{ "id": "epfk9t1hf4", "slug": "opencode", "title": "OpenCode", "updated": "2026-10-15", "topic_path": [ { "id": "technology", "label": "Technology and the built world", "api_url": "https://www.edgepedia.org/api/v1/topics/technology" }, { "id": "technology.computing", "label": "Computing and digital systems", "api_url": "https://www.edgepedia.org/api/v1/topics/technology.computing" }, { "id": "technology.computing.modern_ai", "label": "Modern AI: foundation models, generative AI, and the AI industry", "api_url": "https://www.edgepedia.org/api/v1/topics/technology.computing.modern_ai" }, { "id": "technology.computing.modern_ai.industry", "label": "AI companies, people, and products", "api_url": "https://www.edgepedia.org/api/v1/topics/technology.computing.modern_ai.industry" }, { "id": "technology.computing.modern_ai.industry.ai_products_assistants", "label": "AI products and assistants", "api_url": "https://www.edgepedia.org/api/v1/topics/technology.computing.modern_ai.industry.ai_products_assistants" }, { "id": "technology.computing.modern_ai.industry.ai_products_assistants.ai-agents-and-developer-tools", "label": "AI agents and developer tools", "api_url": "https://www.edgepedia.org/api/v1/topics/technology.computing.modern_ai.industry.ai_products_assistants.ai-agents-and-developer-tools" } ], "geo": [ { "id": "geo.us.t2021.technology.computing.modern_ai.industry.ai_products_assistants.ai-agents-and-developer-tools", "label": "United States · 2021 and later: AI agents and developer tools", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021.technology.computing.modern_ai.industry.ai_products_assistants.ai-agents-and-developer-tools", "path": [ { "id": "geo.us", "label": "United States", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us" }, { "id": "geo.us.t2021", "label": "United States · 2021 and later", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021" }, { "id": "geo.us.t2021.technology", "label": "Technology and the built world", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021.technology" }, { "id": "geo.us.t2021.technology.computing", "label": "Computing and digital systems", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021.technology.computing" }, { "id": "geo.us.t2021.technology.computing.modern_ai", "label": "Modern AI: foundation models, generative AI, and the AI industry", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021.technology.computing.modern_ai" }, { "id": "geo.us.t2021.technology.computing.modern_ai.industry", "label": "AI companies, people, and products", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021.technology.computing.modern_ai.industry" }, { "id": "geo.us.t2021.technology.computing.modern_ai.industry.ai_products_assistants", "label": "AI products and assistants", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021.technology.computing.modern_ai.industry.ai_products_assistants" }, { "id": "geo.us.t2021.technology.computing.modern_ai.industry.ai_products_assistants.ai-agents-and-developer-tools", "label": "AI agents and developer tools", "api_url": "https://www.edgepedia.org/api/v1/geo/geo.us.t2021.technology.computing.modern_ai.industry.ai_products_assistants.ai-agents-and-developer-tools" } ] } ], "excerpt": "OpenCode is an open-source AI coding agent for the terminal, developed by Anomaly Innovations in TypeScript, that reads and edits files and runs commands across 75+ LLM providers.", "snippet": "OpenCode is an open-source AI coding agent for the terminal, developed by Anomaly Innovations in TypeScript, that reads and edits files and runs commands across 75+ LLM providers.", "node": "technology.computing.modern_ai.industry.ai_products_assistants.ai-agents-and-developer-tools", "markdown": "# OpenCode\n\n**OpenCode** is an open-source AI coding agent for the terminal, developed by Anomaly Innovations, Inc., that connects large language models to a developer's local codebase so the agent can read and edit files, run shell commands, and complete multi-step programming tasks. It is written in [TypeScript](https://www.edgepedia.org/typescript), released under the MIT license, and works with more than 75 LLM providers, including locally hosted models.