{ "data": { "a": { "slug": "astrbot", "name": "AstrBot", "vendor": "AstrBotDevs", "vendorUrl": "https://astrbot.app", "kind": "harness", "category": "personal-assistants", "summary": "AstrBot is an open-source chatbot and agent program that the owner runs and connects to messaging platforms such as QQ, Telegram, Slack, Discord, Lark and WeCom, with scheduled tasks, MCP tools, plugins and a web admin panel.", "url": "https://www.anchorterminal.com/tools/astrbot", "markdownUrl": "https://www.anchorterminal.com/tools/astrbot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/astrbot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/astrbot.json", "repo": "https://github.com/AstrBotDevs/AstrBot", "license": "AGPL-3.0-or-later", "transports": [], "packages": [ { "registry": "pypi", "name": "astrbot" }, { "registry": "oci", "name": "soulter/astrbot" } ], "auth": "mixed", "authNotes": "No account with the project. The web panel signs in with the user `astrbot` and a random initial password printed in the startup log, with optional TOTP and a login rate limit (https://github.com/AstrBotDevs/AstrBot/blob/master/docs/en/use/webui.md). Outside programs use `abk_` API keys created in Settings, OpenAPI, sent as `Authorization: Bearer` or `X-API-Key`, limited by 11 scopes and two sensitive sub-scopes and stored as PBKDF2 hashes (https://github.com/AstrBotDevs/AstrBot/blob/master/docs/en/dev/openapi.md). Messaging platform tokens and model provider keys are entered in the panel and kept in `data/cmd_config.json`.", "pricing": "free", "pricingNotes": "Free under AGPL-3.0 with nothing to buy. The EULA says the team sells no service and that a request for payment is a likely scam (https://github.com/AstrBotDevs/AstrBot/blob/master/EULA.md). The owner pays the model provider and any search or sandbox service, or nothing with a local model. The README links a paid third-party cloud host and several model resellers through referral links (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI file or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 41800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.astrbot.app", "openapi": "https://github.com/AstrBotDevs/AstrBot/blob/master/docs/public/openapi.json", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "free", "no-card", "python", "docker", "openapi", "agpl", "telemetry-default-on" ], "lastRelease": "2026-09-27", "graded": true, "anchor": { "graded": true, "score": 58.8, "grade": "C", "agentReady": false, "rank": 584, "ranked": true, "rankOf": 986, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 54, "maintenance": 81, "payments": 60, "reliability": 81, "schema": 62, "security": 44, "transparency": 40 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -2, "negativeNotes": [ "2025-11-14. GHSA-4m32-cjv7-f425 (CVE-2025-55449, critical, 9.8), a hard-coded JWT signing key that let an unauthenticated attacker install a plugin and run commands on any reachable instance at 3.5.17 or earlier. Patched in 3.5.18 on 21 June 2025 and published five months later, inside the last 12 months. Fixed and documented, so the deduction decays to -2. https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-4m32-cjv7-f425" ], "verdict": "Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.", "bestFor": "Someone who wants one self-run bot answering on QQ, Telegram, Slack, Discord, Lark or WeCom, in private or group chats, with scheduled tasks, a knowledge base and plugins.", "strengths": [ "Official adapters for 14 messaging platforms in the README table, among them QQ, Telegram, Slack, Discord, LINE, Lark, DingTalk and WeCom", "Agent shell, Python and file tools are off by default (`computer_use_runtime` is `none`) and limited to administrators when turned on", "HTTP API under `/api/v1` with a published OpenAPI file of 170 paths and API keys limited by 11 scopes, stored as PBKDF2 hashes", "About 15 tagged releases in the 90 days to 12 October 2026, each with a dated changelog file in English and Chinese", "Unit tests run on Linux, macOS and Windows, and the last master runs we saw on 12 October 2026 passed" ], "weaknesses": [ "No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking", "No built-in mail, calendar or file-account connector and no long-term memory of the owner. Both depend on third-party plugins or MCP servers", "Usage statistics are on by default and include the hostname and an installation ID, while the EULA says nothing personally identifiable is collected", "The web panel listens on 0.0.0.0 by default, and the repository has no SECURITY.md or security.txt", "No prompt-injection guidance found, although group messages, web pages and MCP