enterpriseai.tools
Open navigation menu

Mastra

Mastra AI

Open Source

Agent framework focused on composable workflows, tooling, and modern developer ergonomics.

Curated by Tiberiu ArvaStale

Apache 2.0 core + EE pathsVersion 1.75.0Released 2026-10-0727,994
DocsRepository

Strengths

  • Apache 2.0 plus enterprise path
  • Fast growth
  • Modern DX

Practitioner note

Promising TypeScript-first framework for product teams that want modern developer ergonomics, but enterprise proof points are still earlier than older stacks.

Warning

Mastra: Mastra uses a dual-license model: most of the repo is Apache 2.0, while code under ee/ directories uses the Mastra Enterprise License.

Where it sits in the stack

Listed under Agent frameworks in the Build & orchestrate layer.

  1. Build & orchestrate
  2. Control plane
  3. Use

Governance posture

Reviewed 2026-05-26
YesData residency

Self-hosted framework; operator controls placement.

Source
YesDeployment model

npm-installed framework; no managed hosting for the OSS core. (self-hosted)

Source
PartialAudit logging

No built-in enterprise audit log; observability integrations, operator-configured.

Source
N/ASOC 2

Self-hosted library; SOC 2 applies to the operator's infrastructure, not the package.

N/AISO 27001

Self-hosted library; ISO 27001 applies to the operator's ISMS, not the package.

N/AISO 42001

Self-hosted library; ISO 42001 applies to the deploying organisation.

N/AEU AI Act

Developer component, not an AI system placed on the market; obligations rest with the deployer. (role: not-applicable)

YesLicense risk

Apache-2.0 core; ee/ paths under a proprietary Mastra Enterprise License (source-available). (medium)

Source

License history

Verified license transitions for Mastra, newest first. Relicensing is tracked as a first-class procurement risk — see the license-change feed for all tracked tools.

Mastra uses a dual-license model: most of the repo is Apache 2.0, while code under ee/ directories uses the Mastra Enterprise License.

  1. More restrictive

    Apache 2.0 to Apache 2.0 core + EE paths

    Introduced ee/ directories under the source-available Mastra Enterprise License; the core remains Apache 2.0. Origin of the current dual-license state.

    mastra PR #13163: auth core, server RBAC, and adapter permission enforcement

EU AI Act obligations

Risk tier: Not applicable · as of 2026-10-10

Source-backed information mapped from Mastra's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.

Change history

Source-backed and auto-detected events for this tool, newest first.

  1. Release

    Mastra core 1.75.0 adds a span query API, token and cost analytics, and @mastra/connect 1.0 with Microsoft Teams. Breaking: integrations is renamed providers.

    Release @mastra/core@1.75.0 · mastra-ai/mastra
  2. Release

    Mastra core 1.72.0 added live channel resolvers for connecting channels without redeploying, persisted ownership leases for multi-worker background tasks, and a Microsoft Teams channel.

    Release @mastra/core@1.72.0 · mastra-ai/mastra
  3. ReleaseHigh impact

    Mastra core 1.66.0 added deploy-scoped worker manifests, richer trace and feedback queries, observability-signal deletion, observational-memory transform hooks, and a first-chunk streaming timeout.

    Release @mastra/core@1.66.0 · mastra-ai/mastra
  4. ReleaseHigh impact

    Mastra core 1.60.0 added durable execution for Agents API-created agents without redeployment and introduced a Cloudflare Sandbox provider for remote workspaces.

    Release @mastra/core@1.60.0 · mastra-ai/mastra
  5. ReleaseHigh impact

    Mastra core 1.58.0 added file-based agent schedules, Oracle Database storage and vector support, an in-process QuickJS transport, and dynamic workflow APIs, with stored-workflow naming and channel-format breaking changes.

    Release @mastra/core@1.58.0 · mastra-ai/mastra
  6. Release

    Mastra core 1.51.0 added durable agent crash recovery APIs and opt-in boot-time recovery for orphaned running runs.

    Release @mastra/core@1.51.0 · mastra-ai/mastra
  7. Release

    Mastra 1.50.0 added a LiveKit package for realtime voice agents and workflow-backed voice turns.

