{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-01", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "clawboo", "name": "Clawboo", "vendor": "Sanreds", "vendorUrl": "https://www.claw.boo", "kind": "harness", "category": "agent-harnesses", "summary": "Clawboo is an open-source, self-hosted dashboard and server that runs a team of AI agents on one task board. A lead agent, Boo Zero, hands tasks to Claude Code, Codex, Hermes, OpenClaw or Clawboo's own built-in agents.", "url": "https://www.anchorterminal.com/tools/clawboo", "markdownUrl": "https://www.anchorterminal.com/tools/clawboo.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/clawboo.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/clawboo.json", "dns": "clawboo.grade.anchorterminal.com", "repo": "https://github.com/clawboo/clawboo", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "clawboo" } ], "auth": "none", "authNotes": "No Clawboo account. On the default loopback bind the API needs no credential. An optional shared token, `STUDIO_ACCESS_TOKEN`, puts every `/api/` route behind a `clawboo_access` cookie, with no users, roles or per-person revocation. Agents Clawboo starts reach its MCP servers through signed attach URLs.", "pricing": "free", "pricingNotes": "Free and MIT, self-hosted, with nothing to buy. The owner pays the model providers or plans each runtime uses, or runs a local Ollama model with no key. No hosted option is offered.", "priceSummary": "Free ยท OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation (llms-full.txt), the README or the npm package metadata (checked 2026-11-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 100, "pypiWeekly": null, "asOf": "2026-11-01" }, "docsUrl": "https://docs.claw.boo", "llmsTxt": "https://docs.claw.boo/llms.txt", "capabilities": [ "agent.multi-agent", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "llms-txt", "mcp", "typescript" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 61.4, "grade": "C", "agentReady": false, "rank": 555, "ranked": true, "rankOf": 1251, "categoryRank": 15, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 51, "payments": 60, "reliability": 52, "schema": 83, "security": 70, "transparency": 58 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 52, "points": 10.4, "reason": "Read as local software. The official npm package `clawboo` states Node.js 22.12 or newer, and the README says macOS, Linux and Windows are supported (20). `ci.yml` runs lint, typecheck, Vitest and a real-concurrency suite on Linux and platform suites on Windows and macOS, and `publish.yml` reruns build, lint, typecheck, tests and a clean-install boot before it publishes. 0.5.0 carries provenance from that workflow on main, so its checks passed at that commit, but run results on main couldn't be read (15). github.com was unreachable, so open crash and regression issues are unchecked. A known-issues page lists 25 entries with a status each, three of them fixed on main (5). Changesets write a changelog entry per release, and removals and the 0.2.0 database reset are called out, though breaking changes arrive in minor versions before 1.0 (12). Version 0.5.0, and SECURITY.md says pre-1.0 (0).", "checked": "2026-11-01" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 83, "points": 13.49, "reason": "Harness reading of the framework line, as for Paperclip. The REST API's 199 routes are documented per resource with parameters, bodies and responses, and the MCP tools reference gives typed arguments for every tool on the four servers, but no OpenAPI file was found (17). llms.txt, llms-full.txt and a Markdown copy of every page at `.md` on docs.claw.boo (10). The docs say what each part does and does not cover, with known issues, production defaults and a limits page that names the code line behind each number (17). Tool arguments are typed with required and optional fields and documented caps, such as 24 live subtasks per parent and limits lowered to 1,000, with free-text task bodies (12). curl examples on each API page, an events and errors reference, and the exact error strings each MCP tool returns (14). A dated changelog for every release with an Unreleased section, though API paths carry no version and every MCP server reports 0.1.0 (13).", "checked": "2026-11-01" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 