What it is
OpenCode is an open-source coding agent that runs in your terminal, with a desktop app (in beta) and IDE extensions as well. It reads your code, edits files, runs commands and supports MCP servers, LSP code intelligence and several sessions at once. Two built-in agents switch with the Tab key: build, with full access, and plan, which is read-only and asks before running shell commands.
It is model-agnostic: the homepage lists more than 75 providers through Models.dev, including Anthropic, OpenAI, Google and local models. The same team sells two optional model services, OpenCode Zen (pay-as-you-go at provider prices) and OpenCode Go (a $10 monthly subscription). The company renamed itself from SST to Anomaly in January 2026, moving the repo from sst/opencode to anomalyco/opencode, and installs now point at a v2 release line.
Do not confuse it with the older Go project opencode-ai/opencode, which was archived in 2025 and lives on as Charm's Crush.
Our review
OpenCode is the strongest open-source answer to Claude Code and Codex for teams that refuse to tie their tooling to one model vendor. It has about 220,000 GitHub stars, more than either rival, and ships several releases a week; v1.19.4 came out on 22 October 2026. The homepage claims 16 million monthly developers, a figure the project does not break down.
Its design choice is also its main security lesson. OpenCode runs a local HTTP server that the terminal UI, desktop app and SDK talk to, and that server has been the source of its serious advisories. CVE-2026-22812 found it unauthenticated with permissive CORS, so any website could run shell commands (fixed in 1.0.216); CVE-2026-22813 was a cross-site scripting route to the same result (fixed in 1.1.10); and a September 2026 advisory showed a webpage could trigger a package install through the upgrade endpoint on npm-managed installs (fixed in 1.18.22). Each was fixed, but anyone running opencode serve should treat it as a privileged service.
The business model is now clearer. The agent is free, and Anomaly earns from optional model access: Go at $10 a month covers 29 open and closed models with usage capped per five hours, and Zen passes through provider prices with a $1.23 fee per $20 top-up. Enterprise is per seat, with no token charge when you route through your own gateway, and central config can disable every other provider. Two models on the Go plan train on prompts, so plan choice matters for proprietary code.
The weak spot is consistency. Output quality follows whichever model you pick, the issue tracker holds about 3,680 open items, and Morph's comparison credits Claude Code with more polish on Anthropic models. What OpenCode buys is portability: the same workflows, agents and MCP setup survive a switch from Claude to GPT to a local model, which no single-vendor agent offers.
Where it earns its place
A platform team at a 500-developer bank with an internal LLM gateway
Give engineers a coding agent that only ever talks to approved models
Enterprise central config points every install at the internal gateway via SSO and disables other providers, with share pages turned off. Billing is per seat with no token charge from Anomaly; the bank pays its own model costs.
A freelance developer paying for tokens personally
Run a capable terminal agent for under the price of a Claude or ChatGPT subscription
Install with Homebrew or npm and subscribe to OpenCode Go at $10 a month, which caps use at 20% of the monthly allowance per five hours. Switching to a frontier model for a hard task means adding that provider's own key.
A staff engineer evaluating models for a 30-person product team
Compare how different models handle the same refactor
Keep one set of agents, commands and MCP servers and change only the model per session, so differences come from the model rather than the harness. Cost is whatever each provider charges for the tokens used.
Before you commit
- Setup
- curl install script, npm (@opencode/cli), Homebrew, pacman, mise or Nix; the binary lands in ~/.opencode/bin. Add a provider key or log in, then run opencode in a repository.
- Integrations
- More than 75 model providers through Models.dev, MCP servers, LSP servers, a JavaScript SDK, IDE extensions and a beta desktop app for macOS, Windows and Linux. Private npm registries such as Artifactory work through .npmrc.
- Data and privacy
- The project says it stores no code or context; prompts go straight to your chosen provider, except on its free models, where data is stored. Session sharing to opncd.ai is manual by default and can be set to disabled. Zen models are US-hosted with zero retention, with exceptions listed separately.
- Cost at scale
- The agent is free; the bill is model usage. Go costs $10 or $40 per user per month with five-hour and weekly caps; Zen charges provider rates plus $1.23 per $20 top-up; Enterprise is per seat, with no published price.
- Limits
- The local HTTP server has needed three security fixes in 2026, so pin current versions. V2 does not yet support session sharing, and behaviour varies widely between models.
What's good
- 75+ providers, including local models and your own gateway
- MIT licence; Enterprise adds per-seat central config
- Read-only plan agent for exploring unfamiliar code
- Optional $10 a month Go plan for cheap model access
What's not
- Three serious advisories against its local server since January 2026
- Quality depends entirely on the chosen model
- Some Go-plan models train on prompts
- About 3,680 open issues and a fast-moving v2 line
Best for
Developers who want a vendor-neutral terminal coding agent.
Alternatives
OpenCode: common questions
- Is OpenCode worth it?
- A terminal agent you can point at any model and audit line by line, provided you keep its local server patched. We rate it 4.6 out of 5.
- How much does OpenCode cost?
- Free and open source (MIT); you pay your model provider. Optional OpenCode Go costs $10 or $40 a month; Zen is pay-as-you-go from $20 top-ups; Enterprise is per seat, price on request.
- What are the downsides of OpenCode?
- Three serious advisories against its local server since January 2026; quality depends entirely on the chosen model; some Go-plan models train on prompts; about 3,680 open issues and a fast-moving v2 line.
- Who is OpenCode best for?
- Developers who want a vendor-neutral terminal coding agent.
- How much does OpenCode cost for a team or in production?
- The agent is free; the bill is model usage. Go costs $10 or $40 per user per month with five-hour and weekly caps; Zen charges provider rates plus $1.23 per $20 top-up; Enterprise is per seat, with no published price.
- Is OpenCode safe for company data?
- The project says it stores no code or context; prompts go straight to your chosen provider, except on its free models, where data is stored. Session sharing to opncd.ai is manual by default and can be set to disabled. Zen models are US-hosted with zero retention, with exceptions listed separately.
- What are the best OpenCode alternatives?
- The closest alternatives we have reviewed are OpenAI Codex CLI, Gemini CLI, Cline and Aider.
Answers checked Oct 23, 2026.
Make OpenCode? Show this rating on your site