    Release @mastra/core@1.50.0 · mastra-ai/mastra
  8. ReleaseHigh impact

    Mastra 1.49.0 added opt-in storage retention policies and storage.prune() across core and supported storage backends.

    Release @mastra/core@1.49.0 · mastra-ai/mastra
  9. ReleaseHigh impact

    Mastra 1.47.0 added AI SDK v7 model support, DurableAgent API parity for stream/resume/generate, gateway-first model discovery, AgentController routing, and eval quality gates.

    Release @mastra/core@1.47.0 · mastra-ai/mastra
  10. ReleaseHigh impact

    Mastra 1.48.0 added cron-scheduled agent heartbeats, file-based agent and subagent auto-registration, durable suspended-run recovery, and stronger auth-context propagation across durable and Inngest execution paths.

    Release @mastra/core@1.48.0 · mastra-ai/mastra
  11. ReleaseHigh impact

    Mastra 1.46.0 reworked Harness around isolated sessions with remote HTTP and JS-client control, enabling safer concurrent multi-user agent hosting and deterministic tool-mocked experiments.

    Release @mastra/core@1.46.0 · mastra-ai/mastra
  12. Release

    Mastra 1.42.0 added trusted system-actor execution for background workflows, tool suspension primitives across agents, thread-state durability, and new observability/storage options for production agent operations.

    June 12, 2026 · @mastra/core@1.42.0 · mastra-ai/mastra
  13. ReleaseHigh impact

    Mastra 1.32.0 introduced fine-grained authorization checks across agent runs, tool and workflow execution, memory thread access, server adapters, and MCP paths.

    Release @mastra/core@1.32.0 · mastra-ai/mastra · GitHub
  14. License changeHigh impact
    Mastra adds source-available Enterprise License paths beside its Apache 2.0 core

    Mastra introduced ee/ directories under the source-available Mastra Enterprise License alongside the Apache 2.0 core, moving the repo from a single permissive license to a dual-license model.

    mastra PR #13163: auth core, server RBAC, and adapter permission enforcement
  15. Auto-detected
    lastRelease: 2026-09-11 → 2026-10-07

    From snapshot diff 2026-09-13 → 2026-10-10.

  16. Auto-detected
    version: 1.66.0 → 1.75.0

    From snapshot diff 2026-09-13 → 2026-10-10.

  17. Auto-detected
    githubStars: 27372 → 27994

    From snapshot diff 2026-08-22 → 2026-09-13.

  18. Auto-detected
    lastRelease: 2026-08-19 → 2026-09-11

    From snapshot diff 2026-08-22 → 2026-09-13.

  19. Auto-detected
    version: 1.60.0 → 1.66.0

    From snapshot diff 2026-08-22 → 2026-09-13.

  20. Auto-detected
    githubStars: 26894 → 27372

    From snapshot diff 2026-08-04 → 2026-08-22.

  21. Auto-detected
    lastRelease: 2026-07-31 → 2026-08-19

    From snapshot diff 2026-08-04 → 2026-08-22.

  22. Auto-detected
    version: 1.55.0 → 1.60.0

    From snapshot diff 2026-08-04 → 2026-08-22.

  23. Auto-detected
    githubStars: 26033 → 26894

    From snapshot diff 2026-07-17 → 2026-08-04.

  24. Auto-detected
    lastRelease: 2026-07-08 → 2026-07-31

    From snapshot diff 2026-07-17 → 2026-08-04.

  25. Auto-detected
    version: 1.50.0 → 1.55.0

    From snapshot diff 2026-07-17 → 2026-08-04.

  26. Auto-detected
    githubStars: 24843 → 26033

    From snapshot diff 2026-06-07 → 2026-07-17.

  27. Auto-detected
    lastRelease: 2026-05-27 → 2026-07-08

    From snapshot diff 2026-06-07 → 2026-07-17.

  28. Auto-detected
    version: 1.37.0 → 1.50.0

    From snapshot diff 2026-06-07 → 2026-07-17.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.

AI Agent Frameworks

Return to the category grid to compare governance posture across every tracked tool.

Platforms

Review Microsoft Foundry, Amazon Bedrock, and Gemini Enterprise Agent Platform as the foundation layer.

Weekly updates

Track releases, deprecations, license changes, and other market movements.