75, "points": 12.19, "reason": "Harness reading, scored on what an agent or pipeline driving it has to supply. Four MCP servers keep tool lists small (12 Tasks tools, 4 Memory tools, 2 or 3 TeamChat tools, and Tools with four demonstration builtins plus granted connectors), Clawboo Native gets a read-only Tasks subset, and Tools results over 16 KiB are trimmed with a handle to read the rest (22). Circuit breakers stop task-runner runs after more than 30 tool calls or 200,000 tokens a minute, and team chat caps hand-offs at 8 a turn and three levels. Budgets warn only unless set to a hard cap, and a hard cap stops most runs only between runs (14). REST errors use one `{error}` shape, refused MCP calls return `denied:` with a reason prefix, and 429s carry `Retry-After` (16). `claim_task` and `assign_task` are atomic, illegal status changes are refused by name, the board survives restarts and routines resume after failure. No MCP tool annotations are documented (14). One `npx` command and a provider key or a local Ollama, but Claude Code teammates need a global install with the Agent SDK, and there is no client SDK (9).", "checked": "2026-11-01" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 70, "points": 12.25, "reason": "Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The docs say Clawboo sends no telemetry and list the GitHub catalogue fetch, the npm version check, OpenRouter's public model list, Google Fonts and the GitHub star count, of which only the catalogue address can be changed (27). Clawboo Native shell commands are off by default and asked one at a time, and connector grants are per agent with approval on writes. Claude Code, Codex and Hermes run with their prompts and sandboxes off and no setting to change it, they can read Clawboo's database and key vault, and with no access token by default any local program can answer approval cards (8). Images in agent text don't load on their own, peer posts are marked as evidence, and a run that has read private data and untrusted content asks before any outbound connector call (11). An audit log of budget, breaker, approval, verification, tool-call and install events, with secrets masked (13). SECURITY.md with private reporting, CodeQL, Dependabot and npm provenance. No security.txt or bug bounty, OSV lists no advisory for `clawboo`, and the proxy advisory is on the docs with a workaround while its fix is unreleased (11).", "checked": "2026-11-01" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 60, "points": 7.5, "reason": "No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy (20). No card and no Clawboo account (20). One `npx` command installs and starts it with no sign-up (20). Model costs belong to the providers the owner connects.", "checked": "2026-11-01" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 51, "points": 4.46, "reason": "0.5.0 was published to npm on 21 October 2026 (30). Two releases in the 90 days to 1 November 2026, 0.4.0 on 28 September and 0.5.0, below the three the line asks for (0). github.com was unreachable, so replies to issues, pull requests and Discussions are unchecked. The CI file cites issue #140 as fixed (3). One public npm package, current, with no entry in the official MCP registry for its four servers (10). CI, CodeQL, weekly Dependabot and SLSA provenance on 0.4.0 and 0.5.0, with `@composio/client` pinned to an alpha (8).", "checked": "2026-11-01" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 58, "points": 5.08, "note": "editorial 80, provenance 36", "reason": "MIT, Copyright 2026 Sanreds, with a third-party notices file (30). The docs list every file Clawboo writes, which copies of keys are encrypted and which are plain text, retention for stored tool results (7 days) and pending approvals (24 hours), and that prompts go only to connected providers. There is no privacy statement, and the website wasn't read (22). The 0.1.x line is deprecated on npm with a note in the changelog, and removals are dated in release notes, with no written deprecation policy or notice period (10). No telemetry, with the server's own outbound requests disclosed, though the npm update check has no setting (18).", "checked": "2026-11-01" } ], "assessment": { "date": "2026-11-01", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Harness