By xAILearning Objectives
- Understand what Grok Build does and where it sits among terminal coding agents
- Evaluate the July 2026 open-source release in the context of the security finding that preceded it
- Distinguish source transparency from community-governed open source
What Is Grok Build?
Grok Build is the terminal coding agent from SpaceXAI — the xAI unit operating under SpaceX since the February 2026 acquisition. It runs as a full-screen interface in your terminal that understands a codebase, edits files, executes shell commands, searches the web, and manages long-running tasks. Grok 4.5 is its default model, which is the pairing the product is really built around: a model tuned hard for agentic coding, driving an agent harness written to exploit that.
On July 15, 2026, SpaceXAI published the agent's complete Rust source on GitHub under an Apache 2.0 license — roughly 844,000 lines covering the agent runtime, the terminal interface, the tool layer, workspace and version-control handling, sandboxing, and Model Context Protocol integration.
⚠️Warning
Read the release alongside what prompted it. Days before the source went public, security researchers reported that Grok Build had been uploading developers' entire Git repositories — including full commit histories, which routinely carry credentials such as API keys, SSH keys, cloud tokens, and database passwords. Publishing the source lets developers audit exactly what the agent sends and when. That is a meaningful response, but the sequence matters: the transparency followed the finding rather than preceding it.
Source Transparency Is Not Community Open Source
The license is Apache 2.0, but the project is not run as a community effort. External contributions are not accepted, GitHub issues are disabled, and the repository is described as a periodic sync from SpaceXAI's internal monorepo rather than a live development branch.
💡Key Concept
Source-available-in-practice vs. community-governed. An Apache 2.0 license grants you the legal right to read, fork, modify, and redistribute the code — those freedoms are real. What it does not guarantee is a say in the project's direction. With contributions refused and issues closed, Grok Build gives you auditability and the right to fork, but no seat at the table. For a tool whose data handling was the actual controversy, auditability is arguably the freedom that matters most.
Key Capabilities
A Terminal-Native Agent
Grok Build lives where the work happens rather than in a separate editor window. The interface is full-screen and mouse-interactive, with scrollback and modals, and it drives the same primitives a developer would: reading files, editing them, running commands, and checking results.
Grok 4.5 as the Default
The default model is Grok 4.5, built on xAI's 1.5-trillion-parameter V9 foundation and trained alongside Cursor. Its headline strength is token efficiency — roughly four-times fewer output tokens than Claude Opus 4.8 on SWE-Bench Pro by xAI's own numbers — which matters disproportionately for an agent that loops many times per task. Agent harnesses are where token costs compound, so the pairing is the product's clearest economic argument.
Written in Rust
The agent is roughly 99.6% Rust. For a tool that spawns processes, touches the filesystem, and runs in a developer's shell, the choice buys startup speed and memory safety — relevant given that the agent's job is to execute code on your machine.
Grok Build vs. Other Terminal Coding Agents
| Tool | Lab | Default model | Source availability |
|---|---|---|---|
| Grok Build | SpaceXAI | Grok 4.5 | Apache 2.0, contributions refused |
| Claude Code | Anthropic | Claude flagships | Closed source |
| Gemini CLI | Google DeepMind | Gemini | Apache 2.0, community contributions accepted |
| OpenAI Codex | OpenAI | GPT-5.6 | Closed source |
| Cursor | Cursor (SpaceX) | Grok 4.5 and others | Closed source (editor, not terminal) |
Pricing
- Full Rust source on GitHub
- Fork, modify, and redistribute permitted
- No contributions accepted
- Grok 4.5 at $2 per million input tokens
- $6 per million output tokens
- Billed through the SpaceXAI API
The agent code is free; the model calls are not. Because Grok Build is an agent that loops, the model bill — not the license — is what a team actually pays for.
Related Tools
- Grok 4.5 — the default model behind Grok Build, and the reason its token economics work
- Gemini CLI — the closest peer: a lab-built, Apache 2.0 terminal coding agent that does accept contributions
- Cursor — the SpaceX-owned editor Grok 4.5 was trained alongside
- Claude Code — Anthropic's terminal coding agent, closed source
Strengths
- Auditable — the full Rust source is published, so its data handling can be inspected rather than trusted
- Token-efficient by default — Grok 4.5's roughly four-times output-token advantage compounds across an agent's many loops
- Terminal-native — full-screen interface with scrollback, modals, and mouse interaction, without leaving the shell
- Fast and memory-safe — a Rust implementation for a tool that spawns processes and touches the filesystem
- Forkable — Apache 2.0 permits modification and redistribution, including a privately patched build
Limitations and Considerations
- The security finding is the context — the agent was reported uploading complete Git repositories, commit histories included; audit what your build sends before pointing it at a repository with sensitive history
- Not community-governed — contributions refused, issues disabled, synced periodically from an internal monorepo; you can fork it but not steer it
- Vendor-reported model benchmarks — Grok 4.5's efficiency numbers come from xAI's own charts
- Single-model gravity — built around Grok 4.5, so the economics that make it attractive are tied to SpaceXAI's pricing
- Young ecosystem — xAI's developer tooling and support remain less mature than OpenAI's, Anthropic's, or Google's
Key Takeaways
- Grok Build is SpaceXAI's terminal coding agent — a full-screen interface that reads code, edits files, runs commands, and manages long tasks, with Grok 4.5 as the default model
- On July 15, 2026 the company published roughly 844,000 lines of Rust under Apache 2.0, covering the runtime, interface, tool layer, sandboxing, and Model Context Protocol integration
- The release followed security research showing the agent had been uploading developers' entire Git repositories, commit histories and credentials included
- It is source transparency rather than community open source: contributions are refused and issues are disabled, so you get auditability and the right to fork, but no say in direction
- The agent is free; the model calls are not — and for a looping agent, the model bill is the real cost
