AstrBot vs Haven

AstrBot

Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.

Haven

Haven answers by phone call, text, email and app, is free in beta with no card, and publishes a status page with dated incidents. No public page read says which actions need approval, which accounts it connects or how their tokens are kept, and it names no model provider or sub-processor.

AstrBot

1. Set ASTRBOT_DISABLE_METRICS=1 before the first start. Statistics, including the hostname, are sent to tickstats.soulter.top by default
2. Set dashboard.host to 127.0.0.1 in data/cmd_config.json, or the DASHBOARD_HOST variable, unless remote access is intended. The default is 0.0.0.0
3. Create an abk_ key in Settings, OpenAPI with only the scopes needed, and send it as Authorization: Bearer or X-API-Key
4. Include username in every POST /api/v1/chat body. Without the chat:admin scope an administrator ID is rejected
5. Check Extensions, Future Tasks after asking for a schedule. One-off tasks are deleted after their run even when the run fails

Haven

1. Haven has no documented API or MCP server. An outside agent can reach it only through the owner's channels (call, SMS, email, app).
2. Do not assume an approval step before Haven sends mail, texts or calls. None is documented on the public pages.
3. Email Haven sends to other people names Hello Haven as sender and says it was sent on the user's behalf, per the terms.
4. Chat messages, history, profile context and uploaded files go to third-party AI model providers that the vendor does not name.
5. Check status.hellohaven.ai before relying on phone or voice. All four published incidents affected those channels.