[1](https://github.com/anomalyco/opencode) • [2](https://dev.opencode.ai/docs/providers) The project is available as a terminal interface, a desktop application, and, in version 2, a web app.[3](https://opencode.ai/v2/docs)\n\n| Key fact | Detail |\n|---|---|\n| What it is | Open-source AI coding agent for the terminal by Anomaly Innovations, Inc.; MIT license, TypeScript[1](https://github.com/anomalyco/opencode) • [4](https://dev.opencode.ai/legal/terms-of-service) |\n| Model support | 75+ LLM providers through the AI SDK and Models.dev, including local models; credentials stored in `~/.local/share/opencode/auth.json`[2](https://dev.opencode.ai/docs/providers) |\n| Built-in agents | `build` (full access) and `plan` (read-only, denies edits and asks before bash), switched with the Tab key[1](https://github.com/anomalyco/opencode) |\n| Adoption | Roughly 650,000 monthly active users grew to nearly 8 million, with almost 1 million daily active users; about 213,000 GitHub stars[5](https://newsletter.pragmaticengineer.com/p/opencode) • [1](https://github.com/anomalyco/opencode) |\n| Security posture | The agent is not sandboxed; the permission system prompts for confirmation but is not security isolation[6](https://github.com/anomalyco/opencode/security) |\n| Commercial plans | OpenCode Zen pay-as-you-go ($20 minimum balance plus a $1.23 card processing fee) and OpenCode Go at $10 per month[7](https://opencode.ai/zen) • [3](https://opencode.ai/v2/docs) |\n| Current versions | v1.19.0 released 11 October 2026; OpenCode 2 available through `opencode upgrade --major`[8](https://github.com/anomalyco/opencode/releases) |\n\n## History\n\nOpenCode has a two-repository origin. Kujtim Hoxha created the first repository, `opencode-ai/opencode`, on 16 March 2025, written in Go. About six weeks later, on 30 April 2025, the team behind SST (Serverless Stack) created a second project with the same name, `sst/opencode`, rewritten in TypeScript. The two developed in parallel, and community issues such as \"Two Parallel Repos\" (May 2025) and \"is this from SST?\" (June 2025) recorded the resulting confusion, including the discovery that the opencode.ai domain pointed to the SST repository rather than the original one.[9](https://opencode.io.vn/blog/opencode-100k-stars-github/)\n\nThe SST-side repository grew faster and eventually became the canonical project. It was transferred to `anomalyco/opencode` under Anomaly Innovations, and the original Go repository was archived on 18 September 2025 with about 10,900 stars. Hoxha left the project that July, announcing that he had continued the work with the Charm team under the new name Crush.[9](https://opencode.io.vn/blog/opencode-100k-stars-github/) A later documentation commit confirmed that the move from `sst/opencode` to `anomalyco/opencode` was a rename of the same repository, not a fork, with the old path issuing a 301 redirect.[10](https://gitea.jordbo.se/joakimp/opencode-devbox/commit/2ac84fa4fb6f9212a9872ec6113158ff9ccb47c5?show-outdated=&style=unified&whitespace=ignore-eol)\n\nDax Raad, co-founder of OpenCode, attributed the project's growth partly to positioning: no competing coding agent had claimed the open-source category, and the team shipped a good-enough harness first and improved it after gaining market share. He also said the team turned Anthropic's blocking of [Claude Code](https://www.edgepedia.org/claude-code) integration into a growth lever by partnering with OpenAI and other model providers.[5](https://newsletter.pragmaticengineer.com/p/opencode)\n\n## Features\n\n**Model-agnostic providers.