results all reach the model" ], "agentNotes": [ "Set `ASTRBOT_DISABLE_METRICS=1` before the first start. Statistics, including the hostname, are sent to tickstats.soulter.top by default", "Set `dashboard.host` to 127.0.0.1 in `data/cmd_config.json`, or the `DASHBOARD_HOST` variable, unless remote access is intended. The default is 0.0.0.0", "Create an `abk_` key in Settings, OpenAPI with only the scopes needed, and send it as `Authorization: Bearer` or `X-API-Key`", "Include `username` in every `POST /api/v1/chat` body. Without the `chat:admin` scope an administrator ID is rejected", "Check Extensions, Future Tasks after asking for a schedule. One-off tasks are deleted after their run even when the run fails" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.8 } ], "editorialScores": { "ergonomics": 54, "maintenance": 81, "payments": 60, "reliability": 81, "schema": 62, "security": 44, "transparency": 56 }, "provenanceScore": 23 }, "connect": { "install": "uv tool install astrbot --python 3.12 \u0026\u0026 astrbot init \u0026\u0026 astrbot run", "http": "curl -N 'http://localhost:6185/api/v1/chat' -H 'Authorization: Bearer abk_xxx' -H 'Content-Type: application/json' -d '{\"message\":\"Hello\",\"username\":\"alice\"}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/astrbot" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "astrbot.app", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://github.com/AstrBotDevs/AstrBot/blob/master/EULA.md", "privacy": "", "statusPage": "", "changelog": "https://github.com/AstrBotDevs/AstrBot/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No legal entity was found. The docs call AstrBot a non-profit project under the AstrBotDevs organisation, and the EULA speaks for the AstrBot Team.", "The EULA in the repository (last updated 12 January 2026) is the only terms document found. Its section 8 is the only privacy statement, so no privacy link is given.", "astrbot.app answers every path, robots.txt and `/.well-known/security.txt` included, with the same script-drawn page, so the site has no robots rules and no security.txt. docs.astrbot.app answers 404 for security.txt and llms.txt.", "GitHub says the project has not set up a SECURITY.md. A Report a vulnerability button is shown and two advisories are published.", "Usage statistics go to tickstats.soulter.top, a host outside the project's domain.", "The domain's registration date was not looked up." ], "score": 23 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/astrbot.json" }, "answer": "AstrBot scores 58.8 (C) on agent readiness against PicoClaw's 46.1 (D), and leads in 3 of 7 scored categories. PicoClaw leads on agent ergonomics, security \u0026 auth and transparency \u0026 trust.", "b": { "slug": "picoclaw", "name": "PicoClaw", "vendor": "Sipeed", "vendorUrl": "https://picoclaw.io", "kind": "harness", "category": "personal-assistants", "summary": "PicoClaw is an open-source personal AI assistant from Sipeed, a single Go binary for small Linux boards, desktops and Android, reached through chat apps. Its last commit on the main branch was on 19 August 2026.", "url": "https://www.anchorterminal.com/tools/picoclaw", "markdownUrl": "https://www.anchorterminal.com/tools/picoclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/picoclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/picoclaw.json", "repo": "https://github.com/sipeed/picoclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "docker.io/sipeed/picoclaw" }, { "registry": "oci", "name": "ghcr.io/sipeed/picoclaw" } ], "auth": "none", "authNotes": "No account with Sipeed. The owner supplies model provider keys, chat bot tokens and search keys, kept in `~/.picoclaw/.security.yml`. The web launcher asks for a password set on first run, stored as a bcrypt hash. Each channel's `allow_from` list decides who may talk to the assistant, and an empty list admits everyone.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays their model provider by usage, or nothing with a local model through Ollama or vLLM. Search keys are optional, and DuckDuckGo search needs none.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, docs or source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 30000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.picoclaw.io", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "go", "docker", "pre-1.0" ], "lastRelease": "2026-07-03", "graded": true, "anchor": { "graded": true, "score": 46.1, "grade": "D", "agentReady": false, "rank": 879, "ranked": true, "rankOf": 986, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -7, "negativeNotes": [ "2026-04-25 to 2026-07-19. 