reading, scored on what an agent or pipeline driving it has to supply. Four MCP servers keep tool lists small (12 Tasks tools, 4 Memory tools, 2 or 3 TeamChat tools, and Tools with four demonstration builtins plus granted connectors), Clawboo Native gets a read-only Tasks subset, and Tools results over 16 KiB are trimmed with a handle to read the rest (22). Circuit breakers stop task-runner runs after more than 30 tool calls or 200,000 tokens a minute, and team chat caps hand-offs at 8 a turn and three levels. Budgets warn only unless set to a hard cap, and a hard cap stops most runs only between runs (14). REST errors use one `{error}` shape, refused MCP calls return `denied:` with a reason prefix, and 429s carry `Retry-After` (16). `claim_task` and `assign_task` are atomic, illegal status changes are refused by name, the board survives restarts and routines resume after failure. No MCP tool annotations are documented (14). One `npx` command and a provider key or a local Ollama, but Claude Code teammates need a global install with the Agent SDK, and there is no client SDK (9).", "maintenance": "0.5.0 was published to npm on 21 October 2026 (30). Two releases in the 90 days to 1 November 2026, 0.4.0 on 28 September and 0.5.0, below the three the line asks for (0). github.com was unreachable, so replies to issues, pull requests and Discussions are unchecked. The CI file cites issue #140 as fixed (3). One public npm package, current, with no entry in the official MCP registry for its four servers (10). CI, CodeQL, weekly Dependabot and SLSA provenance on 0.4.0 and 0.5.0, with `@composio/client` pinned to an alpha (8).", "payments": "No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy (20). No card and no Clawboo account (20). One `npx` command installs and starts it with no sign-up (20). Model costs belong to the providers the owner connects.", "reliability": "Read as local software. The official npm package `clawboo` states Node.js 22.12 or newer, and the README says macOS, Linux and Windows are supported (20). `ci.yml` runs lint, typecheck, Vitest and a real-concurrency suite on Linux and platform suites on Windows and macOS, and `publish.yml` reruns build, lint, typecheck, tests and a clean-install boot before it publishes. 0.5.0 carries provenance from that workflow on main, so its checks passed at that commit, but run results on main couldn't be read (15). github.com was unreachable, so open crash and regression issues are unchecked. A known-issues page lists 25 entries with a status each, three of them fixed on main (5). Changesets write a changelog entry per release, and removals and the 0.2.0 database reset are called out, though breaking changes arrive in minor versions before 1.0 (12). Version 0.5.0, and SECURITY.md says pre-1.0 (0).", "schema": "Harness reading of the framework line, as for Paperclip. The REST API's 199 routes are documented per resource with parameters, bodies and responses, and the MCP tools reference gives typed arguments for every tool on the four servers, but no OpenAPI file was found (17). llms.txt, llms-full.txt and a Markdown copy of every page at `.md` on docs.claw.boo (10). The docs say what each part does and does not cover, with known issues, production defaults and a limits page that names the code line behind each number (17). Tool arguments are typed with required and optional fields and documented caps, such as 24 live subtasks per parent and limits lowered to 1,000, with free-text task bodies (12). curl examples on each API page, an events and errors reference, and the exact error strings each MCP tool returns (14). A dated changelog for every release with an Unreleased section, though API paths carry no version and every MCP server reports 0.1.0 (13).", "security": "Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The docs say Clawboo sends no telemetry and list the GitHub catalogue fetch, the npm version check, OpenRouter's public model list, Google Fonts and the GitHub star count, of which only the catalogue address can be changed (27). Clawboo Native shell commands are off by default and asked one at a time, and connector grants are per agent with approval on writes. Claude Code, Codex and Hermes run with their prompts and sandboxes off and no setting to change