** OpenCode uses the Vercel AI SDK and the Models.dev catalog to support more than 75 LLM providers, and it can run local models. Providers are added with the `/connect` command and configured in an `opencode.json` file, where a `baseURL` option supports proxies and custom endpoints, and `blacklist` or `whitelist` arrays hide models from the picker.[2](https://dev.opencode.ai/docs/providers) For users who do not want to manage provider configuration, OpenCode Zen offers a curated set of models that the team has tested and benchmarked for coding agents, sold pay-as-you-go with a $20 minimum balance and a $1.23 card processing fee.[7](https://opencode.ai/zen)\n\n**Agents and permissions.** Two built-in primary agents ship by default: `build`, a full-access agent for development work, and `plan`, a read-only agent that denies file edits and asks permission before running bash commands. Custom agents are defined as Markdown files or JSONC configuration entries, combining a system prompt, model preference, and permissions; subagents run in child sessions with fresh context.[1](https://github.com/anomalyco/opencode) • [11](https://docs.opencode.ai/docs/agents/) The permission system supports `allow`, `ask`, and `deny` actions per tool, with wildcard pattern matching that covers built-in, custom, and MCP tools, and per-command bash rules such as allowing `git diff` while asking before `git push`.[11](https://docs.opencode.ai/docs/agents/)\n\n**No sandbox.** The project's security policy states plainly that OpenCode does not sandbox the agent: the permission system exists as a UX feature to keep users aware of what the agent is doing, not as security isolation, and users needing true isolation are told to run OpenCode inside a Docker container or virtual machine. Server mode is opt-in; without the `OPENCODE_SERVER_PASSWORD` setting the HTTP server runs unauthenticated with a warning.[6](https://github.com/anomalyco/opencode/security)\n\n## Adoption and benchmarks\n\nOpenCode is one of the fastest-growing AI developer tools by usage: The Pragmatic Engineer reported growth from roughly 650,000 monthly active users to nearly 8 million, with almost 1 million daily active users, in a May 2026 interview with co-founder Dax Raad.[5](https://newsletter.pragmaticengineer.com/p/opencode) The GitHub repository passed 171,000 stars in early 2026 and stood at about 213,000 stars with 28,500 forks by October 2026.[12](https://www.firecrawl.dev/blog/claude-code-vs-opencode) • [1](https://github.com/anomalyco/opencode) OpenCode is also among the coding agents that adopted Anthropic's Agent Skills as an open standard, alongside [Cursor](https://www.edgepedia.org/cursor-coding-agent), Goose, and Amp.[13](https://www.techradar.com/pro/anthropic-takes-the-fight-to-openai-with-enterprise-ai-tools-and-theyre-going-open-source-too)\n\nBenchmark results depend heavily on the model paired with the harness. One comparison of agentic CLI tools reported OpenCode with the top combined score (81.6%) and the lowest cost of any capable agent at $1.03 per task.[14](https://aimultiple.com/agentic-cli) A controlled Builder.io test holding the model constant ([Claude Sonnet 4](https://www.edgepedia.org/claude-sonnet-4).5) found Claude Code faster, 9 minutes 9 seconds versus 16 minutes 20 seconds across four tasks, while OpenCode wrote more tests, 94 versus 73, and ran the full existing suite; the same test found that all three models inside OpenCode reformatted existing code without being asked, producing noisy diffs.[12](https://www.firecrawl.dev/blog/claude-code-vs-opencode) Academic work on harness effects found that harness choice induces up to a 40-fold difference in tokens per solved task while paired pass-rate differences stay within 0 to 8 percentage points, and identified a model-independent OpenCode failure fingerprint of idle loops that exhaust the time cap; notably, OpenCode does not enforce passing tests before commits, as seen in issues reporting commits and pushes before user verification despite configured approval prompts.