OpenCode
Open-source terminal coding agent that ships with native MCP support. Self-hostable, BYO-model. The community alternative to Claude Code.
Delv Safety Grade: B
Score 72/100 · assessed 2026-04-19
OpenCode is an open-source terminal coding agent with native MCP support, positioning itself as a community alternative to Claude Code. The project shows good transparency with active GitHub presence and clear open-source licensing. Supply chain is reasonable via standard package distribution, though the project is relatively new. The main safety concern is the inherent permissions model: as a coding agent, it requires shell execution and filesystem write access to function, which creates meaningful attack surface. The maintainer appears to be a smaller team or solo developer rather than an established organisation, which introduces bus factor risk. No known security incidents, and the self-hosted BYO-model approach gives users control over the LLM layer. MCP integration is partial (tools and resources only), which slightly limits exposure compared to full-featured implementations.
Green flags
- Fully open-source with active GitHub repository and transparent development
- Self-hosted BYO-model approach gives users control over LLM selection
- Standard package distribution via npm/pypi reduces supply chain opacity
- Clear config at ~/.opencode/config.json makes MCP setup auditable
- No known security incidents or malicious versions
Red flags
- Requires shell:execute and filesystem:write for core coding functionality
- Relatively new project with unclear long-term maintenance commitment
- Smaller maintainer team increases bus factor and review capacity concerns
- No prompts capability limits ability to audit pre-built workflows from servers
Permissions requested
MCP capabilities
- Tools
- Resources
- Prompts
- Sampling
Platforms
Config location
~/.opencode/config.json
Review
If you want MCP support without vendor lock-in and you're comfortable self-hosting, OpenCode delivers. If you need polish, prompts support, or don't want to manage your own models, stick with Claude Desktop.
Good at
- Genuine model freedom, works with any OpenAI-compatible endpoint
- Clean MCP config, no proprietary formats or hidden complexity
- Self-hostable with full control over data and execution
- Active community development, forkable codebase
- Cross-platform CLI that fits terminal-first workflows
Watch out
- No prompts or sampling MCP capabilities
- Documentation assumes MCP familiarity
- Error handling can be opaque when servers fail
- UI is minimal, no visual niceties
- Performance entirely dependent on your model choice