it, they can read Clawboo's database and key vault, and with no access token by default any local program can answer approval cards (8). Images in agent text don't load on their own, peer posts are marked as evidence, and a run that has read private data and untrusted content asks before any outbound connector call (11). An audit log of budget, breaker, approval, verification, tool-call and install events, with secrets masked (13). SECURITY.md with private reporting, CodeQL, Dependabot and npm provenance. No security.txt or bug bounty, OSV lists no advisory for `clawboo`, and the proxy advisory is on the docs with a workaround while its fix is unreleased (11).", "transparency": "MIT, Copyright 2026 Sanreds, with a third-party notices file (30). The docs list every file Clawboo writes, which copies of keys are encrypted and which are plain text, retention for stored tool results (7 days) and pending approvals (24 hours), and that prompts go only to connected providers. There is no privacy statement, and the website wasn't read (22). The 0.1.x line is deprecated on npm with a note in the changelog, and removals are dated in release notes, with no written deprecation policy or notice period (10). No telemetry, with the server's own outbound requests disclosed, though the npm update check has no setting (18)." }, "sources": [ { "what": "repository README (product, quickstart, runtimes, roadmap)", "url": "https://raw.githubusercontent.com/clawboo/clawboo/main/README.md", "seen": "2026-11-01" }, { "what": "MIT licence (copyright holder)", "url": "https://raw.githubusercontent.com/clawboo/clawboo/main/LICENSE", "seen": "2026-11-01" }, { "what": "SECURITY.md (reporting, CodeQL, Dependabot, provenance, threat model)", "url": "https://raw.githubusercontent.com/clawboo/clawboo/main/SECURITY.md", "seen": "2026-11-01" }, { "what": "CLI changelog", "url": "https://raw.githubusercontent.com/clawboo/clawboo/main/apps/cli/CHANGELOG.md", "seen": "2026-11-01" }, { "what": "CI workflow", "url": "https://raw.githubusercontent.com/clawboo/clawboo/main/.github/workflows/ci.yml", "seen": "2026-11-01" }, { "what": "Dependabot configuration", "url": "https://raw.githubusercontent.com/clawboo/clawboo/main/.github/dependabot.yml", "seen": "2026-11-01" }, { "what": "npm registry document (versions, dates, maintainer, bins, engines)", "url": "https://registry.npmjs.org/clawboo", "seen": "2026-11-01" }, { "what": "npm provenance attestation for 0.5.0", "url": "https://registry.npmjs.org/-/npm/v1/attestations/clawboo@0.5.0", "seen": "2026-11-01" }, { "what": "npm weekly downloads", "url": "https://api.npmjs.org/downloads/point/last-week/clawboo", "seen": "2026-11-01" }, { "what": "docs llms.txt", "url": "https://docs.claw.boo/llms.txt", "seen": "2026-11-01" }, { "what": "docs llms-full.txt (every docs page)", "url": "https://docs.claw.boo/llms-full.txt", "seen": "2026-11-01" }, { "what": "changelog with Unreleased section", "url": "https://docs.claw.boo/appendices/changelog", "seen": "2026-11-01" }, { "what": "security model and proxy advisory", "url": "https://docs.claw.boo/operating/security", "seen": "2026-11-01" }, { "what": "what agents can do (runtime permissions)", "url": "https://docs.claw.boo/concepts/permissions", "seen": "2026-11-01" }, { "what": "production defaults (what leaves the machine)", "url": "https://docs.claw.boo/operating/production-defaults", "seen": "2026-11-01" }, { "what": "MCP servers and attach tokens", "url": "https://docs.claw.boo/operating/mcp-servers", "seen": "2026-11-01" }, { "what": "MCP tools reference", "url": "https://docs.claw.boo/reference/mcp-tools", "seen": "2026-11-01" }, { "what": "REST API overview (auth, rate limits, errors, routes)", "url": "https://docs.claw.boo/reference/rest-api", "seen": "2026-11-01" }, { "what": "known issues and limitations", "url": "https://docs.claw.boo/appendices/known-issues", "seen": "2026-11-01" }, { "what": "release process", "url": "https://docs.claw.boo/internals/release-process", "seen": "2026-11-01" }, { "what": "licence and third-party notices", "url": "https://docs.claw.boo/appendices/license-and-notices", "seen": "2026-11-01" }, { "what": "security.txt on docs.claw.boo (404)", "url": "https://docs.claw.boo/.well-known/security.txt", "seen": "2026-11-01" }, { "what": "official MCP