Skip to content
AppDuo
ReviewsComparisonsBest ofCollections

OpenCode vs Kilo Code: which open-source coding agent fits you?

By Official AppDuo editorial team · Updated

OpenCode logoOpenCode7.0/10Open source · $10.00/moKilo Code logoKilo Code6.9/10Freemium · $19.00/mo

Quick verdict

OpenCode and Kilo Code are both MIT-licensed open-source AI coding agents that let you choose models and bring your own API keys. They differ in where they run, how you pay and their 2026 incident records.

OpenCode: suits people who work mainly in the terminal or a desktop app, want to reuse a ChatGPT Plus/Pro or GitHub Copilot plan they already pay for, or want a flat plan from $10/month. It patched four flaws allowing command execution on users' machines in 2026, so version 1.18.33 or later matters.

Kilo Code: suits people who want the agent inside VS Code, JetBrains or Slack or running in the cloud, and teams that need a priced Teams plan ($15/user/month). The trade-offs: Kilo confirmed a data incident via vendor Metabase in August 2026, its pricing page states no refund policy, and Trustpilot shows 2.4/5 from 19 reviews, mostly about billing (the VS Code extension has 3.9/5 from 219 reviews on the Visual Studio Marketplace).

Head-to-head

OpenCode leads on 3, Kilo Code on 4, 3 even

FeatureOpenCodeKilo Code
Where it runs[1],[3],[6],[14],[24]Terminal, desktop app (macOS, Windows, Linux), web and an SDK for scripts and CI; an iPhone app via TestFlight, with Android listed as coming soon. The OpenCode GitHub Action is no longer published as of v2.2.0.VS Code extension (also Cursor and Windsurf via Open VSX), JetBrains, terminal, Slack, cloud agents in the browser, an iOS app and a Kilo Desktop beta.
→ If you want the agent inside your editor or want to hand off work from Slack, Kilo Code fits better; OpenCode centres on the terminal and its own desktop app.
Model choice and bring-your-own-key[1],[2],[3],[14],[15]200+ model providers via Models.dev, including local models; bring your own API keys. Some models are free for a limited time (e.g. LongCat 2.5 Free at 100 requests/day), and some are unavailable in certain countries.500+ models via Kilo Gateway, plus your own API keys or local models. Auto Model lets you pick the Efficient, Frontier or Free tier and routes for you; Auto Free needs no top-up, but the pricing page gives no limits.
→ Neither locks you to one model vendor. OpenCode gives specific free-model limits where Kilo's pricing page does not, while Kilo Code adds automatic model routing for people who would rather not pick.
Reusing an AI plan you already pay for[1],[6],[12],[14],[15]Sign in with ChatGPT Plus/Pro or GitHub Copilot. Per Shareuhack, Anthropic blocked Claude subscription OAuth from Jan 9, 2026 and OpenCode removed that code on Feb 19, 2026; since v2.2.3 Claude can be reached through a separately installed Claude Code (Claude Agent in /connect).No sign-in with an existing AI subscription is documented. Models are paid for through your own API keys, Kilo Gateway at provider rates, or Kilo Pass credits.
→ If you already pay for ChatGPT or Copilot, OpenCode lets you reuse it instead of paying for models again. Claude subscribers should know the direct login route was blocked.
Cheapest paid plan for individuals[2],[15]Go: $10/month (monthly billing only) for 32 curated models, with limits over 5-hour, weekly and monthly windows; Go Plus is $40/month with higher limits. Request counts on the pricing page are estimates.Kilo Pass Starter: $19/month for up to $26.60 in credits (bonus included); Pro $49/month (up to $68.60), Expert $199/month (up to $278.60).
→ OpenCode is cheaper to start, but the plans sell different things: Go is a request allowance on a fixed model list, while Kilo Pass buys credit for model usage.
Pay-as-you-go usage[2],[4],[15]Zen: priced per 1M tokens and charged per request; each credit purchase carries a 4.6% + $0.31 processing fee.Kilo Gateway: no monthly fee, provider rates with no markup; each credit purchase carries a 5% processing fee. Cloud Agent runs cost $0.60–$1.20/hour and Code Review $0.33/hour, billed per second.
→ Both bill by usage and charge a similar fee on each top-up. Kilo Code's cloud agents and code review add compute charges, making spend harder to predict if you lean on the cloud features.