15 advisories are listed for PicoClaw in the GitHub Advisory Database. Two are reviewed, CVE-2026-36045 (high, 7.3, command injection past the exec deny list, 0.1.2 and earlier) and CVE-2026-6987 (moderate, injection through the launcher's `/api/gateway/restart`, 0.2.4 and earlier), and 13 unreviewed entries of 10 to 19 July name versions up to 0.2.9. None lists a patched version, the project has published no advisory of its own, and it has no security policy. We read four of the fifteen. Several concern old versions and some fixes are in the git history, so -5. https://github.com/advisories?query=picoclaw", "Current behaviour, checked 2026-10-12. The repository's configuration guide says `tools.exec.allow_remote` defaults to `false`. The source at v0.3.1 and on main sets it to `true`, and the docs site calls fully open the default, so a remote chat can run shell commands on a default install. A misleading claim on a security default, the minimum, -2. https://github.com/sipeed/picoclaw/blob/main/docs/guides/configuration.md; https://github.com/sipeed/picoclaw/blob/main/pkg/config/defaults.go" ], "verdict": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.", "bestFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "strengths": [ "MIT licence, one Go binary for x86-64, ARM, RISC-V, MIPS and LoongArch, with Docker images and an Android APK", "Conversations, memory, scheduled jobs and credentials stay in files under `~/.picoclaw` on the owner's device", "File tools are limited to the workspace by default, and command jobs scheduled from remote chats are refused unless the chat is listed", "MCP client over stdio, SSE and HTTP, with optional search-based tool discovery to keep definitions out of context", "Credentials sit in a separate `.security.yml` with optional AES-256-GCM encryption, and are filtered from tool output before the model sees it" ], "weaknesses": [ "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply", "15 CVEs are listed in the GitHub Advisory Database (25 April to 19 July 2026). The project has published no advisory and has no SECURITY.md", "No human approval step. The agent sends messages, writes files and runs shell commands without asking, and the hooks guide says waiting for a human reply is not supported", "Shell execution from remote chats is on by default in the source and on the docs site, while the repository's configuration guide says the default is off", "An empty `allow_from` list lets anyone who can message the bot use it, with only a warning in the log" ], "agentNotes": [ "Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone", "Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says", "Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes", "Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read", "Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 46.1 } ], "editorialScores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 58 }, "provenanceScore": 53 }, "connect": { "install": "git clone https://github.com/sipeed/picoclaw.git \u0026\u0026 cd picoclaw \u0026\u0026 docker compose -f docker/docker-compose.yml --profile launcher up # or download a binary from https://picoclaw.io/download/ and run: picoclaw onboard", "headless": { "command": "picoclaw agent -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/picoclaw" }, "area": "frameworks", "provenance": { "legalEntity": "Sipeed", "domain": "picoclaw.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/sipeed/picoclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The docs footer reads Copyright 2026 Sipeed and the site says PicoClaw is open-source software by Sipeed. The `LICENSE` file names PicoClaw contributors. No registered company name or address was on the pages read.", "No terms of service or privacy policy is linked from picoclaw.io, docs.picoclaw.io or the repository, so both fields are left out and the MIT licence stands in.", "picoclaw.io/.well-known/security.txt and picoclaw.io/llms.txt answered 403 with a storage Access Denied body, read as absent. docs.picoclaw.io/llms.txt answered 404.", "The repository has no SECURITY.md, and GitHub's policy page says none is set up.", "Self-hosted software with no hosted endpoint. The registration date of picoclaw.io was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/picoclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "AstrBotDevs", "b": "Sipeed", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "AGPL-3.0-or-later", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-09-27", "b": "2026-07-03", "name": "Last release" }, { "a": "2026-01-12", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "42k stars", "b": "30k stars", "name": "Popularity" } ], "faq": [ { "answer": "AstrBot scores 58.8 (C) on agent readiness against PicoClaw's 46.1 (D), and leads in 3 of 7 scored categories. PicoClaw leads on agent ergonomics, security \u0026 auth and transparency \u0026 trust.", "question": "Which is better for AI agents, AstrBot or PicoClaw?" }, { "answer": "Yes. AstrBot is open source (AGPL-3.0-or-later). PicoClaw is open source (MIT).", "question": "Are AstrBot and PicoClaw open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 81 against 54", "Schema \u0026 documentation, 62 against 51", "Maintenance \u0026 community, 81 against 22" ], "also": null, "goodFor": "Someone who wants one self-run bot answering on QQ, Telegram, Slack, Discord, Lark or WeCom, in private or group chats, with scheduled tasks, a knowledge base and plugins.", "slug": "astrbot", "watchFor": "No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking" }, { "aheadOn": [ "Agent ergonomics, 66 against 54", "Security \u0026 auth, 51 against 44", "Transparency \u0026 trust, 56 against 40" ], "also": [ "No key needed to call it" ], "goodFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "slug": "picoclaw", "watchFor": "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-cowagent.json", "title": "AstrBot vs CowAgent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-cowagent" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-gaia.json", "title": "AstrBot vs GAIA", "url": "https://www.anchorterminal.com/compare/astrbot-vs-gaia" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-gemini-spark.json", "title": "AstrBot vs Gemini Spark", "url": "https://www.anchorterminal.com/compare/astrbot-vs-gemini-spark" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-grok-bot.json", "title": "AstrBot vs Grok Bot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-grok-bot" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-haven.json", "title": "AstrBot vs Haven", "url": "https://www.anchorterminal.com/compare/astrbot-vs-haven" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.json", "title": "AstrBot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-instinct.json", "title": "AstrBot vs Instinct", "url": "https://www.anchorterminal.com/compare/astrbot-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-ironclaw.json", "title": "AstrBot vs IronClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-leon.json", "title": "AstrBot vs Leon", "url": "https://www.anchorterminal.com/compare/astrbot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-lindy.json", "title": "AstrBot vs Lindy", "url": "https://www.anchorterminal.com/compare/astrbot-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot.json", "title": "AstrBot vs nanobot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanoclaw.json", "title": "AstrBot vs NanoClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openai-dots.json", "title": "AstrBot vs Dots", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw.json", "title": "AstrBot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-poke.json", "title": "AstrBot vs Poke", "url": "https://www.anchorterminal.com/compare/astrbot-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.json", "title": "AstrBot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.json", "title": "AstrBot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-zo-computer.json", "title": "AstrBot vs Zo Computer", "url": "https://www.anchorterminal.com/compare/astrbot-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.json", "title": "CowAgent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw.json", "title": "GAIA vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.json", "title": "Gemini Spark vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.json", "title": "Grok Bot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-picoclaw.json", "title": "Haven vs PicoClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.json", "title": "Hermes Agent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw.json", "title": "Instinct vs PicoClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.json", "title": "IronClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.json", "title": "Leon vs PicoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw.json", "title": "Lindy vs PicoClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.json", "title": "NanoClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.json", "title": "Dots vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-poke.json", "title": "PicoClaw vs