registry search for clawboo (no entries)", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=clawboo", "seen": "2026-11-01" }, { "what": "OSV query for npm clawboo (no advisories)", "url": "https://api.osv.dev/v1/query", "seen": "2026-11-01" }, { "what": "robots.txt of www.claw.boo", "url": "https://www.claw.boo/robots.txt", "seen": "2026-11-01" } ], "openQuestions": [ "unchecked: github.com and api.github.com were unreachable, so stars, open issues, reply times, Actions results on main, tags and GitHub security advisories weren't read", "unchecked: www.claw.boo, whose robots.txt disallows Claude-Web, so any terms, privacy page or claims on the website weren't read", "The proxy advisory has no date and no GitHub advisory or CVE was found. Whether a release after 0.5.0 ships, and when, is open", "The X summary called Clawboo a 31 October 2026 launch. npm shows a name placeholder on 28 February 2026, the first real release on 19 May 2026 and 0.5.0 on 21 October 2026", "Judgement call. Clawboo Native runs its own model loop with file and shell tools, but Clawboo mostly drives other harnesses like Paperclip does, so `agent.harness` is left out of its capabilities as it is for Paperclip (founder, 1 November 2026)", "No person's name is published. Sanreds is the copyright holder and npm maintainer, and no company, terms or address was found" ] }, "negative": -4, "negativeNotes": [ "Undated advisory on the security page, read 1 November 2026. On 0.5.0 (21 October 2026) and older, any request from 127.0.0.1 reaches `/api/mcp/` without the access cookie, so a reverse proxy on the same machine exposes the boards, memory, team chat, tools and signed attach URLs for any agent, even with `STUDIO_ACCESS_TOKEN` set. Published by the maintainer with a proxy rule to block it, fixed on main and not released, in a setup that isn't the default, -3. https://docs.claw.boo/operating/security", "Listed under Unreleased in the changelog, read 1 November 2026. On 0.5.0 and older, an access token containing a character outside letters, digits and `.`, `_`, `~`, `-` turned the access check off while the server kept running, leaving a proxied dashboard open. Fixed on main and not released, -1. https://docs.claw.boo/appendices/changelog" ], "verdict": "Tasks, memory, team chat and connectors are shared across five runtimes through four MCP servers, with documentation that states each default and limit. Claude Code, Codex and Hermes run with their sandboxes and approval prompts off and no setting to change it, and a reverse-proxy exposure of the MCP servers is fixed only on the unreleased main branch.", "bestFor": "One person on one computer who wants several coding and general agents on one board, with shared memory and a lead agent that routes work.", "strengths": [ "One board, one team chat and one shared memory across Clawboo Native, Claude Code, Codex, Hermes and OpenClaw agents", "No telemetry per the docs, which list the three requests the server makes itself and the two the dashboard makes", "Loopback bind by default, a same-origin guard against browser and DNS-rebinding attacks, and a refusal to start on a network bind without a token", "About 120 documentation pages, served as Markdown with llms.txt and llms-full.txt, including a known-issues page and every built-in limit with its source line", "npm releases carry SLSA provenance from the repository's publish workflow, with CodeQL and Dependabot in the repository" ], "weaknesses": [ "Claude Code runs in `bypassPermissions`, Codex with `danger-full-access` and Hermes with `--yolo`, with no setting to change it and no sandbox", "On 0.5.0 and older, a same-machine reverse proxy exposes `/api/mcp/` without the access cookie. The fix is on main and unreleased on 1 November 2026", "No access token by default, so any local program can call the API and answer approval cards", "Keys saved under Providers are also written in plain text to `~/.openclaw/.env` and each OpenClaw agent's `auth-profiles.json`", "Version 0.5.0, with two releases in the 90 days to 1 November 2026 and budgets that only warn unless set to a hard cap" ], "agentNotes": [ "Run `npx clawboo@latest`, not a bare `npx clawboo`, which can reuse an older cached build. Node.js 22.12 or newer is required", "On 0.5.0 behind nginx, Caddy or a Cloudflare