Team plans[2],[15]Go Teams is listed on the pricing page with no published price or seat pricing; Extra Usage is on by default.Teams at $15/user/month: usage analytics, shared agents, centralized billing and priority support, starting with a 14-day Enterprise trial with no card required. Enterprise is custom-priced with SSO/OIDC/SCIM, audit logs and an SLA.
→ Teams that need a budget figure and central admin get a priced plan from Kilo Code; OpenCode has no team price to compare yet.
Refunds and billing feedback[2],[15],[20]Go may be refunded if you ask within 14 days of the charge and have used almost none of the allowance (email [email protected]). The Zen docs state no refund policy.The pricing page states no refund policy. Trustpilot shows 2.4/5 from 19 reviews, mostly billing and refund complaints; some reviewers say refunds were declined (individual, unverified accounts on an unclaimed profile).
→ Go has written refund conditions; with Kilo Code, read the terms of service before committing larger amounts.
Security flaws in the tool itself[8],[9],[10],[11],[13],[22]Four 2026 flaws let a malicious website or MCP server run commands on the machine: CVE-2026-22812 (High, CVSS 8.8) and CVE-2026-22813 (Critical, CVSS 9.4), fixed in 1.0.216 and 1.1.10; an upgrade-endpoint flaw reported by Datadog (rated High, CVSS 7.5, in advisory GHSA-632h-h47v-g4x4), fixed in 1.18.22; and an MCP OAuth flaw on Windows/WSL (per Pillar Security, via DeepInspect; Pillar proposed CVSS 9.8, with no CVE or advisory issued), fixed in 1.18.33. All are patched.CVE-2025-11445: an injection flaw in ClineProvider up to 4.86.0, scored 2.1 (low) on CVSS v4.0 and 6.3 (medium) on v3.1, with public exploit code. INCIBE cites pull request #2244 as the patch but names no fixed version.
→ OpenCode's flaw record is longer and more severe, though every flaw is patched. If you pick OpenCode, run 1.18.33 or later and avoid running opencode serve or opencode web without a password.
Data the vendor keeps, and data incidents[4],[5],[16],[19]Per the privacy policy, prompts pass straight to the model provider and are not stored, except hosted agent sessions (deleted 30 days after last activity). On Zen, some free models may use data to improve the model, and the OpenAI and Anthropic APIs retain requests for 30 days.Keeps data while the account is active; the policy does not say whether data trains models and does not cover the IDE extensions or CLI. Per a notice on Anaconda's blog, the August 2026 Metabase incident exposed some users' names and emails, and possibly prompts, billing addresses and location; payment information was not exposed.
→ For sensitive code or prompts, OpenCode's policy commits to keeping less, while Kilo Code's data incident is confirmed by the vendor and may have reached users' prompts.
Interface languages[3],[24],[25]Only an English interface is documented.VS Code extension UI in about 20 languages (English, Japanese, Chinese, German, Thai, …), though its GitHub source has no Vietnamese locale; the iOS app lists 80+, Vietnamese included.
→ People less comfortable in English get more language options with Kilo Code, though Vietnamese is listed only for the iOS app.

Choose OpenCode if…

  • You work mostly in the terminal or want a standalone desktop app for the agent
  • You already pay for ChatGPT Plus/Pro or GitHub Copilot and want to reuse it
  • You want a low flat entry plan (Go at $10/month) with a 14-day refund condition
  • You prefer a policy that does not store prompts and will keep it updated (1.18.33 or later)

Choose Kilo Code if…

  • You want the agent inside VS Code, Cursor, Windsurf or JetBrains
  • Your team needs a priced Teams plan with usage analytics, and SSO and audit logs on Enterprise
  • You want to hand off work from Slack, run cloud agents or follow along in an iOS app
  • You need an interface in languages other than English

Where each runs and how you work with it

OpenCode, from Anomaly, centres on the terminal and a desktop app for macOS, Windows and Linux, plus a web version and an SDK for scripts and CI. An iPhone app is available via TestFlight and Android is listed as coming soon. It supports MCP, plugins, custom agents and commands, SKILL.md skills, several agents running in parallel on one project, and rollback with /undo.

