop.control | no | https://www.anchorterminal.com/tools/autohotkey.md |\n| AutoIt | D | 46.3 | 913 | desktop.control | no | https://www.anchorterminal.com/tools/autoit.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- MCP inbound tools DiscoverAutomation, RunAutomation and GetAutomationResult. The first two need an Enterprise licence with the Process Reasoning Engine, supported in the US and Europe only (source: \u003chttps://docs.automationanywhere.com/r/automation-360/mcp-tools-in-automation-anywhere\u003e)\n- Custom inbound tools wrap a Task Bot, API Task or AI Agent with a 1 to 128 character tool name, a required description and typed input and output variables (source: \u003chttps://docs.automationanywhere.com/r/automation-360/set-up-an-mcp-inbound-connection\u003e)\n- API versions v1 to v4. Eight v3 WLM endpoints are deprecated from v.43 with end of life at v.46, and v1 Bot Scheduler endpoints end in January 2028 (source: \u003chttps://docs.automationanywhere.com/r/control-room-apis/cloud-control-room-apis\u003e)\n- Automation 360 v.42 was released on 16 September 2026, with Cloud build 53728 on 7 October 2026 (source: \u003chttps://docs.automationanywhere.com/r/automation-360/automation-360-v42\u003e)\n- The website terms, last modified 5 November 2018, forbid collecting information from the sites with automated tools or using automated means to access them (source: \u003chttps://www.automationanywhere.com/legal/terms\u003e)\n- docs.automationanywhere.com's robots.txt disallows everything except listed paths such as /r/*, so the older /bundle/ documentation pages were not read\n\n- #5 of 6 in Best desktop and mobile app automation for AI agents: https://www.anchorterminal.com/best/desktop-automation/index.md\n- All 15 desktop comparisons: https://www.anchorterminal.com/compare/desktop-automation/index.md\n\n## Compare\n\n- [AutoHotkey vs Automation Anywhere](https://www.anchorterminal.com/compare/autohotkey-vs-automation-anywhere.md): D 52.8 vs D 50.9\n- [AutoIt vs Automation Anywhere](https://www.anchorterminal.com/compare/autoit-vs-automation-anywhere.md): D 46.3 vs D 50.9\n- [Automation Anywhere vs Robocorp](https://www.anchorterminal.com/compare/automation-anywhere-vs-robocorp.md): D 50.9 vs B 65.5\n- [Automation Anywhere vs Robot Framework](https://www.anchorterminal.com/compare/automation-anywhere-vs-robot-framework.md): D 50.9 vs BB 76.4\n- [Automation Anywhere vs UiPath](https://www.anchorterminal.com/compare/automation-anywhere-vs-uipath.md): D 50.9 vs B 68.2\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on automationanywhere.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"automation-anywhere\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/automation-anywhere\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/automation-anywhere.svg\" alt=\"Automation Anywhere on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Automation Anywhere on Anchor Terminal](https://www.anchorterminal.com/badges/automation-anywhere.svg)](https://www.anchorterminal.com/tools/automation-anywhere)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/automation-anywhere\"\u003eAutomation Anywhere on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Automation Anywhere is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/automation-anywhere-dark.png\n- Light: https://www.anchorterminal.com/assets/share/automation-anywhere-light.png\n- Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=automation-anywhere\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Desktop \u0026 mobile app control", "url": "https://www.anchorterminal.com/categories/desktop-automation" }, { "name": "Automation Anywhere", "url": "" } ], "description": "Automation Anywhere's Automation 360 is a cloud robotic process automation platform whose Control Room deploys bots that operate desktop and web applications. Outside agents run automations through the Control Room REST API or its MCP inbound endpoint.", "facts": [ "rank #815 of 1076", "OAuth or key auth", "0 desk reviews" ], "h1": "Automation Anywhere", "image": "https://www.anchorterminal.com/assets/og/tools-automation-anywhere.png", "path": "/tools/automation-anywhere", "published": "2026-10-01", "section": "tools", "title": "Automation Anywhere review (2026): pricing, alternatives and grade D", "toc": null, "updated": "2026-10-14", "url": "https://www.anchorterminal.com/tools/automation-anywhere" }, "tokens": { "markdown": 6200, "slim": 1480 }, "version": 1 }