[15](https://arxiv.org/abs/2607.22585) • [24](https://github.com/anomalyco/opencode/issues/48751)\n\nAmong the documented problems is issue #3176: while managing sessions, the agent executed `git add .` across every file in the working directory, checking neither repository size nor `.gitignore` rules and asking no permission from the user, which brought a repository holding 54,000 files and 45 GB to a severe degradation.[16](https://techstackups.com/comparisons/coding-agent-harness-comparison-2026/)\n\n## Security incidents\n\nThree advisories have been published on the repository. In January 2026, GHSA-c83v-7274-4vgp (CVE-2026-22813, critical, CVSS 9.4) described how a malicious website could abuse the web UI's server URL override to achieve cross-site scripting on `http://localhost:4096`, then run arbitrary commands through the API's `/pty/` endpoints; versions before 1.1.10 were affected.[17](https://github.com/advisories/GHSA-c83v-7274-4vgp) A companion high-severity advisory, GHSA-vxw4-wv6m-9hhh, covered arbitrary command execution through the unauthenticated HTTP server.[18](https://github.com/anomalyco/opencode/security/advisories/)\n\nIn September 2026, GHSA-632h-h47v-g4x4 (high) showed that a webpage could send a cross-site request to the `/global/upgrade` endpoint of `opencode serve`, which accepted a general npm package specifier as its target and would install an attacker-controlled package whose lifecycle scripts ran with the user's privileges. Versions 1.14.30 through 1.18.21 installed via npm, pnpm, or Bun were affected; version 1.18.22 validated the target as a semantic version and added content-aware request parsing. Datadog Security Labs reported that the 82 vulnerable releases received more than 647,000 downloads between September 17 and 23, about 38.9% of OpenCode downloads in that interval.[19](https://github.com/anomalyco/opencode/security/advisories/GHSA-632h-h47v-g4x4) • [20](https://securebulletin.com/opencode-web-interface-flaw-let-hostile-sites-run-commands-on-developer-pcs/)\n\n## Versions and business\n\nVersion 1.19.0, released 11 October 2026, added `opencode upgrade --major` to move to OpenCode 2 and changed updates to be installed manually through `/update` rather than automatically.[8](https://github.com/anomalyco/opencode/releases) OpenCode 2, built on the Effect framework, is available as a terminal interface, desktop app, or web app accessed with `opencode pair`, and introduces a permissions model of action-resource-effect statements plus experimental binary policies that only ever tighten what permissions allow.[3](https://opencode.ai/v2/docs) • [21](https://dev.opencode.ai/v2/docs/policies) Versions 1 and 2 both use the `opencode` command and cannot be installed side by side under the default name.[22](https://docs.opencode.ai/docs/)\n\nThe commercial side runs through Anomaly Innovations, Inc., which holds SOC 2 Type 1 and Type 2 compliance and describes its mission as open-source developer tools with local-first execution.[23](https://trust.opencode.ai/) Beyond Zen pay-as-you-go, OpenCode Go is a $10 per month subscription granting access to open-source models.[3](https://opencode.ai/v2/docs)\n\n## References\n\n1. [anomalyco/opencode: The open source coding agent, GitHub](https://github.com/anomalyco/opencode)\n2. [Providers | OpenCode documentation](https://dev.opencode.ai/docs/providers)\n3. [Intro | OpenCode 2 documentation](https://opencode.ai/v2/docs)\n4. [OpenCode Terms of Use, Anomaly Innovations, Inc.](https://dev.opencode.ai/legal/terms-of-service)\n5. [Building OpenCode with Dax Raad, The Pragmatic Engineer](https://newsletter.pragmaticengineer.com/p/opencode)\n6. [Security policy, anomalyco/opencode, GitHub](https://github.com/anomalyco/opencode/security)\n7. [OpenCode Zen: reliable optimized models for coding agents](https://opencode.ai/zen)\n8. [Releases, anomalyco/opencode, GitHub](https://github.com/anomalyco/opencode/releases)\n9. [OpenCode