Plandex
Open-source terminal-based AI coding agent for large projects with a cumulative diff review sandbox and 2M token context.
Delv Safety Grade: B
Score 71/100 · assessed 2026-04-18
Plandex is an open-source terminal-based AI coding agent maintained by a small team (Plandex Inc). The project shows active development with good documentation and transparency through GitHub. However, as an autonomous coding agent, it requires extensive permissions including filesystem write access, shell execution capabilities, and network access to external LLMs. The freemium model includes a cloud service component which adds supply chain considerations. The codebase is fully open source with clear licensing, but the maintainer is a smaller organisation rather than an established vendor. No security incidents are documented. The tool's power to autonomously modify code across large projects means careful review of its changes is essential, though it does include a diff review sandbox feature.
Green flags
- Fully open source with active GitHub development and issue tracking
- Includes diff review sandbox for change inspection before applying
- Clear documentation and transparent about capabilities
- Standard Go installation via package managers available
- No known security incidents or malicious behaviour
Red flags
- Autonomous code modification across entire projects without human approval
- Requires shell execution and broad filesystem write permissions
- Small maintainer team with limited bus factor
- Cloud service component introduces additional trust dependencies
Permissions requested
Pricing
Platforms
Review
Pay for the cloud tier if you're refactoring codebases with a team and want shared context. Stick with the free self-hosted version if you're solo and comfortable running your own infrastructure. Skip it if you prefer instant feedback over batch review.
Good at
- 2M token context window handles large codebases without forgetting earlier decisions
- Cumulative diff sandbox lets you review and reject changes before applying them
- Open-source and self-hostable, no vendor lock-in
- Works across hundreds of files in a single plan
- Terminal-based, integrates cleanly into existing CLI workflows
Watch out
- Terminal UI lacks syntax highlighting and modern diff visualisation
- Occasionally misses implicit dependencies between files
- Requires precise instructions; vague prompts produce vague changes
- Slower iteration loop than instant-apply tools like Aider
- Cloud tier pricing unclear for team use
Use cases
- large refactors
- multi-file tasks
- autonomous debugging