Kilo Code, from Kilo Code, Inc. (acquired by Anaconda in July 2026), plugs into where you already work: an extension for VS Code and Open VSX editors such as Cursor and Windsurf, a JetBrains version, a CLI, Slack, cloud agents in the browser, an iOS app and a Kilo Desktop beta. You pick an agent per task (coding, planning, debugging, Q&A) or build your own.

Models, API keys and existing subscriptions

Both are MIT-licensed open source and not tied to one model vendor. OpenCode connects to 200+ providers via Models.dev, including local models. Kilo Code offers 500+ models through Kilo Gateway, also takes your own keys and local models, and adds Auto Model routing within an Efficient, Frontier or Free tier.

What sets OpenCode apart is signing in with a ChatGPT Plus/Pro or GitHub Copilot plan you already pay for. Claude plans are another matter: per Shareuhack, early OpenCode versions spoofed a Claude Code header to log in via OAuth, Anthropic blocked this from Jan 9, 2026, and OpenCode removed the related code on Feb 19, 2026. Since v2.2.3 (Oct 30, 2026) the changelog describes reaching Claude through a separately installed Claude Code, without saying which Claude plans this covers.

What you pay and how

Both pieces of software are free; the money goes on models. For individuals, OpenCode Go costs $10/month (monthly billing only) for 32 curated models and Go Plus $40/month, with limits over 5-hour, weekly and monthly windows that the pricing page calls estimates. Kilo Pass comes in three tiers at $19, $49 and $199/month for up to $26.60, $68.60 and $278.60 in credits, with bonus credits that grow the longer you subscribe, up to 50%.

On pay-as-you-go, OpenCode Zen bills per token with a 4.6% + $0.31 fee per top-up; Kilo Gateway charges provider rates with a 5% fee per top-up, and its cloud agents and code review add compute charges by the hour. For teams, Kilo Teams is $15/user/month, while Go Teams has no published price. On refunds, OpenCode Go may be refunded within 14 days if almost unused; Kilo's pricing page states no policy, and Trustpilot shows 2.4/5 from 19 reviews, mostly about charges (small sample, unclaimed profile). Elsewhere, Kilo's VS Code extension has 3.9/5 from 219 reviews on the Visual Studio Marketplace and the iOS app 4.8/5 from 8 reviews (US App Store); OpenCode has no user ratings on app stores or review sites.

Security flaws and data incidents

The two incident records differ in kind. OpenCode's four 2026 flaws sit in the tool running on your machine: two GitHub advisories on Jan 12, 2026 (CVE-2026-22812, High; CVE-2026-22813, Critical) covering an unauthenticated HTTP server and a web UI XSS flaw; an upgrade-endpoint flaw reported by Datadog Security Labs and fixed in 1.18.22; and an MCP OAuth flaw on Windows/WSL found by Pillar Security (per DeepInspect), fixed in 1.18.33 with no advisory. All are patched, so staying current is what matters.

Kilo Code has CVE-2025-11445 (an injection flaw up to 4.86.0, low or medium depending on the CVSS version), but the bigger issue is on the vendor side. Per a notice on Anaconda's blog, an unknown party accessed Kilo customer records held in Metabase for about 4 hours on Aug 2, 2026: some users' names and emails were exposed, prompts, billing addresses and location may have been too, and Slack tokens leaked for a small set of Slackbot users; payment information was not exposed. Kilo says it cannot confirm whether exposed data was used. It invalidated the affected tokens and notified affected users (completed Aug 14).

Frequently asked questions

Which is cheaper, OpenCode or Kilo Code?

