Get an audit

Head to head · Proactive personal assistants · October 2026 research run

Caddy vs OpenClaw

OpenClaw scores 67.1 (B) on agent readiness against Caddy's 16.7 (F), and leads in every scored category. Both do proactive personal assistants.

Best AI personal assistants that act for one person · All 834 assistants comparisons

CaddyCaddy Technologies Inc. · Platform F16.7/100#996 of 1010 OpenClawOpenClaw Foundation · Agent harness B67.1/100#270 of 1010

Which one, for what

Caddy F

Best for People who want a free assistant in iMessage or RCS that watches mail, calendars and work tools and asks before acting.

Also in its favour

  • No incidents deducted, where OpenClaw loses 8 points for them

Watch for

No API, MCP server or A2A endpoint for an outside agent.

OpenClaw B

Best for A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.

Ahead on

  • Reliability, 75 against 10
  • Schema & documentation, 84 against 10
  • Agent ergonomics, 77 against 0
  • Security & auth, 74 against 0
  • Payments & pricing, 60 against 30
  • Maintenance & community, 86 against 55
  • Transparency & trust, 68 against 52

Also in its favour

  • Open source

Watch for

Without configuration the default is full access. Host exec runs with no approval and sandboxing is off

Score by category

CategoryWeight this runCaddyOpenClawEdge
Reliability16%201075OpenClaw +65
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.21084OpenClaw +74
Agent ergonomics13%16.2077OpenClaw +77
Security & auth14%17.5074OpenClaw +74
Payments & pricing10%12.53060OpenClaw +30
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.85586OpenClaw +31
Transparency & trust7%8.85268OpenClaw +16
Negative events≤150-8
TotalF 16.7/100B 67.1/100

Facts side by side

FactCaddyOpenClaw
KindPlatformAgent harness
VendorCaddy Technologies Inc.OpenClaw Foundation
Hosted endpointno (local only)no (local only)
Transports
AuthOAuth or keyOAuth or key
PricingFreeFree
x402nono
LicenceClosed service under Caddy's Terms of Service (Caddy Technologies Inc., last updated 27 April 2026).MIT
Read-only variant documentedyesyes
llms.txtyesyes
Last release2026-10-132026-10-12
Terms last updatedno document linked
Privacy policy last updatedno document linked
Customer content may train models
Terms restrict automated access
Terms restrict benchmarking
Terms or service can change without notice
Arbitration or class-action waiver
Popularitynone392k stars

Verdicts

Caddy

Caddy is a free iMessage and RCS assistant in public beta that watches connected mail, calendars and work apps and asks before sending email or changing data. No outside agent can call it, and no status page, changelog or security contact was found, though its iOS app ships every week or two.

OpenClaw

Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.

Before you call either

Caddy

  1. Don't plan to call Caddy from another agent. It answers the owner's text messages, Siri and group chats it's added to.
  2. Expect Caddy to ask the owner before it sends email or creates an invite.

OpenClaw

  1. Set a session permission mode of guarded or workspace, or tools.exec.mode, before connecting mail. The default runs host commands without approval
  2. Turn on agents.defaults.sandbox for any agent that reads mail, web pages or attachments. Sandboxing is off by default
  3. Set tools.message.crossContext.allowAcrossProviders and allowWithinProvider to false to confine sends to the current conversation
  4. Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny gateway, cron, sessions_spawn and sessions_send for it
  5. Run openclaw security audit after setup, and treat the Gateway token as an owner credential. POST /tools/invoke accepts it with full operator access

Questions

Which is better for AI agents, Caddy or OpenClaw?

OpenClaw scores 67.1 (B) on agent readiness against Caddy's 16.7 (F), and leads in every scored category.

Are Caddy and OpenClaw open source?

No open-source release is listed for Caddy. OpenClaw is open source (MIT).

Other comparisons with Caddy or OpenClaw

Disclosure

Caddy competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report