vượt 180.000 Stars trên GitHub, OpenCode Vietnam](https://opencode.io.vn/blog/opencode-100k-stars-github/)\n10. [docs(AGENTS): clarify opencode repo moved sst->anomalyco (not a fork)](https://gitea.jordbo.se/joakimp/opencode-devbox/commit/2ac84fa4fb6f9212a9872ec6113158ff9ccb47c5?show-outdated=&style=unified&whitespace=ignore-eol)\n11. [Agents | OpenCode documentation](https://docs.opencode.ai/docs/agents/)\n12. [Claude Code vs OpenCode: Which Terminal AI Coding Agent Should You Use?, Firecrawl](https://www.firecrawl.dev/blog/claude-code-vs-opencode)\n13. [Anthropic takes the fight to OpenAI with enterprise AI tools, TechRadar](https://www.techradar.com/pro/anthropic-takes-the-fight-to-openai-with-enterprise-ai-tools-and-theyre-going-open-source-too)\n14. [Agentic CLI Tools Compared: Claude Code vs Cline vs Aider, AIMultiple](https://aimultiple.com/agentic-cli)\n15. [The Scaffold Effect in Coding Agents: Harness Choice as a Hidden Variable, arXiv](https://arxiv.org/abs/2607.22585)\n16. [Coding Agent Harness Comparison 2026, Tech Stackups](https://techstackups.com/comparisons/coding-agent-harness-comparison-2026/)\n17. [CVE-2026-22813 / GHSA-c83v-7274-4vgp, GitHub Advisory Database](https://github.com/advisories/GHSA-c83v-7274-4vgp)\n18. [Security Advisories, anomalyco/opencode, GitHub](https://github.com/anomalyco/opencode/security/advisories/)\n19. [GHSA-632h-h47v-g4x4: Cross-site OpenCode server upgrade request, GitHub Advisory](https://github.com/anomalyco/opencode/security/advisories/GHSA-632h-h47v-g4x4)\n20. [OpenCode Web Interface Flaw Let Hostile Sites Run Commands on Developer PCs, Secure Bulletin](https://securebulletin.com/opencode-web-interface-flaw-let-hostile-sites-run-commands-on-developer-pcs/)\n21. [Policies | OpenCode 2 documentation](https://dev.opencode.ai/v2/docs/policies)\n22. [Intro | AI coding agent built for the terminal, OpenCode docs](https://docs.opencode.ai/docs/)\n23. [Anomaly Innovations, Inc Security Trust Center](https://trust.opencode.ai/)\n24. [Agent commits and pushes untested/incomplete changes without user approval despite global permission config · Issue #48751 · anomalyco/opencode](https://github.com/anomalyco/opencode/issues/48751)\n\n---\n*Topic: Encyclopedia › Technology and the built world › Computing and digital systems › Modern AI: foundation models, generative AI, and the AI industry › AI companies, people, and products › AI products and assistants › AI agents and developer tools*\n\n*Initially written Sep 17, 2026 · Reviewed: Sep 19, 2026; Oct 15, 2026 · Edited: Sep 19, 2026; Oct 11, 2026; Oct 15, 2026 · Last review: Oct 15, 2026*\n\n*Copyright 2026 EdgeChat AI, a subsidiary of Biostate AI.*\n\nLicense: Edgepedia Community License 1.0, https://www.edgepedia.org/edgepedia/license\n", "same_as": [], "url": "https://www.edgepedia.org/opencode", "markdown_url": "https://www.edgepedia.org/opencode.md", "license": { "name": "Edgepedia Community License 1.0", "url": "https://www.edgepedia.org/edgepedia/license", "summary": "Free with credit, commercial use included. AI training is open to everyone. For other uses, organizations over USD 100M in revenue or 100M monthly users license separately.", "spdx": "LicenseRef-Edgepedia-Community-1.0" }, "credit": "\"OpenCode\", Edgepedia (EdgeChat), https://www.edgepedia.org/opencode. Edgepedia Community License 1.0.", "credit_md": "\"[OpenCode](https://www.edgepedia.org/opencode)\", Edgepedia (EdgeChat), [https://www.edgepedia.org/opencode](https://www.edgepedia.org/opencode). [Edgepedia Community License 1.0](https://www.edgepedia.org/edgepedia/license).", "credit_html": "\"OpenCode\", Edgepedia (EdgeChat), https://www.edgepedia.org/opencode. Edgepedia Community License 1.0.", "speakable": "OpenCode is an open-source AI coding agent for the terminal, developed by Anomaly Innovations in TypeScript, that reads and edits files and runs commands across 75+ LLM providers." }