Boba vs nanobot

Boba

Boba is a free texting assistant for one-to-one and group chats over iMessage, RCS and SMS, started by sending one message with no card or app. No outside agent can call it, its privacy notice uses inputs and outputs to train its models with no opt-out found, and no status page or security contact was found.

nanobot

nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.

Boba

1. Don't plan to call Boba from another agent. It answers only text messages in the Messages app.
2. Tell people in a group chat that messages sent to Boba may be used to train its models.

nanobot

1. Set tools.restrictToWorkspace to true and tools.exec.sandbox to bwrap or seatbelt before giving it real accounts. Both are off by default
2. Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)
3. Keep allowFrom narrow on every channel and never set ["*"] on Email, which has no pairing
4. Write secrets as ${VAR} references in ~/.nanobot/config.json. Plain values are stored in clear text
5. Use nanobot -m "..." for a one-shot run, and keep nanobot gateway running for channels, schedules and heartbeat