Comp AI's agentic CRM, or an approval boundary the agent cannot cross?
Comp AI CRM, the agentic-first CRM
People ask this as: comp ai crm alternative when the agent must not decide commercial questions alone
Comp AI's CRM is the loudest version of a thesis this project deliberately inverts: an autonomous background agent doing CRM work inside the product, with a work queue, evidence-based facts and a sandbox. Here the agent builds the application instead, and the decision that matters commercially is the one it is refused — a test asserts that an agent cannot approve. The research file credits Comp AI with proving demand for the narrative and with a genuinely novel design, and records in the same row why it reads as a thesis demo rather than infrastructure. Every fact traces to that dated file; nothing was run.
Where this stops
Read this before the rest of the page. Every line below is a thing this does not do.
Every fact about another project on this page is single-sourced to
docs/strategy/COMPETITOR_MAP.md and dated 2026-08-04. Nothing from
another project was installed, configured or run, and there is no network access here to re-verify
any of it.
- No hands-on evaluation: nothing from Comp AI was installed, configured or run to produce this page.
- Every competitor fact is single-sourced to docs/strategy/COMPETITOR_MAP.md and dated 2026-08-04; the star and commit figures are that date's snapshot.
- Licence descriptions are factual summaries of published texts, not legal advice.
- No autonomous background sales agent ships. Durable jobs, a transactional outbox and scheduled asks exist for self-hosted applications that explicitly start a worker. Nothing autostarts; a timer opens an ask, never makes a decision, and no managed worker service or recurrence is included (L-04).
- No authentication ships; in local-development mode an actor header is an assertion, not an identity (L-01).
- The synchronous factory uses SQLite; the async factory supports one tenant on dedicated PostgreSQL databases. Shared-database row tenancy and general production readiness are not claimed (L-02).
- This is a framework whose output you run; the managed Cloud hosts a free Blueprint-configured workspace, and custom code only on a paid Dedicated Cell (L-07).
- The published create-accordo@0.1.0 scaffolds vendored source; it is the August 19 snapshot, not the current repository feature set. Use a current source checkout for the capabilities described here; upgrades require merging source (L-08).
- No measured comparison in either direction — the benchmark has not been run (L-03).
No authentication ships: the framework authenticates nobody. Production Spine v1 (ADR-038) gives the framework verified identity, organizations and memberships, server-authoritative authorization and one tenant per application instance — so tenancy and authorization now exist and are enforced. What does not exist is authentication: no login, password, session or OIDC implementation ships, and a deployment must supply the adapter that verifies the request. Production mode refuses to start without one. In local-development mode an actor header is accepted as an assertion and is not an identity, which is the default developer posture. This is not shared-database multi-tenancy and it is not a readiness claim. Every claim and every limitation is on one page.
Where Comp AI's CRM wins
It proved the demand is real, and has since proved more than that. The research file this page reads — docs/strategy/COMPETITOR_MAP.md — recorded 4.4k GitHub stars on August 4, 2026; a re-check dated August 20 records 8.7k stars, 1.0k forks and 211 commits, under an MIT licence, TypeScript end-to-end on Next.js, NestJS and Prisma. Its thesis is an autonomous background agent with a work queue, evidence-based facts and a sandboxed design the file calls genuinely novel. If what you want is a CRM in which the agent is a worker inside the product, that is its entire thesis — and nothing in this framework attempts it. No autonomous sales agent ships here. Durable jobs, a transactional outbox and scheduled asks exist for self-hosted applications that explicitly start a worker. Nothing autostarts; a timer opens an ask, never makes a decision, and no managed worker service or recurrence is included (L-04).
It is also far simpler to stand up. The file records deployment as three Vercel deployments. This project's hosted form is the managed Cloud, limited to Blueprint-configured workspaces unless a paid Dedicated Cell runs custom code (L-07) — with no authentication ships, and a deployment must supply the verifier (L-01), SQLite or dedicated-database PostgreSQL persistence (L-02), and an npm scaffolder shipping the dated 0.1.0 source snapshot or a current-checkout bootstrap; upgrading means merging source (L-08).