Tunnel, deny `/api/mcp/` at the proxy and set `STUDIO_ACCESS_TOKEN` from `openssl rand -hex 24`", "Give Claude Code, Codex and Hermes teammates only work you would let run unattended, or run Clawboo under a separate user account or VM", "Create a hard-cap budget in Settings \u003e Insights \u003e Governance before long runs. A fresh install has no budget and new budgets only warn", "Install `@anthropic-ai/claude-agent-sdk` globally beside Clawboo for Claude Code teammates. A one-off `npx` run cannot load it" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 61.4 } ], "editorialScores": { "ergonomics": 75, "maintenance": 51, "payments": 60, "reliability": 52, "schema": 83, "security": 70, "transparency": 80 }, "provenanceScore": 36, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-01", "grade": "C", "kind": "listed", "method": "0.7", "score": 61.4 } ] }, "connect": { "install": "npx clawboo@latest # Node.js 22.12 or newer", "http": "curl http://localhost:18790/api/health", "headless": { "command": "curl -X POST http://localhost:18790/api/teams/\u003cteam-id\u003e/chat -H 'Content-Type: application/json' -d '{\"message\":\"Plan the launch checklist.\"}'" } }, "letme": { "capability": "https://letme.dev/agent.multi-agent", "tool": "https://letme.dev/clawboo" }, "notable": [ "Claude Code runs in `bypassPermissions`, Codex with approval `never` and sandbox `danger-full-access`, and Hermes with `--yolo`, and the docs say no setting changes this (https://docs.claw.boo/concepts/permissions)", "The security page carries an advisory that on 0.5.0 and older a reverse proxy on the same machine reaches `/api/mcp/`, including `/api/mcp/config`, without the access cookie. Fixed on main, not released on 1 November 2026 (https://docs.claw.boo/operating/security)", "No telemetry per the docs, which list the requests the server and dashboard make on their own (https://docs.claw.boo/operating/production-defaults)", "0.4.0 and 0.5.0 on npm carry SLSA provenance from `.github/workflows/publish.yml` in clawboo/clawboo (https://registry.npmjs.org/-/npm/v1/attestations/clawboo@0.5.0)", "0.1.0 of 28 February 2026 was a placeholder for the npm name. 0.1.1 of 19 May 2026 is the first real release, and every 0.1.x release is deprecated on npm (https://docs.claw.boo/appendices/changelog)" ], "area": "frameworks", "details": [ { "label": "Interfaces", "value": "Web dashboard and REST API (199 routes per the API overview) on `http://localhost:18790`, the `clawboo` CLI, and four MCP servers (Tasks, Memory, Tools, TeamChat) over Streamable HTTP at `/api/mcp/*` or as the stdio bins `clawboo-mcp-*`" }, { "label": "Runtimes", "value": "Clawboo Native (its own agents on 11 providers, including a local Ollama), Claude Code through the Claude Agent SDK, Codex through `codex app-server`, Hermes, and an OpenClaw Gateway" }, { "label": "Approvals", "value": "Clawboo Native shell commands are off by default and asked one at a time when on. Connector calls that change something ask first, and a run that has read private data and untrusted content asks before any outbound connector call. Hand-offs naming words such as delete, deploy or production wait for a person" }, { "label": "Sandbox", "value": "None. Claude Code, Codex and Hermes run with their own prompts and sandboxes off, as the owner's user. A git worktree separates file changes and is not a fence" }, { "label": "Network", "value": "Loopback bind by default, with a same-origin guard on every `/api/` request. No egress controls for agents. Only connector calls pass through Clawboo" }, { "label": "MCP client", "value": "Curated connectors, entries from the official MCP registry, custom stdio or HTTP servers with OAuth dynamic client registration, and apps through Composio, each shared per agent at Read, Write or Admin" }, { "label": "Models", "value": "The owner's provider keys, a ChatGPT plan through Codex, or a local Ollama model with no key" }, { "label": "Headless", "value": "`POST /api/teams/:id/chat` and `POST /api/runtimes/:id/run` on the REST API, routines on a cron schedule, and the MCP stdio bins" }, { "label": "Telemetry", "value": "None per the docs. The server fetches the marketplace catalogue from GitHub, the latest version from npm and OpenRouter's public model list, and the dashboard loads its font from