Independent register of AI agents & harnesses · no sponsored placementsEdition 2026-09 · 107 entries · evidence to 26 Sept 2026
AgentsWisdom

The Register / Coding agents / Warp

Register entry · Coding agents · updated 26 Sept 2026

Warp

Warp (Denver Technologies, Inc.) · Coding agents

Warp is a Rust terminal that has grown into what the vendor calls an agentic development environment: local agents with plans, diff review and approval cards, a standalone Warp Agent CLI (August 2026), and cloud agents run through its Oz orchestration platform and Warp Factories (early access, August 2026). It is multi-model (OpenAI, Anthropic, Google, xAI, open models) and can host third-party CLI agents. The client was open-sourced under AGPL-3.0 in April 2026; AI usage is billed in credits.

warp.devSource repositoryDocsPricing

What reviewers and users praise

  • Terminal UX (editor-style input, blocks, failed-command suggestions) praised even by users who disable the AI (HN open-source and Agent CLI threads)
  • Agent mode with planning, diff review and cloud agents is usable for real work (XDA review)
  • Open-sourcing the client addressed the long-standing trust complaint about a closed terminal (Developers Digest; Jonathan Fulton)

What they criticise

  • Repeated pricing changes and credit-based billing drew sustained complaints (HN Oct 2025 pricing thread; r/warpdotdev posts Nov 2025 to Jun 2026)
  • Users report bloat and bugs as AI features were added, and AI settings resetting after updates (HN Apr and Aug 2026)
  • Ten GitHub security advisories (nine high severity) published on 2026-06-09
  • Code is sent server-side to build codebase-indexing embeddings, which are retained (XDA review)

Rating · evidence to 26 Sept 2026

65
  • No. 12 of 16 in category
  • High confidence
  • Trust B
  • Open source
Adoption78
Experts67
Crowd45
Experts vs the crowdcrowd cooler by 22
Experts67
Crowd45
PriceFree, paid from $20
Use it viaDesktop app, CLI, Web app, API, MCP server
Runs onmacos, linux, windows
LicenceAGPL-3.0
UpdatedEvidence collected 26 Sept 2026

How the rating was worked out

Weights for Coding agents: adoption 35%, experts 40%, crowd 25%. Pillars without enough evidence are left out and the others re-weighted. The method.

Adoption & momentumweight 35%78GitHub stars 65k → 85 · Reported users 800k → 51 · 14 releases in 90 days → 100
reach × 0.7 + momentum × 0.3
Expertsindependent reviews · weight 40%673 independent reviews (2 positive · 1 mixed · 0 negative), averaged toward 50 for small samples.
Benchmarks, shown not scored: Terminal-Bench 2.0 No. 28 of 43 (Warp + Multiple) · SWE-bench Verified No. 8 of 77 (Warp + Multiple)
Crowdcommunity sample · weight 25%4513 dated posts from hackernews, reddit: 4 positive · 3 mixed · 6 negative
(positive + ½ mixed) ÷ n, averaged toward 50 for small samples
Rating65high confidence (3 of 3 pillars, 13 community posts).

Evidence checks. 1 post over the three-per-thread limit not counted. 1 item could not be checked at the source (the page could not be fetched, or the quote is from a comment under the linked post); kept and marked “unverified”. How evidence is checked.

Editorial adjustment. Incident-history re-grade under methodology revision 2 (see the trust section).

Trust & safety

Seven dimensions graded A–D from documented facts. Overall: B.

B

Permission model

Every agent action is checked against an execution profile (always_ask / always_allow / agent_decides per action type); file edits always show a diff for approval by default; a command denylist applies; auto-approve is opt-in per conversation. No OS-level sandbox for local agents by default (cloud agents run in remote environments). source

B

Data access scope

The local agent works with the user's shell and workspace with broad access; codebase indexing transmits code server-side to build embeddings (XDA). Behaviour is documented; no per-folder allowlist beyond permission profiles found. source

B

Data storage

Agent conversations save to the Warp account (cloud conversation storage, plan-dependent); secret redaction applied to AI interactions; Business/Enterprise get admin-configurable retention policies and Enterprise can self-host cloud agents. source

C

Data retention & training

Warp has ZDR agreements with model providers on all plans (providers do not train or retain). Warp's own privacy policy lists 'training, fine-tuning and improving the performance of models that support our AI features' as a use; team-wide training opt-outs are a Business/Enterprise control, individuals have per-user data controls. Treated as training opt-out only. source

