{ "data": { "a": { "slug": "astrbot", "name": "AstrBot", "vendor": "AstrBotDevs", "vendorUrl": "https://astrbot.app", "kind": "harness", "category": "personal-assistants", "summary": "AstrBot is an open-source chatbot and agent program that the owner runs and connects to messaging platforms such as QQ, Telegram, Slack, Discord, Lark and WeCom, with scheduled tasks, MCP tools, plugins and a web admin panel.", "url": "https://www.anchorterminal.com/tools/astrbot", "markdownUrl": "https://www.anchorterminal.com/tools/astrbot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/astrbot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/astrbot.json", "repo": "https://github.com/AstrBotDevs/AstrBot", "license": "AGPL-3.0-or-later", "transports": [], "packages": [ { "registry": "pypi", "name": "astrbot" }, { "registry": "oci", "name": "soulter/astrbot" } ], "auth": "mixed", "authNotes": "No account with the project. The web panel signs in with the user `astrbot` and a random initial password printed in the startup log, with optional TOTP and a login rate limit (https://github.com/AstrBotDevs/AstrBot/blob/master/docs/en/use/webui.md). Outside programs use `abk_` API keys created in Settings, OpenAPI, sent as `Authorization: Bearer` or `X-API-Key`, limited by 11 scopes and two sensitive sub-scopes and stored as PBKDF2 hashes (https://github.com/AstrBotDevs/AstrBot/blob/master/docs/en/dev/openapi.md). Messaging platform tokens and model provider keys are entered in the panel and kept in `data/cmd_config.json`.", "pricing": "free", "pricingNotes": "Free under AGPL-3.0 with nothing to buy. The EULA says the team sells no service and that a request for payment is a likely scam (https://github.com/AstrBotDevs/AstrBot/blob/master/EULA.md). The owner pays the model provider and any search or sandbox service, or nothing with a local model. The README links a paid third-party cloud host and several model resellers through referral links (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI file or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 41800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.astrbot.app", "openapi": "https://github.com/AstrBotDevs/AstrBot/blob/master/docs/public/openapi.json", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "free", "no-card", "python", "docker", "openapi", "agpl", "telemetry-default-on" ], "lastRelease": "2026-09-27", "graded": true, "anchor": { "graded": true, "score": 58.8, "grade": "C", "agentReady": false, "rank": 584, "ranked": true, "rankOf": 986, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 54, "maintenance": 81, "payments": 60, "reliability": 81, "schema": 62, "security": 44, "transparency": 40 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -2, "negativeNotes": [ "2025-11-14. GHSA-4m32-cjv7-f425 (CVE-2025-55449, critical, 9.8), a hard-coded JWT signing key that let an unauthenticated attacker install a plugin and run commands on any reachable instance at 3.5.17 or earlier. Patched in 3.5.18 on 21 June 2025 and published five months later, inside the last 12 months. Fixed and documented, so the deduction decays to -2. https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-4m32-cjv7-f425" ], "verdict": "Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.", "bestFor": "Someone who wants one self-run bot answering on QQ, Telegram, Slack, Discord, Lark or WeCom, in private or group chats, with scheduled tasks, a knowledge base and plugins.", "strengths": [ "Official adapters for 14 messaging platforms in the README table, among them QQ, Telegram, Slack, Discord, LINE, Lark, DingTalk and WeCom", "Agent shell, Python and file tools are off by default (`computer_use_runtime` is `none`) and limited to administrators when turned on", "HTTP API under `/api/v1` with a published OpenAPI file of 170 paths and API keys limited by 11 scopes, stored as PBKDF2 hashes", "About 15 tagged releases in the 90 days to 12 October 2026, each with a dated changelog file in English and Chinese", "Unit tests run on Linux, macOS and Windows, and the last master runs we saw on 12 October 2026 passed" ], "weaknesses": [ "No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking", "No built-in mail, calendar or file-account connector and no long-term memory of the owner. Both depend on third-party plugins or MCP servers", "Usage statistics are on by default and include the hostname and an installation ID, while the EULA says nothing personally identifiable is collected", "The web panel listens on 0.0.0.0 by default, and the repository has no SECURITY.md or security.txt", "No prompt-injection guidance found, although group messages, web pages and MCP results all reach the model" ], "agentNotes": [ "Set `ASTRBOT_DISABLE_METRICS=1` before the first start. Statistics, including the hostname, are sent to tickstats.soulter.top by default", "Set `dashboard.host` to 127.0.0.1 in `data/cmd_config.json`, or the `DASHBOARD_HOST` variable, unless remote access is intended. The default is 0.0.0.0", "Create an `abk_` key in Settings, OpenAPI with only the scopes needed, and send it as `Authorization: Bearer` or `X-API-Key`", "Include `username` in every `POST /api/v1/chat` body. Without the `chat:admin` scope an administrator ID is rejected", "Check Extensions, Future Tasks after asking for a schedule. One-off tasks are deleted after their run even when the run fails" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.8 } ], "editorialScores": { "ergonomics": 54, "maintenance": 81, "payments": 60, "reliability": 81, "schema": 62, "security": 44, "transparency": 56 }, "provenanceScore": 23 }, "connect": { "install": "uv tool install astrbot --python 3.12 \u0026\u0026 astrbot init \u0026\u0026 astrbot run", "http": "curl -N 'http://localhost:6185/api/v1/chat' -H 'Authorization: Bearer abk_xxx' -H 'Content-Type: application/json' -d '{\"message\":\"Hello\",\"username\":\"alice\"}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/astrbot" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "astrbot.app", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://github.com/AstrBotDevs/AstrBot/blob/master/EULA.md", "privacy": "", "statusPage": "", "changelog": "https://github.com/AstrBotDevs/AstrBot/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No legal entity was found. The docs call AstrBot a non-profit project under the AstrBotDevs organisation, and the EULA speaks for the AstrBot Team.", "The EULA in the repository (last updated 12 January 2026) is the only terms document found. Its section 8 is the only privacy statement, so no privacy link is given.", "astrbot.app answers every path, robots.txt and `/.well-known/security.txt` included, with the same script-drawn page, so the site has no robots rules and no security.txt. docs.astrbot.app answers 404 for security.txt and llms.txt.", "GitHub says the project has not set up a SECURITY.md. A Report a vulnerability button is shown and two advisories are published.", "Usage statistics go to tickstats.soulter.top, a host outside the project's domain.", "The domain's registration date was not looked up." ], "score": 23 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/astrbot.json" }, "answer": "ZeroClaw scores 70.2 (BB) on agent readiness against AstrBot's 58.8 (C), and leads in 4 of 7 scored categories. AstrBot leads on reliability.", "b": { "slug": "zeroclaw", "name": "ZeroClaw", "vendor": "ZeroClaw Labs", "vendorUrl": "https://www.zeroclaw.com", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal AI assistant from ZeroClaw Labs, shipped as one Rust binary the owner runs. It answers on chat, email and voice channels, calls tools and MCP servers, and keeps memory in local SQLite.", "url": "https://www.anchorterminal.com/tools/zeroclaw", "markdownUrl": "https://www.anchorterminal.com/tools/zeroclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/zeroclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/zeroclaw.json", "repo": "https://github.com/zeroclaw-labs/zeroclaw", "license": "MIT OR Apache-2.0", "transports": [], "packages": [ { "registry": "oci", "name": "ghcr.io/zeroclaw-labs/zeroclaw" } ], "auth": "none", "authNotes": "No account with the vendor. Model keys, bot tokens and mail passwords go in `~/.zeroclaw/config.toml` as encrypted secret fields, set through `zeroclaw config set`, the dashboard or the terminal UI. OpenAI Codex and Claude subscription tokens are accepted in place of API keys. Gateway clients pair first and then send `Authorization: Bearer \u003ctoken\u003e`, with token hashes kept in config (https://github.com/zeroclaw-labs/zeroclaw/blob/master/docs/book/src/security/authentication.md).", "pricing": "free", "pricingNotes": "Free under MIT or Apache-2.0, with no subscription and no hosted seat (https://www.zeroclaw.com/). The owner pays the model provider, or nothing with a local model. ZeroRouter, the vendor's hosted beta model gateway, is optional and its prices were not read (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source at commit 6c0b1f9 (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 32965, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.zeroclaw.com/master/en/introduction.html", "llmsTxt": "https://www.zeroclaw.