Poke", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json", "title": "PicoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.json", "title": "PicoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.json", "title": "PicoClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer" } ], "scores": [ { "astrbot": 81, "by": 27, "edge": "astrbot", "key": "reliability", "name": "Reliability", "picoclaw": 54, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "astrbot": 62, "by": 11, "edge": "astrbot", "key": "schema", "name": "Schema \u0026 documentation", "picoclaw": 51, "weight": 13 }, { "astrbot": 54, "by": 12, "edge": "picoclaw", "key": "ergonomics", "name": "Agent ergonomics", "picoclaw": 66, "weight": 13 }, { "astrbot": 44, "by": 7, "edge": "picoclaw", "key": "security", "name": "Security \u0026 auth", "picoclaw": 51, "weight": 14 }, { "astrbot": 60, "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "picoclaw": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "astrbot": 81, "by": 59, "edge": "astrbot", "key": "maintenance", "name": "Maintenance \u0026 community", "picoclaw": 22, "weight": 7 }, { "astrbot": 40, "by": 16, "edge": "picoclaw", "key": "transparency", "name": "Transparency \u0026 trust", "picoclaw": 56, "weight": 7 } ], "summary": "AstrBot scores 58.8 (C) on agent readiness against PicoClaw's 46.1 (D), and leads in 3 of 7 scored categories. PicoClaw leads on agent ergonomics, security \u0026 auth and transparency \u0026 trust. Both do assistant proactive.", "verdicts": { "astrbot": "Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.", "picoclaw": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw", "json": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.md", "slim": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.min.md" }, "markdown": "AstrBot scores 58.8 (C) on agent readiness against PicoClaw's 46.1 (D), and leads in 3 of 7 scored categories. PicoClaw leads on agent ergonomics, security \u0026 auth and transparency \u0026 trust. Both do assistant proactive.\n\n- AstrBot: grade C, 58.8/100, rank #584 of 986. Markdown https://www.anchorterminal.com/tools/astrbot.md · JSON https://www.anchorterminal.com/api/v1/tools/astrbot.json\n- PicoClaw: grade D, 46.1/100, rank #879 of 986. Markdown https://www.anchorterminal.com/tools/picoclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/picoclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### AstrBot (C)\n\nGood for: Someone who wants one self-run bot answering on QQ, Telegram, Slack, Discord, Lark or WeCom, in private or group chats, with scheduled tasks, a knowledge base and plugins.\n\nAhead on:\n- Reliability, 81 against 54\n- Schema \u0026 documentation, 62 against 51\n- Maintenance \u0026 community, 81 against 22\n\nWatch for: No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking\n\n### PicoClaw (D)\n\nGood for: A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.\n\nAhead on:\n- Agent ergonomics, 66 against 54\n- Security \u0026 auth, 51 against 44\n- Transparency \u0026 trust, 56 against 40\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply\n\n\n## Score by category\n\n| Category | Weight | AstrBot | PicoClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 81 | 54 | AstrBot +27 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 62 | 51 | AstrBot +11 |\n| Agent ergonomics | 13% (16.2 this run) | 54 | 66 | PicoClaw +12 |\n| Security \u0026 auth | 14% (17.5 this run) | 44 | 51 | PicoClaw +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 81 | 22 | AstrBot +59 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 40 | 56 | PicoClaw +16 |\n| Negative events | ≤15 | -2 | -7 | |\n| **Total** | | **58.8 · C** | **46.1 · D** | |\n\n## Facts side by side\n\n| Fact | AstrBot | PicoClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | AstrBotDevs | Sipeed |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | AGPL-3.0-or-later | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-09-27 | 2026-07-03 |\n| Terms last updated | 2026-01-12 | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | not found in the text | |\n| Popularity | 42k stars | 30k stars |\n\n## Verdicts\n\n**AstrBot.** Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.\n\n**PicoClaw.** Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.\n\n## Before you call either\n\n### AstrBot\n\n1. Set `ASTRBOT_DISABLE_METRICS=1` before the first start. Statistics, including the hostname, are sent to tickstats.soulter.top by default\n2. Set `dashboard.host` to 127.0.0.1 in `data/cmd_config.json`, or the `DASHBOARD_HOST` variable, unless remote access is intended. The default is 0.0.0.0\n3. Create an `abk_` key in Settings, OpenAPI with only the scopes needed, and send it as `Authorization: Bearer` or `X-API-Key`\n4. Include `username` in every `POST /api/v1/chat` body. Without the `chat:admin` scope an administrator ID is rejected\n5. Check Extensions, Future Tasks after asking for a schedule. One-off tasks are deleted after their run even when the run fails\n\n### PicoClaw\n\n1. Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone\n2. Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says\n3. Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes\n4. Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read\n5. Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions\n\n## Questions\n\n### Which is better for AI agents, AstrBot or PicoClaw?\n\nAstrBot scores 58.8 (C) on agent readiness against PicoClaw's 46.1 (D), and leads in 3 of 7 scored categories. PicoClaw leads on agent ergonomics, security \u0026 auth and transparency \u0026 trust.\n\n### Are AstrBot and PicoClaw open source?\n\nYes. AstrBot is open source (AGPL-3.0-or-later). PicoClaw is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"astrbot\", \"b\": \"picoclaw\"}`. From a terminal: `anchor compare astrbot picoclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/astrbot.json and https://www.anchorterminal.com/api/v1/tools/picoclaw.json\n\n## Other comparisons with AstrBot or PicoClaw\n\n- [AstrBot vs CowAgent](https://www.anchorterminal.com/compare/astrbot-vs-cowagent.md)\n- [AstrBot vs GAIA](https://www.anchorterminal.com/compare/astrbot-vs-gaia.md)\n- [AstrBot vs Gemini Spark](https://www.anchorterminal.com/compare/astrbot-vs-gemini-spark.md)\n- [AstrBot vs Grok Bot](https://www.anchorterminal.com/compare/astrbot-vs-grok-bot.md)\n- [AstrBot vs Haven](https://www.anchorterminal.com/compare/astrbot-vs-haven.md)\n- [AstrBot vs Hermes Agent](https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.md)\n- [AstrBot vs Instinct](https://www.anchorterminal.com/compare/astrbot-vs-instinct.md)\n- [AstrBot vs IronClaw](https://www.anchorterminal.com/compare/astrbot-vs-ironclaw.md)\n- [AstrBot vs Leon](https://www.anchorterminal.com/compare/astrbot-vs-leon.md)\n- [AstrBot vs Lindy](https://www.anchorterminal.com/compare/astrbot-vs-lindy.md)\n- [AstrBot vs nanobot](https://www.anchorterminal.com/compare/astrbot-vs-nanobot.md)\n- [AstrBot vs NanoClaw](https://www.anchorterminal.com/compare/astrbot-vs-nanoclaw.md)\n- [AstrBot vs Dots](https://www.anchorterminal.com/compare/astrbot-vs-openai-dots.md)\n- [AstrBot vs OpenClaw](https://www.anchorterminal.com/compare/astrbot-vs-openclaw.md)\n- [AstrBot vs Poke](https://www.anchorterminal.com/compare/astrbot-vs-poke.md)\n- [AstrBot vs QwenPaw](https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.md)\n- [AstrBot vs ZeroClaw](https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.md)\n- [AstrBot vs Zo Computer](https://www.anchorterminal.com/compare/astrbot-vs-zo-computer.md)\n- [CowAgent vs PicoClaw](https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.md)\n- [GAIA vs PicoClaw](https://www.anchorterminal.com/compare/gaia-vs-picoclaw.md)\n- [Gemini Spark vs PicoClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.md)\n- [Grok Bot vs PicoClaw](https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.md)\n- [Haven vs PicoClaw](https://www.anchorterminal.com/compare/haven-vs-picoclaw.md)\n- [Hermes Agent vs PicoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.md)\n- [Instinct vs PicoClaw](https://www.anchorterminal.com/compare/instinct-vs-picoclaw.md)\n- [IronClaw vs PicoClaw](https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.md)\n- [Leon vs PicoClaw](https://www.anchorterminal.com/compare/leon-vs-picoclaw.md)\n- [Lindy vs PicoClaw](https://www.anchorterminal.com/compare/lindy-vs-picoclaw.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [NanoClaw vs PicoClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.md)\n- [Dots vs PicoClaw](https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [PicoClaw vs Poke](https://www.anchorterminal.com/compare/picoclaw-vs-poke.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [PicoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.md)\n- [PicoClaw vs Zo Computer](https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "AstrBot vs PicoClaw", "url": "" } ], "description": "AstrBot scores 58.8 (C) to PicoClaw's 46.1 (D) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "AstrBot C 58.8", "PicoClaw D 46.1", "scores" ], "h1": "AstrBot vs PicoClaw", "image": "https://www.anchorterminal.com/assets/og/compare-astrbot-vs-picoclaw.png", "path": "/compare/astrbot-vs-picoclaw", "published": "2026-10-01", "section": "tools", "title": "AstrBot vs PicoClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw" }, "tokens": { "markdown": 2600, "slim": 630 }, "version": 1 }