C

Incident history (24 months)

Ten GitHub security advisories published by Warp on 2026-06-09 (nine high, one medium): command injections via git branch names, code-search tool args, external editor, WSL link opening; SSH remote command execution and local file overwrite; OSC 52 clipboard access; denylist bypass via env-var prefixes. All disclosed with CVEs. Regraded from D: Revision 2: serious issues that were each fixed and publicly disclosed grade C; D is kept for unresolved issues or slow or undisclosed fixes. source

A

Compliance

SOC 2 Type II attestation; report available on request via the Warp Trust Center. source

A

Transparency

Client source public under AGPL-3.0 (UI crates MIT) with a detailed weekly public changelog. Cloud services (Oz, Factories) are closed. source

The experts

3 named independent reviews found; dated reviews from the last 12 months are scored.

  • positive
    Warp’s agentic coding is something you can actually useAnurag Singh, XDA Developers · 10 Apr 2026 · xda-developers.com
  • mixed
    some developers see a credible agentic development environment taking shape, while others see a VC-backed terminal wrapping AI into yet another bloated product surface.Developers Digest · 2 May 2026 · developersdigest.tech
  • positive
    Warp’s repo is one of the first open source projects I have seen that really leans into that model.Jonathan Fulton (Jonathan's Musings, Medium) · 3 May 2026 · unverified · medium.com

The crowd

13 coded posts from hackernews, reddit.

4 positive3 mixed6 negative
  • positive
    I really like Warp. It's a lot nicer to be able to visualize what I'm doing in the terminal.Warp is now open-source (item 47936264) · 28 Apr 2026 · news.ycombinator.com
  • mixed
    Great terminal, annoying that everytime it updates I have to go back to the settings to disable new AI features or layout changes.Warp is now open-source (item 47936264) · 28 Apr 2026 · news.ycombinator.com
  • mixed
    +1 use warp every day. Needs some UX improvement around the agent stuff and file editor but I see it as alpha/beta softwareWarp is now open-source (item 47936264) · 28 Apr 2026 · news.ycombinator.com
  • negative
    as they went more and more in on AI the actual terminal features became more and more buggy and I ended up having to go back to WezTerm.The Warp Agent CLI (item 49171766) · 4 Aug 2026 · news.ycombinator.com
  • positive
    My absolute favorite thing about Warp is the function that suggest a new command intelligently when the one I just ran failedThe Warp Agent CLI (item 49171766) · 4 Aug 2026 · news.ycombinator.com
  • mixed
    The other day in warp I literally couldn't run `ls` because it kept interpreting it as a AI command. I still love warp, but some of the stuff is crazy.The Warp Agent CLI (item 49171766) · 4 Aug 2026 · news.ycombinator.com
  • negative
    Warp is so horribly broken right now and has been for weeks.Warp Terminal changes pricing model (item 45772558) · 31 Oct 2025 · news.ycombinator.com
  • negative
    I've noticed a real reduction in quality over the past month or so. I'm now getting random failures, stopping of agents etc.Warp Terminal changes pricing model (item 45772558) · 31 Oct 2025 · news.ycombinator.com

Pricing

As published, checked 26 Sept 2026.

PlanPriceNotes
FreeFreeTerminal features, Warp Agent CLI access, pay-as-you-go credits, bring your own AI inference, limited cloud agents.
Build$20 / monthly1,500 credits ($20 of agent usage at API rates); $18/month billed annually.
Max$200 / monthly18,000 credits; $180/month billed annually.
Business$50 / monthlyPer user, up to 25 seats; 1,500 credits per seat, SAML SSO, admin data controls; $45 billed annually.
EnterpriseCustomUnlimited seats, BYOLLM, self-hosted cloud agents.

Recent changes

Ranked alongside

Other ranked entries in Coding agents.

Compare with the top two
OpenCodeAnomaly75
Claude CodeAnthropic73
Zed (Agent Panel)Zed Industries73
GitHub CopilotGitHub (Microsoft)72
Codex (CLI and app)OpenAI71

Sources

Every figure above traces to one of these, observed up to 26 Sept 2026.

  1. Warp is now open-source (Zach Lloyd, 2026-04-28)
  2. Warp docs: privacy, ZDR, SOC 2 FAQ
  3. Warp Agent CLI docs incl. permissions
  4. HN: Warp is now open-source (373 points)
  5. Warp article citing Feb 2026 Oz press release (700,000+ developers)