Google Fonts and the GitHub star count" }, { "label": "Releases in 90 days", "value": "2 (0.4.0 on 28 September and 0.5.0 on 21 October 2026), with a security fix and other changes listed as unreleased on main" }, { "label": "Storage", "value": "SQLite at `~/.clawboo/clawboo.db` and an AES-256-GCM vault whose key sits beside it. Keys saved under Providers are also written in plain text to `~/.openclaw/.env`" }, { "label": "Hosted option", "value": "None. The README roadmap lists hosted and organisation deployments as not yet shipped" } ], "provenance": { "legalEntity": "", "domain": "claw.boo", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://docs.claw.boo/appendices/changelog", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "No legal entity is named in the repository, the docs or the npm package. The MIT licence reads Copyright (c) 2026 Sanreds, and the npm package's only maintainer is sanreds.", "www.claw.boo was not read. Its robots.txt disallows Claude-Web in Cloudflare's managed block and later allows ClaudeBot and anthropic-ai, so the site's terms and privacy pages, if any, are unchecked.", "docs.claw.boo/.well-known/security.txt answered 404 on 1 November 2026. SECURITY.md sends reports to GitHub private vulnerability reporting.", "The software is self-hosted, so there is no vendor endpoint or status page to check. The domain registration date was not looked up." ], "score": 36, "checks": [ { "check": "Legal entity named", "value": "not found", "points": 0, "max": 20, "state": "no" }, { "check": "Domain age", "value": "claw.boo, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "no hosted endpoint", "points": 0, "max": 0, "state": "na" }, { "check": "Terms of service", "value": "nothing hosted, so the MIT licence stands in", "points": 10, "max": 10, "state": "ok" }, { "check": "Privacy policy", "value": "nothing hosted, not scored", "points": 0, "max": 0, "state": "na" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "1 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "help pages, a community", "points": 5, "max": 5, "state": "ok" } ] }, "humans": { "slug": "clawboo", "checked": "2026-11-01", "company": "Clawboo (Sanreds)", "people": [ { "name": "Sanreds", "role": "Copyright holder of Clawboo's MIT licence and maintainer of the clawboo npm package (a handle)", "page": "/people/sanreds/" } ], "peopleNote": "Clawboo publishes no personal name. The MIT licence and the docs' licence page name the copyright holder as Sanreds (2026), and the npm package's only maintainer and publisher is the account sanreds. Whether Sanreds is one person or a group isn't stated, so founder isn't set and no personal accounts are listed; the npm contact address is left out as a personal address. The GitHub organisation clawboo's profile says \"We build open-source tooling for orchestrating teams of AI agents.\" No company, registration or address was found in the repository, the docs or the npm package. www.claw.boo wasn't read (its robots.txt disallows Claude-Web), and github.com couldn't be reached, so the maintainer's GitHub profile wasn't read. Investors were looked for in the README, the docs, the npm package and two web searches; none was found and no funding is mentioned. The README's roadmap lists hosted and organisation deployments as not yet shipped.", "companySocial": { "github": "https://github.com/clawboo" }, "support": { "urls": [ "https://docs.claw.boo/help/troubleshooting", "https://docs.claw.boo/appendices/known-issues", "https://github.com/clawboo/clawboo/issues" ], "community": [ { "label": "GitHub Discussions", "url": "https://github.com/clawboo/clawboo/discussions", "kind": "github" } ] }, "sources": [ "https://raw.githubusercontent.com/clawboo/clawboo/main/LICENSE", "https://raw.githubusercontent.com/clawboo/clawboo/main/README.md", "https://raw.githubusercontent.com/clawboo/clawboo/main/SECURITY.md", "https://raw.githubusercontent.com/clawboo/.github/main/profile/README.md", "https://registry.npmjs.org/clawboo", "https://docs.claw.boo/appendices/license-and-notices" ], "ownership": { "status": "project", "checked": "2026-11-01", "sources": [ "https://raw.githubusercontent.com/clawboo/clawboo/main/LICENSE", "https://registry.npmjs.org/clawboo" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/clawboo.json" } }