Where this is different
The direction of the agent. The file's sentence is exact: the agent is in the product, not building it. Here it is the reverse. The application is generated as code in your repository — a module manifest becomes a migration, a service, a REST resource, an SDK method and Admin screens (C-01) — and the runtime surface an agent gets is refusal-shaped rather than autonomous. Commercial policy is deterministic code, and a renewal at or above the threshold stops and waits for a named human (C-03). An agent actor asking to approve a discounted quote is refused with a 403 and code HUMAN_APPROVAL_REQUIRED, and only a human user actor can decide (C-21). The refusal is asserted by a test, so the boundary is a property of the system rather than a promise in a README (C-04), and every mutation leaves an audit event and a step-level trace behind it (C-16). Autonomy is not the pitch here; the approval boundary is.
Ownership shape. The file records Comp AI's customization as none meaningful — fixed schema, single-tenant, Vercel-coupled — with no MCP and 18 internal agent tools. Here the schema is whatever your manifests declare, generated into source you own and evolve through explicit revisions (C-01), and the lock-in the file records for this framework is none by design — a framework as dependency, though today that means copying source rather than installing one (L-08).
The measurement caveat cuts both ways, and on the August 20 re-check it cut against this page. An earlier version of this paragraph reported 81 commits behind those stars and called the project a manifesto rather than a platform. The file now records 211 commits, working authentication, a durable scheduler and live providers — three things this framework does not have (L-01, L-04, L-05) — so that verdict is withdrawn here rather than quietly edited away. What the file does still record is that it ships no MCP server. The same file warns that stars in this category are marketing-inflected, citing Krayin at 23.6k stars with modest activity, and says to measure forks, usage and benchmarks instead. Held to its own standard, this project's benchmark has not been run, so no measured comparison exists in either direction and none appears here (L-03).
How to choose
Choose Comp AI's CRM if you want an autonomous CRM worker inside a product today; if MIT licensing, a TypeScript-end-to-end stack and Vercel deployment fit; and if the fixed schema and single-tenant shape the file records are acceptable for what you are running.
Choose this framework in the narrow case: the deliverable is a bespoke commercial process as reviewable code in your repository, where the agent does the writing and a human owns every approval — and you can supply deployment authentication, hosting, connector mapping and complete personal-data operations; dedicated PostgreSQL and bounded customer imports already exist (L-01, L-02).
If the question is which agent should touch revenue decisions, the two answers differ in kind rather than degree: theirs works the queue, and this one is stopped at the approval and told to wait for a person. Choose by which failure you would rather explain afterwards.
What this comparison does not cover
No hands-on evaluation. Nothing from Comp AI was installed, configured, benchmarked or run in producing this page. Every fact traces to docs/strategy/COMPETITOR_MAP.md, researched on August 4, 2026, and this environment has no network access to re-verify any of it.
No review of the evidence model or the sandbox. The file records the design as genuinely novel and does not describe how it works, so this page cannot and does not.
No feature matrix and no pricing. The file carries neither for Comp AI, so no statement about its CRM features, data model or cost appears here.
The commit and star figures are a snapshot from one date, in a category where the file itself says stars are marketing-inflected. Check the current repository before drawing conclusions from either number.
No build-rate or speed comparison in either direction — the benchmark has not been run (L-03). When the competitor research is refreshed, this entry must be re-read against it.
The evidence this page rests on
Claims and limitations are printed from site/claims.json word for word. Job statuses come from docs/benchmarks/jobs.json; a job with no page of its own is listed with its status rather than linked.
Claims
- C-01 Write a module manifest; the agent turns it into a migration, a service, a REST resource, an SDK method and Admin screens — with no page code.
LimitGenerated CRUD only. The factory does not generate workflows or approvals for a custom object — that is still handwritten (JTBD-06, partially supported).