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "assistant.accounts", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "rust", "mit", "apache-2.0", "pre-1.0", "no-telemetry", "mcp-client", "approvals", "acp", "docker", "llms-txt" ], "lastRelease": "2026-09-05", "graded": true, "anchor": { "graded": true, "score": 70.2, "grade": "BB", "agentReady": true, "rank": 161, "ranked": true, "rankOf": 986, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 80, "payments": 60, "reliability": 74, "schema": 82, "security": 76, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-09-05. GHSA-93f6-34w8-5g98 (high), an unvalidated `wasm_path` let `zeroclaw plugin install` write an attacker-controlled file outside the plugins directory in 0.8.4 and earlier. Fixed in 0.8.5 and published the same day, inside six months, -2. https://github.com/zeroclaw-labs/zeroclaw/security/advisories/GHSA-93f6-34w8-5g98", "2026-04-01. The project lead wrote that a maintainer's AI automation merged pull requests that should not have gone through and that GitHub took enforcement action on the organisation. Disclosed, the maintainer removed and merge access tightened, over six months old, -1. https://www.zeroclaw.com/blog/community-and-stability" ], "verdict": "Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms.", "bestFor": "One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.", "strengths": [ "Supervised mode is the default. Tools outside an eleven-item read-only and fetch list prompt the owner, and an unanswered prompt is a denial after 120 seconds", "Approval prompts arrive on the channel in use, and `approval_route` can send them to a separate approver channel that denies when unreachable", "Channel secrets and provider keys are encrypted with ChaCha20-Poly1305 in `config.toml`, with the key in `.secret_key` at mode 0600", "An empty peer set denies every inbound sender, and the gateway binds 127.0.0.1 with pairing required by default", "Three tagged releases in the 90 days to 12 October 2026, each with a Breaking Changes section, and CI passing on master on 11 October" ], "weaknesses": [ "The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable", "No privacy policy, terms or security.txt on zeroclaw.com, and the home page links none", "`web_fetch`, `web_search_tool` and `browser_open` run without approval by default, and sandboxed tools keep full network egress", "GHSA-93f6-34w8-5g98 (high) let a plugin install write outside the plugins directory in 0.8.4 and earlier, fixed in 0.8.5 on 5 September 2026", "Version 0.8.5 is pre-1.0, patch releases carry breaking changes, and 576 issues and 384 pull requests were open on 12 October 2026" ], "agentNotes": [ "Keep `[risk_profiles.\u003calias\u003e] level = \"supervised\"`. `full` runs every tool not listed in `always_ask`, and the YOLO preset removes the sandbox and path rules too", "Add sending and account tools such as `send_via`, `google_workspace` and `http_request` to `always_ask` so a session-level Always grant cannot skip the prompt", "List senders in `[peer_groups.\u003cname\u003e] external_peers`. `[\"*\"]` accepts anyone on that channel", "Set `[web_fetch].allowed_domains` and `[http_request].allowed_domains`. Fetches run unprompted and the OS sandbox does not block egress", "Run one-shot tasks with `zeroclaw agent -a \u003calias\u003e -m \"\u003ctask\u003e\"`. A cron or webhook turn has no prompt, so shell calls fall to the command policy" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.2 } ], "editorialScores": { "ergonomics": 72, "maintenance": 80, "payments": 60, "reliability": 74, "schema": 82, "security": 76, "transparency": 74 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://raw.githubusercontent.com/zeroclaw-labs/zeroclaw/master/install.sh | sh # or: brew install zeroclaw", "headless": { "command": "zeroclaw agent -a \u003calias\u003e -m \"$TASK\"", "setup": "zeroclaw quickstart" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/zeroclaw" }, "area": "frameworks", "provenance": { "legalEntity": "ZeroClaw Labs", "domain": "zeroclaw.com", "domainRegistered": "2026-03-02", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/zeroclaw-labs/zeroclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The NOTICE file reads Copyright 2025 ZeroClaw Labs and the blog signs posts as CEO, ZeroClaw Labs. No company form, registration or address was found on the site or in the repository.", "The home page of www.zeroclaw.com links no terms and no privacy policy, so both fields are empty and the MIT or Apache-2.0 licence stands in.", "www.zeroclaw.com/.well-known/security.txt answered 404 on 12 October 2026. SECURITY.md asks for GitHub private vulnerability reporting and the README gives security@zeroclaw.dev.", "RDAP gives zeroclaw.com a registration date of 2026-03-02, registrar Atom.com Domains LLC. The repository was created on 13 February 2026.", "There is no hosted endpoint for the assistant. A gateway answers on its owner's own host." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/zeroclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "AstrBotDevs", "b": "ZeroClaw Labs", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "AGPL-3.0-or-later", "b": "MIT OR Apache-2.0", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-27", "b": "2026-09-05", "name": "Last release" }, { "a": "2026-01-12", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "42k stars", "b": "33k stars", "name": "Popularity" } ], "faq": [ { "answer": "ZeroClaw scores 70.2 (BB) on agent readiness against AstrBot's 58.8 (C), and leads in 4 of 7 scored categories. AstrBot leads on reliability.", "question": "Which is better for AI agents, AstrBot or ZeroClaw?" }, { "answer": "Yes. AstrBot is open source (AGPL-3.0-or-later). ZeroClaw is open source (MIT OR Apache-2.0).", "question": "Are AstrBot and ZeroClaw open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 81 against 74" ], "also": null, "goodFor": "Someone who wants one self-run bot answering on QQ, Telegram, Slack, Discord, Lark or WeCom, in private or group chats, with scheduled tasks, a knowledge base and plugins.", "slug": "astrbot", "watchFor": "No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking" }, { "aheadOn": [ "Schema \u0026 documentation, 82 against 62", "Agent ergonomics, 72 against 54", "Security \u0026 auth, 76 against 44", "Transparency \u0026 trust, 64 against 40" ], "also": [ "Agent-ready, a grade of BB or better", "No key needed to call it" ], "goodFor": "One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.", "slug": "zeroclaw", "watchFor": "The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-cowagent.json", "title": "AstrBot vs CowAgent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-cowagent" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-gaia.json", "title": "AstrBot vs GAIA", "url": "https://www.anchorterminal.com/compare/astrbot-vs-gaia" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-gemini-spark.json", "title": "AstrBot vs Gemini Spark", "url": "https://www.anchorterminal.com/compare/astrbot-vs-gemini-spark" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-grok-bot.json", "title": "AstrBot vs Grok Bot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-grok-bot" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-haven.json", "title": "AstrBot vs Haven", "url": "https://www.anchorterminal.com/compare/astrbot-vs-haven" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.json", "title": "AstrBot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-instinct.json", "title": "AstrBot vs Instinct", "url": "https://www.anchorterminal.com/compare/astrbot-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-ironclaw.json", "title": "AstrBot vs IronClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-leon.json", "title": "AstrBot vs Leon", "url": "https://www.anchorterminal.com/compare/astrbot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-lindy.json", "title": "AstrBot vs Lindy", "url": "https://www.anchorterminal.com/compare/astrbot-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot.json", "title": "AstrBot vs nanobot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanoclaw.json", "title": "AstrBot vs NanoClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openai-dots.json", "title": "AstrBot vs Dots", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw.json", "title": "AstrBot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.json", "title": "AstrBot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-poke.json", "title": "AstrBot vs Poke", "url": "https://www.anchorterminal.com/compare/astrbot-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.json", "title": "AstrBot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-zo-computer.json", "title": "AstrBot vs Zo Computer", "url": "https://www.anchorterminal.com/compare/astrbot-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.json", "title": "CowAgent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.json", "title": "GAIA vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw.json", "title": "Gemini Spark vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw.json", "title": "Grok Bot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-zeroclaw.json", "title": "Haven vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.json", "title": "Hermes Agent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-zeroclaw.json", "title": "Instinct vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.json", "title": "IronClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw.json", "title": "Leon vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-zeroclaw.json", "title": "Lindy vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.json", "title": "nanobot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw.json", "title": "NanoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw.json", "title": "Dots vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.json", "title": "OpenClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.json", "title": "PicoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-zeroclaw.json", "title": "Poke vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/poke-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.json", "title": "QwenPaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer.json", "title": "ZeroClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer" } ], "scores": [ { "astrbot": 81, "by": 7, "edge": "astrbot", "key": "reliability", "name": "Reliability", "weight": 16, "zeroclaw": 74 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "astrbot": 62, "by": 20, "edge": "zeroclaw", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "zeroclaw": 82 }, { "astrbot": 54, "by": 18, "edge": "zeroclaw", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "zeroclaw": 72 }, { "astrbot": 44, "by": 32, "edge": "zeroclaw", "key": "security", "name": "Security \u0026 auth", "weight": 14, "zeroclaw": 76 }, { "astrbot": 60, "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "zeroclaw": 60 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "astrbot": 81, "by": 1, "edge": "astrbot", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "zeroclaw": 80 }, { "astrbot": 40, "by": 24, "edge": "zeroclaw", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "zeroclaw": 64 } ], "summary": "ZeroClaw scores 70.2 (BB) on agent readiness against AstrBot's 58.8 (C), and leads in 4 of 7 scored categories. AstrBot leads on reliability. Both do assistant proactive.", "verdicts": { "astrbot": "Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.", "zeroclaw": "Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw", "json": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.md", "slim": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.min.md" }, "markdown": "ZeroClaw scores 70.2 (BB) on agent readiness against AstrBot's 58.8 (C), and leads in 4 of 7 scored categories. AstrBot leads on reliability. Both do assistant proactive.\n\n- AstrBot: grade C, 58.8/100, rank #584 of 986. Markdown https://www.anchorterminal.com/tools/astrbot.md · JSON https://www.anchorterminal.com/api/v1/tools/astrbot.json\n- ZeroClaw: grade BB, 70.2/100, rank #161 of 986. Markdown https://www.anchorterminal.com/tools/zeroclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/zeroclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### AstrBot (C)\n\nGood for: Someone who wants one self-run bot answering on QQ, Telegram, Slack, Discord, Lark or WeCom, in private or group chats, with scheduled tasks, a knowledge base and plugins.\n\nAhead on:\n- Reliability, 81 against 74\n\nWatch for: No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking\n\n### ZeroClaw (BB)\n\nGood for: One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.\n\nAhead on:\n- Schema \u0026 documentation, 82 against 62\n- Agent ergonomics, 72 against 54\n- Security \u0026 auth, 76 against 44\n- Transparency \u0026 trust, 64 against 40\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No key needed to call it\n\nWatch for: The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable\n\n\n## Score by category\n\n| Category | Weight | AstrBot | ZeroClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 81 | 74 | AstrBot +7 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 62 | 82 | ZeroClaw +20 |\n| Agent ergonomics | 13% (16.2 this run) | 54 | 72 | ZeroClaw +18 |\n| Security \u0026 auth | 14% (17.5 this run) | 44 | 76 | ZeroClaw +32 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 81 | 80 | AstrBot +1 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 40 | 64 | ZeroClaw +24 |\n| Negative events | ≤15 | -2 | -3 | |\n| **Total** | | **58.8 · C** | **70.2 · BB** | |\n\n## Facts side by side\n\n| Fact | AstrBot | ZeroClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | AstrBotDevs | ZeroClaw Labs |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | AGPL-3.0-or-later | MIT OR Apache-2.0 |\n| Read-only variant documented | no | yes |\n| llms.txt | no | yes |\n| Last release | 2026-09-27 | 2026-09-05 |\n| Terms last updated | 2026-01-12 | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | not found in the text | |\n| Popularity | 42k stars | 33k stars |\n\n## Verdicts\n\n**AstrBot.** Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.\n\n**ZeroClaw.** Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms.\n\n## Before you call either\n\n### AstrBot\n\n1. Set `ASTRBOT_DISABLE_METRICS=1` before the first start. Statistics, including the hostname, are sent to tickstats.soulter.top by default\n2. Set `dashboard.host` to 127.0.0.1 in `data/cmd_config.json`, or the `DASHBOARD_HOST` variable, unless remote access is intended. The default is 0.0.0.0\n3. Create an `abk_` key in Settings, OpenAPI with only the scopes needed, and send it as `Authorization: Bearer` or `X-API-Key`\n4. Include `username` in every `POST /api/v1/chat` body. Without the `chat:admin` scope an administrator ID is rejected\n5. Check Extensions, Future Tasks after asking for a schedule. One-off tasks are deleted after their run even when the run fails\n\n### ZeroClaw\n\n1. Keep `[risk_profiles.