mrkeyoor.com_
Sat 31 Oct 03:53 UTC
AI Toolsevaluationupdated 31 Oct 2026

KiroCrew review

Kiro Crew is an open source development workspace that runs on hardware you control. Its README describes persistent sessions, memory and scheduled work, accessible through a desktop app, web dashboard, CLI and connected messaging services. Our run checked setup steps, not persistence or unattended task completion.

Verdict

Kiro Crew completed dependency installation in 36 seconds and the build-labelled step in 50 seconds, but tests timed out after 900 seconds. Consider a supervised evaluation if you can operate the Gateway and resolve the selected artifact's backend requirements. Persistence and unattended reliability remain unverified, and the 7 reported vulnerabilities need advisory-level inspection.

We ran it

Lab card: what happened when we ran KiroCrewScreenshot of KiroCrew (kiro.dev/crew)
Install✓ · 36s97 packages · 384 MB
Build✓ · 50s
Tests✗ timed out · 900sran, no count parsed
Known vulns7(pip-audit)
Repo21265 files~7,505,075 lines of source · 592.3 MB · 76 CI workflows · tests dir

Answers from our run

Does KiroCrew build from source?

Dependencies installed in 36 seconds (97 packages), and the build succeeded in 50 seconds. We cloned commit 118702f into a clean Debian container with 3 CPUs and no project-specific setup.

Do KiroCrew's tests pass?

We could not finish them: the suite was still running after 15 minutes in our container.

Does KiroCrew have known vulnerabilities in its dependencies?

pip-audit flagged 7 known advisories in the dependency tree at the time of our run.

Who should not use KiroCrew?

Operators expecting self-hosting to disable outbound telemetry by default: the README documents enabled usage heartbeats and official-app receipts, with opt-out controls.

What are the alternatives to KiroCrew?

Aider, LangGraph. Kiro Crew completed dependency installation in 36 seconds and the build-labelled step in 50 seconds, but tests timed out after 900 seconds.

SetupN/ADependency and build steps completed, but first-run login, usable application startup and the selected artifact's backend were not verified.
Docs3/5Written-guidance rubric: 1 purpose only; 2 partial setup; 3 actionable installation and operating routes with unresolved caveats; 4 consistent inspected instructions; 5 independently verified setup instructions. The README provides actionable routes, but its default-backend guidance conflicts with v0.11.0.
CommunityN/AThe supplied metadata and pull-request extracts show recent activity, but do not establish support responsiveness, adoption or maintainer capacity.
MaturityN/AThe suite timed out, and the run did not evaluate restart recovery, agent output or unattended task execution.

Who it’s for

Developers evaluating persistent sessions and recurring development tasks.
Operators prepared to manage a Gateway host, agent backend and permission settings.
Teams that want to inspect and edit agent memory, lessons and schedules.

Who it’s NOT for

Operators expecting self-hosting to disable outbound telemetry by default: the README documents enabled usage heartbeats and official-app receipts, with opt-out controls.
Developers requiring a completed source-suite result from this review: the test step timed out after 900 seconds.
Anyone needing unambiguous default-backend instructions: the README names kiro-cli, while release v0.11.0 says new installs default to KAS.
Teams unable to configure authenticated remote access: the README requires it when exposing the dashboard beyond its default loopback binding.

Setup reality

The October 30, 2026 sandbox run at commit 118702f completed dependency installation in 36 seconds and the build-labelled step in 50 seconds. It recorded 97 dependencies and 384 MB on disk. Tests timed out after 900 seconds. Pip-audit reported 7 known vulnerabilities; the supplied summary does not identify their advisories or severities.

The README describes desktop downloads, a signed wheel, a container image and source setup. Its macOS and Linux source instructions require Python 3.12+, Node.js 22.12+ and npm. It names kiro-cli as the default backend prerequisite, while release v0.11.0 says new installations with no saved harness choice start on KAS. Confirm the selected artifact and backend before configuring access.

The recorded sandbox configuration lists 3 CPUs, 8 GB RAM and image ghcr.io/astral-sh/uv:python3.12-bookworm. That image label does not establish actual runtime versions. The final test warning budgets 2 of 8 workers and reports different memory figures. It neither identifies the timeout cause nor reconciles those resource readings.

A completed build leaves persistence unverified

Kiro Crew's appeal is continuity: its README says sessions, memory, schedules and task checkpoints survive Gateway restarts. Developers considering recurring or interrupted work have a reason to evaluate that claim. Our sandbox run completed dependency installation and a build-labelled step, but did not verify recovery after a restart or unattended task reliability.

The Gateway holds state, policy, approvals, schedules, memory and apps on its host. The desktop app, web dashboard, CLI and messaging connections provide ways to reach that work. The README also describes editable lessons derived from corrections and MCP servers for adding tools. These are documented capabilities, rather than results established by this run.