OpenCode's cheapest personal plan is Go at $10/month; Kilo Code's is Kilo Pass Starter at $19/month. They are not equivalent: Go is an estimated request allowance on 32 models, while Kilo Pass Starter gives up to $26.60 in credits a month. Both pieces of software are free if you use your own API keys or local models.

Can both use my own API keys or local models?

Yes. OpenCode connects to 200+ providers via Models.dev and also accepts ChatGPT Plus/Pro or GitHub Copilot sign-in. Kilo Code takes your own keys, local models, or 500+ models through Kilo Gateway at provider rates.

After the 2026 incidents, what should I watch for with each?

For OpenCode, all four flaws are patched; use 1.18.33 or later. For Kilo Code, the August 2026 Metabase incident is confirmed by the vendor; Kilo advises watching for phishing, auditing and rotating credentials and reviewing session history, and you can request account deletion at kilo.ai/support.

Is either available in Vietnamese?

OpenCode documents only an English interface. For Kilo Code, the iOS app's App Store listing includes Vietnamese among 80+ languages; the VS Code extension has about 20 interface languages, but its GitHub source has no Vietnamese locale.

Who is behind each tool?

OpenCode is built by Anomaly (US), and its GitHub repo has about 226,000 stars. Kilo Code comes from Kilo Code, Inc.; Anaconda announced the acquisition on July 15, 2026 and said existing plans and support are unchanged. Kilo's repo has about 27,900 stars, and its website claims more than 5 million users, a vendor-reported figure.

Sources

Numbers in the table refer to these sources, read on the dates shown.

  1. 1.OpenCode official home page · Vendor-provided · Nov 11, 2026
  2. 2.OpenCode Go pricing page · Vendor-provided · Nov 11, 2026
  3. 3.OpenCode docs · Vendor-provided · Nov 11, 2026
  4. 4.OpenCode Zen docs · Vendor-provided · Nov 11, 2026
  5. 5.OpenCode privacy policy · Vendor-provided · Nov 11, 2026
  6. 6.OpenCode changelog · Vendor-provided · Nov 11, 2026
  7. 7.OpenCode GitHub repository · Vendor-provided · Nov 11, 2026
  8. 8.GitHub Advisory GHSA-vxw4-wv6m-9hhh (CVE-2026-22812) · Vendor-provided · Nov 11, 2026
  9. 9.GitHub Advisory GHSA-c83v-7274-4vgp (CVE-2026-22813) · Vendor-provided · Nov 11, 2026
  10. 10.OpenCode security advisory GHSA-632h-h47v-g4x4 · Vendor-provided · Nov 11, 2026
  11. 11.Datadog Security Labs: OpenCode upgrade remote code execution · press · Nov 11, 2026
  12. 12.Shareuhack: OpenCode Banned by Anthropic · press · Nov 11, 2026
  13. 13.DeepInspect: OpenCode MCP OAuth remote code execution · press · Nov 11, 2026
  14. 14.Official website · Vendor-provided · Nov 11, 2026
  15. 15.Official pricing page · Vendor-provided · Nov 11, 2026
  16. 16.Official privacy policy · Vendor-provided · Nov 11, 2026
  17. 17.Official documentation · Vendor-provided · Nov 11, 2026
  18. 18.Anaconda press release (2026-07-15) · press · Nov 11, 2026
  19. 19.Anaconda: Metabase incident notice · Vendor-provided · Nov 11, 2026
  20. 20.Trustpilot reviews · review-site · Nov 11, 2026
  21. 21.Visual Studio Marketplace listing · store · Nov 11, 2026
  22. 22.INCIBE-CERT CVE-2025-11445 · Vendor-provided · Nov 11, 2026
  23. 23.GitHub repository Kilo-Org/kilocode · Community-reported · Nov 11, 2026
  24. 24.App Store listing (iOS) · store · Nov 11, 2026
  25. 25.GitHub: Kilo VS Code extension locale files · Community-reported · Nov 11, 2026

Comments

No comments yet. Be the first to share your experience.

Comments are readers’ opinions, not content from the AppDuo Editorial Team.