- C-03 Commercial policy is deterministic code, not a model's judgement: a renewal at or above the threshold stops and waits for a named human.
LimitProven for the built-in renewal object and its single value threshold. A general policy engine over arbitrary custom objects does not exist.
- C-04 The agent cannot approve on the human's behalf. A test asserts the refusal, so the boundary is a property of the system rather than a promise in a README.
LimitIn local-development mode the actor is asserted, not authenticated: no authentication ships, so an actor header there is not an identity. This holds a boundary against an honest agent, not against an attacker with network access.
- C-16 Every mutation goes through a module service or a named workflow, and leaves an audit event and a step-level trace behind it.
LimitAudit records what the process did under an asserted actor. It is not a tamper-evident or externally attestable log, and it is not a compliance control.
- C-21 The same refusal holds where the money is: an agent actor asking to approve a discounted quote is refused with a 403, and only a human user actor can decide.
LimitThe assertion lives inside a composite end-to-end test rather than a test named for it, so the citation is a file and a line rather than a test name. Extracting it into a named test is tracked in docs/strategy/GO_TO_MARKET.md; until then, cite the line.
Limitations
- L-01 No authentication ships: the framework authenticates nobody. Production Spine v1 (ADR-038) gives the framework verified identity, organizations and memberships, server-authoritative authorization and one tenant per application instance — so tenancy and authorization now exist and are enforced. What does not exist is authentication: no login, password, session or OIDC implementation ships, and a deployment must supply the adapter that verifies the request. Production mode refuses to start without one. In local-development mode an actor header is accepted as an assertion and is not an identity, which is the default developer posture. This is not shared-database multi-tenancy and it is not a readiness claim.
- L-02 Not shared-database tenancy. createAccordoAppAsync can boot one tenant onto dedicated PostgreSQL databases. Shared-database row-level tenancy is not implemented, and this is not a production-readiness claim.
- L-03 The build benchmark has not been run. The protocol is designed and published; no Successful Agent Build Rate exists yet. Any number you see quoted for this project is not ours.
- L-04 Timers exist; a service that runs them for you does not. Durable jobs, a transactional outbox and scheduled asks exist for self-hosted applications that explicitly start a worker. Nothing autostarts; a timer opens an ask, never makes a decision, and no managed worker service or recurrence is included.
- L-07 The framework is source you run; the Cloud hosts only what a Blueprint expresses. The framework is not a hosted service: its output is an application in your repository that you run. The managed Cloud is a separate offer: a free workspace on shared capacity configured through a Project Blueprint (record types, fields and approval gates), and a paid Dedicated Cell for custom application code.
- L-08 Ownership means vendored source: there is no framework dependency to bump. The published create-accordo@0.1.0 scaffolds vendored source; it is the August 19 snapshot, not the current repository feature set. Use a current source checkout for the capabilities described here; upgrades require merging source (L-08). The framework is copied into the project, not installed as a framework library dependency. The accordo npm name is an empty reservation; the @accordo scope is claimed and deliberately empty.
- L-06 Bounded customer imports and logical identity; incomplete data operations. Customer Data Foundation supports bounded JSON imports with preview/apply, per-row receipts and idempotency, deterministic duplicate candidates, and human-governed canonical identity as logical links. It does not provide CSV ingestion, physical merge, complete export/erasure, bulk editing, saved views or global search.
- L-09 Personal-data readiness requires deployment work beyond the foundation. Customer Data Foundation supplies bounded import and identity governance, not complete personal-data operations. Authentication must be supplied by the deployment, and complete subject export and erasure remain absent; the framework alone does not establish compliance or suitability for real customer data. Lead scoring remains deterministic, versioned and explainable.
Jobs it covers
- JTBD-02 Request commercial approval on a deal — validated end to end
- JTBD-CO-03 Request a discount under a deterministic policy — validated end to end
- JTBD-15 Enforce team / tenant permissions — partially supported