AI agents · OpenClaw · self-hosting · automation

Quick Answer

Google AX vs OpenAI Agents API vs Claude Code Projects 2026

Published:

Four answers to “where do my agents run?”

September 2026 produced four launches within eleven days that all address the same operational gap — agents that run for hours, need memory, and must be stopped, resumed and observed — but at very different layers of the stack:

Google AXOpenAI Agents APIClaude Code ProjectsCursor Projects
Launchedv0.1.0 May 20, 2026; v0.3.0 Sep 20, 2026Public beta Sep 10, 2026Sep 17, 2026 (beta)Sep 10, 2026 (beta)
LayerSelf-hosted orchestrator (Kubernetes)Hosted harness + APIEnd-user coding productEnd-user coding product
Who runs the sandboxYou (Agent Substrate on your cluster)OpenAI or partner sandboxes (E2B, Modal, Daytona, Vercel, etc.)Anthropic cloudCursor cloud + optional local agent
HarnessBring your own (ADK, LangGraph, Antigravity, Codex, Claude SDK)OpenAI’s Codex harnessClaude CodeCursor’s coordinator + subagents
Model choiceAny (Model object with K8s secret creds)OpenAI modelsClaudeMultiple frontier models via Cursor
Persistenceax suspend / ax resume, snapshot on SubstrateResumable sessions on OpenAI’s sideShared project memorySynced shared-context files
Egress controlGateway host allowlistSandbox policy set by OpenAI/partnerNot user-configurableNot user-configurable
Data residency / ZDRYour clusterUS-only, no ZDRAnthropic policiesCursor policies
Licence / priceApache-2.0; pay for infra + tokensNo platform fee; tokens + tools + container timeClaude Pro/Max subscriptionCursor subscription
Maturityv1alpha1, breaking changes expectedBeta, no GA dateBeta, cloud-only, Pro/Max onlyBeta, rolling out

Verified September 21, 2026 against the google/ax repository, OpenAI’s Agents API documentation, Anthropic’s Claude Code Projects announcement and Cursor’s Projects announcement.

Google AX: own the data plane

AX is the only one of the four you install. You write ax.io/v1alpha1 manifests — a Task (sandboxed run with CPU/memory limits), a Workspace (pre-cloned Git repos, MCP servers, skill packages), a Gateway (outbound host allowlist) and a Model (provider + credentials from a Kubernetes secret) — and ax apply them. A stateless gRPC server persists to Redis; controllers consume a Redis Stream and provision sandboxes on Agent Substrate, which snapshots idle agents and restores them in under 500 ms. ax ssh drops you into a running sandbox; ax suspend checkpoints it.

What you get: total control over where code executes, which hosts it can reach, and which model it calls — including non-Google models. What you give up: someone has to run the cluster, Redis and Substrate, the API is alpha, and there is no harness in the box. AX is what you choose when your constraint is compliance or scale (millions of short tasks), not time-to-first-agent.

OpenAI Agents API: rent the Codex harness

The Agents API exposes the same harness that runs Codex and ChatGPT Work: one call creates a session with model, instructions, tools, MCP servers and an environment, and OpenAI runs the loop — sandboxed commands, context compaction, parallel subagents, mid-turn steering, later resumption. The harness code is the open-source Codex repo; the hosted version is OpenAI’s. No platform fee — tokens (GPT-6 Astra $10/$50 per MTok), tools, and container time — and you can point it at partner sandboxes (Blaxel, Cloudflare, Daytona, DigitalOcean, E2B, Modal, Oracle, Runloop, Vercel).

The limits are the story for regulated teams: US-only data residency, no Zero Data Retention even with a self-hosted sandbox, sessions retained on OpenAI’s side, public beta with no GA date. See Agents API vs Agents SDK vs Responses API.

Claude Code Projects: the coordinator as product

Claude Code Projects adds a persistent coordinator conversation above multiple Claude Code cloud sessions. You brief it; it splits the work into parallel worker threads on separate branches, each returning a PR, and keeps a shared project memory of decisions so you can steer from a phone days later. It is included with Claude Pro ($20) or Max ($100/$200) and parallel threads burn usage fast. It is cloud-only and Anthropic runs everything. You are buying outcomes, not infrastructure.

Cursor Projects: same idea, editor-native

Cursor Projects launched a week earlier with the same shape: a coordinator that “doesn’t write code itself but directs other agents that do,” as many cloud subagents as the job needs, a synced shared-context file set that grows with the project, a local agent when something must run on your machine, and subscriptions that let it watch a Slack channel, run on a schedule or follow your PRs and fix CI. Multi-model. Also beta.

How to choose

  • You are building an agent product and must keep execution in your VPC (finance, healthcare, government, EU residency): Google AX. Nothing else on this list offers self-operated sandboxes with egress allowlists today. Pair with the egress lock-down guide.
  • You are building an agent product and want to ship this quarter with OpenAI models: Agents API — unless you need ZDR or non-US residency, in which case build your own loop (hosted harness vs DIY).
  • You want pull requests, not a platform: Claude Code Projects if you live in Claude Max and want one long-running conversation across repos; Cursor Projects if your team already uses Cursor and wants the coordinator plus Slack/schedule triggers. Both are beta; the coordinator-agent comparison goes deeper.
  • You have a Kubernetes platform team and hundreds of agents to schedule: AX, with the caveat that v1alpha1 means you will rewrite manifests before GA.

The pattern underneath

All four converge on the same primitives — sandbox, durable session, parallel subagents, suspend/resume, egress policy — which is why the September 2026 agent-harness value paper (planning text vs. verifier, and which dominates depending on liability) reads like a design brief for every one of them. The difference is ownership: Google is giving the layer away as open source and monetising GKE; OpenAI is renting it; Anthropic and Cursor are hiding it behind a coordinator. Which one you should adopt is less about capability than about who you want holding the sandbox when something goes wrong — see Plugin4Shell for what that looks like in practice.

Sources