What happened when we ran it

At commit 118702f on October 30, 2026, dependency installation completed in 36 seconds. The build-labelled step completed in 50 seconds, but tests timed out after 900 seconds. The run recorded 97 dependencies and 384 MB on disk. It provides no passing-test count or evidence that an agent completed a development task correctly.

The final supplied log warns that xdist budgeted 2 of 8 workers. It reports 18.7 GiB free, 31 GiB installed and about 3 GiB required per worker, mostly for collection. The warning ends mid-sentence. It shows a worker-budget decision, without establishing whether the suite was collecting tests, executing them or waiting elsewhere when the timeout occurred.

The harness configuration lists 3 CPUs and 8 GB RAM with image ghcr.io/astral-sh/uv:python3.12-bookworm. The supplied evidence does not reconcile that allowance with the warning's memory readings. Neither an out-of-memory diagnosis nor an actual Python or operating-system version follows from these records.

Pip-audit reported 7 known vulnerabilities. The summary records one vulnerable package, but supplies no package name, advisory identifier or severity. Inspect those details before broader use.

The checkout scan recorded 21,265 files, approximately 7,505,075 source lines and 592.3 MB. It detected 76 CI workflow files and a tests directory, without detecting a Dockerfile. That scan result does not contradict the README's documented published container image.

Confirm the backend before first use

Release v0.11.0 says new installs with no saved harness choice start on KAS; an explicit Kiro CLI choice is kept. The release notes say the desktop app ships the pinned KAS engine and no longer bundles kiro-cli.

The supplied README instead says the default agent runs on kiro-cli, which users install and sign in to separately. Its macOS and Linux source route requires Python 3.12+, Node.js 22.12+ and npm, then documents setup, doctor and gateway commands. It directs Windows users to separate instructions.

These sources disagree about the default backend. Confirm the artifact and its selected backend before following either credential setup route. The measured checkout is commit 118702f; the supplied release page identifies v0.11.0 with commit 343a199. This review does not present the checkout measurements as a test of the v0.11.0 release artifact.

Desktop downloads, the signed wheel and the published container are separate installation routes. The source-checkout measurements do not establish their footprint, login behavior or application startup.

Decide what may leave the Gateway

The README says anonymous usage heartbeats and official-app installation receipts are enabled by default. It says first egress waits until the first-run privacy disclosure appears, and documents dashboard controls and a telemetry-disable command. Local hosting alone does not establish offline operation.

The dashboard binds to loopback by default; remote exposure requires authenticated configuration. Upstream also describes tool approvals, credential guards and OS isolation where available. Our run did not evaluate those security controls.

For a supervised trial, use disposable work with an output you can check. Inspect which operations request approval and what happens after a denial. Interrupt the task, restart the Gateway and check whether state and permissions behave as expected. These are proposed checks, not tests completed for this review.

Choose the workflow you want to operate

Aider provides terminal pair programming with an LLM on a new or existing codebase. Evaluate it when interactive editing in the terminal covers your task.

LangGraph is a low-level orchestration framework for long-running, stateful agents. Evaluate it when you want to implement the workflow inside an application.

Kiro Crew instead supplies a development workspace around a persistent Gateway. These recommendations distinguish workflows; this review did not compare editing quality, execution speed or recovery reliability.

What the evidence supports

The repository metadata records a push on October 31, 2026, and the supplied activity extract includes newly opened pull requests. Those observations establish recent activity, without establishing support responsiveness or operational reliability.

Documentation scores 3/5 on a written-guidance rubric: 1 explains purpose only, 2 gives partial setup instructions, 3 provides actionable installation and operating routes with unresolved caveats, 4 provides consistent instructions across the inspected sources, and 5 adds independently verified setup instructions. The README supplies actionable routes and controls, but its default-backend guidance conflicts with v0.11.0. This score assesses written guidance only.

Setup ease, community support and operational maturity remain unassessed. Confirm the backend, inspect the audit details and run a supervised interrupt-and-resume trial before relying on recurring work.

Alternatives

ProjectWhat it isPick it when
Aider gh↗Terminal pair programming with an LLM on a new or existing codebase.Evaluate Aider when interactive editing in a terminal covers the task you need.
LangGraph gh↗A low-level orchestration framework for long-running, stateful agents.Evaluate LangGraph when you want to implement the workflow inside your application.

What people are saying

  1. [github-trending] kirodotdev/KiroCrew

Sources

  1. Kiro Crew README
  2. Kiro Crew v0.11.0 release
  3. Aider README
  4. LangGraph README
  5. Kiro Crew repository facts
  6. Kiro Crew issue and pull-request activity

More ai tools reviews

Orkas · hypit · Paradev · see-through · Resume-Matcher · openbot · the whole board →