\u003calias\u003e] level = \"supervised\"`. `full` runs every tool not listed in `always_ask`, and the YOLO preset removes the sandbox and path rules too\n2. Add sending and account tools such as `send_via`, `google_workspace` and `http_request` to `always_ask` so a session-level Always grant cannot skip the prompt\n3. List senders in `[peer_groups.\u003cname\u003e] external_peers`. `[\"*\"]` accepts anyone on that channel\n4. Set `[web_fetch].allowed_domains` and `[http_request].allowed_domains`. Fetches run unprompted and the OS sandbox does not block egress\n5. Run one-shot tasks with `zeroclaw agent -a \u003calias\u003e -m \"\u003ctask\u003e\"`. A cron or webhook turn has no prompt, so shell calls fall to the command policy\n\n## Questions\n\n### Which is better for AI agents, AstrBot or ZeroClaw?\n\nZeroClaw scores 70.2 (BB) on agent readiness against AstrBot's 58.8 (C), and leads in 4 of 7 scored categories. AstrBot leads on reliability.\n\n### Are AstrBot and ZeroClaw open source?\n\nYes. AstrBot is open source (AGPL-3.0-or-later). ZeroClaw is open source (MIT OR Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"astrbot\", \"b\": \"zeroclaw\"}`. From a terminal: `anchor compare astrbot zeroclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/astrbot.json and https://www.anchorterminal.com/api/v1/tools/zeroclaw.json\n\n## Other comparisons with AstrBot or ZeroClaw\n\n- [AstrBot vs CowAgent](https://www.anchorterminal.com/compare/astrbot-vs-cowagent.md)\n- [AstrBot vs GAIA](https://www.anchorterminal.com/compare/astrbot-vs-gaia.md)\n- [AstrBot vs Gemini Spark](https://www.anchorterminal.com/compare/astrbot-vs-gemini-spark.md)\n- [AstrBot vs Grok Bot](https://www.anchorterminal.com/compare/astrbot-vs-grok-bot.md)\n- [AstrBot vs Haven](https://www.anchorterminal.com/compare/astrbot-vs-haven.md)\n- [AstrBot vs Hermes Agent](https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.md)\n- [AstrBot vs Instinct](https://www.anchorterminal.com/compare/astrbot-vs-instinct.md)\n- [AstrBot vs IronClaw](https://www.anchorterminal.com/compare/astrbot-vs-ironclaw.md)\n- [AstrBot vs Leon](https://www.anchorterminal.com/compare/astrbot-vs-leon.md)\n- [AstrBot vs Lindy](https://www.anchorterminal.com/compare/astrbot-vs-lindy.md)\n- [AstrBot vs nanobot](https://www.anchorterminal.com/compare/astrbot-vs-nanobot.md)\n- [AstrBot vs NanoClaw](https://www.anchorterminal.com/compare/astrbot-vs-nanoclaw.md)\n- [AstrBot vs Dots](https://www.anchorterminal.com/compare/astrbot-vs-openai-dots.md)\n- [AstrBot vs OpenClaw](https://www.anchorterminal.com/compare/astrbot-vs-openclaw.md)\n- [AstrBot vs PicoClaw](https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.md)\n- [AstrBot vs Poke](https://www.anchorterminal.com/compare/astrbot-vs-poke.md)\n- [AstrBot vs QwenPaw](https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.md)\n- [AstrBot vs Zo Computer](https://www.anchorterminal.com/compare/astrbot-vs-zo-computer.md)\n- [CowAgent vs ZeroClaw](https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.md)\n- [GAIA vs ZeroClaw](https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.md)\n- [Gemini Spark vs ZeroClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw.md)\n- [Grok Bot vs ZeroClaw](https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw.md)\n- [Haven vs ZeroClaw](https://www.anchorterminal.com/compare/haven-vs-zeroclaw.md)\n- [Hermes Agent vs ZeroClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.md)\n- [Instinct vs ZeroClaw](https://www.anchorterminal.com/compare/instinct-vs-zeroclaw.md)\n- [IronClaw vs ZeroClaw](https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.md)\n- [Leon vs ZeroClaw](https://www.anchorterminal.com/compare/leon-vs-zeroclaw.md)\n- [Lindy vs ZeroClaw](https://www.anchorterminal.com/compare/lindy-vs-zeroclaw.md)\n- [nanobot vs ZeroClaw](https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.md)\n- [NanoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw.md)\n- [Dots vs ZeroClaw](https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw.md)\n- [OpenClaw vs ZeroClaw](https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.md)\n- [PicoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.md)\n- [Poke vs ZeroClaw](https://www.anchorterminal.com/compare/poke-vs-zeroclaw.md)\n- [QwenPaw vs ZeroClaw](https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.md)\n- [ZeroClaw vs Zo Computer](https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "AstrBot vs ZeroClaw", "url": "" } ], "description": "ZeroClaw scores 70.2 (BB) to AstrBot's 58.8 (C) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "AstrBot C 58.8", "ZeroClaw BB 70.2", "scores" ], "h1": "AstrBot vs ZeroClaw", "image": "https://www.anchorterminal.com/assets/og/compare-astrbot-vs-zeroclaw.png", "path": "/compare/astrbot-vs-zeroclaw", "published": "2026-10-01", "section": "tools", "title": "AstrBot vs ZeroClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw" }, "tokens": { "markdown": 2600, "slim": 630 }, "version": 1 }