{ "data": { "a": { "slug": "gaia", "name": "GAIA", "vendor": "The Experience Company", "vendorUrl": "https://heygaia.io", "kind": "platform", "category": "personal-assistants", "summary": "GAIA is a personal AI assistant from The Experience Company for email, calendar, todos and scheduled workflows. It runs as a hosted service at heygaia.io with messaging bots, and its source is published for noncommercial self-hosting.", "url": "https://www.anchorterminal.com/tools/gaia", "markdownUrl": "https://www.anchorterminal.com/tools/gaia.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/gaia.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/gaia.json", "repo": "https://github.com/theexperiencecompany/gaia", "license": "PolyForm-Noncommercial-1.0.0", "transports": [], "packages": [ { "registry": "npm", "name": "@heygaia/cli" } ], "auth": "oauth", "authNotes": "People sign in to the hosted app in a browser, and the backend uses WorkOS for sign-in. Integrations connect by OAuth on the provider's consent screen, through Composio for built-in ones, and Gmail asks for the `gmail.modify` scope. Custom MCP servers take no auth, a bearer token or OAuth 2.1 with PKCE and dynamic client registration, with tokens Fernet-encrypted in PostgreSQL. Bot users link a chat identity with `/auth`. No API key for outside callers was found (https://github.com/theexperiencecompany/gaia/blob/master/apps/api/app/config/oauth_config.py; https://docs.heygaia.io/guides/adding-mcp-integrations).", "pricing": "paid", "pricingNotes": "Pro is $30 a month on the pricing page, the only plan shown there, and its FAQ says GAIA is a paid product. The README and docs also describe a Free plan with daily caps and an Enterprise plan by contact, so whether a new account can use the hosted service without paying was not established. Payments run through Dodo Payments. Self-hosting is free for noncommercial use, plus model usage and a WorkOS account (https://heygaia.io/pricing; https://docs.heygaia.io/guides/usage-subscription; checked 2026-10-12).", "priceSummary": "$30 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the backend source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 308, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.heygaia.io", "llmsTxt": "https://docs.heygaia.io/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "hosted", "source-available", "noncommercial-licence", "self-hosted", "messaging", "imessage", "whatsapp", "telegram", "slack", "discord", "gmail", "mcp-client", "status-page", "llms-txt", "approval-off-by-default" ], "lastRelease": "2026-09-14", "graded": true, "anchor": { "graded": true, "score": 49.5, "grade": "D", "agentReady": false, "rank": 813, "ranked": true, "rankOf": 986, "categoryRank": 10, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 54, "maintenance": 78, "payments": 20, "reliability": 67, "schema": 51, "security": 54, "transparency": 60 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -5, "negativeNotes": [ "-3. The release notes of 26 August 2026 say GAIA pauses and asks before a tool that deletes, sends or overwrites, the privacy policy (7 August 2026) says destructive actions require explicit approval, and the pricing page says anything outward-facing waits for the owner's OK. The source at `api-v0.24.0` (14 September 2026) and on master sets the default mode to `always_allow`, commented as nothing gated until flipped after launch. Read from source, not from a live account. https://github.com/theexperiencecompany/gaia/blob/master/apps/api/app/models/hil_models.py", "-2. The pricing page FAQ, read on 12 October 2026, says GAIA never shares data with model providers. Section 3.1 of the privacy policy says content, files and data from connected accounts are shared with third-party AI model providers. https://heygaia.io/pricing and https://heygaia.io/privacy" ], "verdict": "GAIA's source is public, so its approval gate, memory store and token handling can be read. Three approval modes and per-tool overrides exist, but the default mode in the source runs every action unasked, which the privacy policy and release notes do not say. Pro costs $30 a month and self-hosting is limited to noncommercial use.", "bestFor": "It suits one person who wants mail triage, meeting briefs, todos and scheduled workflows from one assistant reachable on WhatsApp, Telegram, Slack, Discord or iMessage, and who wants to read the source.", "strengths": [ "The whole product is in a public repository under PolyForm Noncommercial 1.0.0, including the approval gate, memory engine and five messaging bots.", "Approval settings have three modes and per-tool overrides, and adding an MCP server, pairing a device or disconnecting an account asks in every mode.", "Memory is visible in Settings as facts, a journal, four documents and a graph, and each item can be edited or deleted, with a clear-all control.", "A BetterStack status page covers the API, web app and four bots, and lists no incident in the 90 days to 12 October 2026.", "Three sets of tagged releases in the 90 days to 12 October 2026, the latest on 14 September, with 91 commits on master in the last 30 days." ], "weaknesses": [ "The default approval mode in the source is `always_allow`, commented as nothing gated, while the privacy policy and the 26 August release notes say destructive actions wait for approval.", "The pricing page FAQ says data is never shared with model providers. The privacy policy says content, including data from connected accounts, is shared with them.", "The README lists a Free plan at $0 forever, while the pricing page shows only Pro and says GAIA is a paid product.", "Gmail connects with the `gmail.modify` scope, and built-in integrations run through Composio, so a third party holds those OAuth connections.", "No security.txt, bug bounty, certification, subprocessor list or DPA was found, and self-hosting needs a WorkOS account and five data services.", "The Terms of Service forbid automated systems accessing the Service. Recorded as a fact, and it matters before any probe is run." ], "agentNotes": [ "Set Settings \u003e Approvals to Always ask or Auto before connecting mail. The default in the source runs every action, including send and delete, without asking.", "Expect no public API on the hosted service. The backend turns off its OpenAPI document in production, so reach GAIA through its apps, bots or CLI.", "Check the plan before relying on the hosted service. The README and docs describe a Free plan, and the pricing page says GAIA is a paid product.", "For self-hosting, prepare Docker, Node.js 20, a WorkOS account and a model key first, and confirm the use is noncommercial under the licence.", "Add outside tools as MCP servers by URL on the Integrations page. GAIA asks before adding a server in every approval mode." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 49.5 } ], "editorialScores": { "ergonomics": 54, "maintenance": 78, "payments": 20, "reliability": 67, "schema": 51, "security": 54, "transparency": 50 }, "provenanceScore": 70 }, "connect": { "install": "npm install -g @heygaia/cli \u0026\u0026 gaia init # choose Self-Host (Docker), then open http://localhost:3000" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/gaia" }, "area": "frameworks", "unitPrices": [ { "item": "Pro", "unit": "month", "usd": 30, "note": "billed monthly, with usage limits the pricing page does not state" } ], "provenance": { "legalEntity": "The Experience Company, Inc.", "domain": "heygaia.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://heygaia.io/terms", "privacy": "https://heygaia.io/privacy", "statusPage": "https://status.heygaia.io", "changelog": "https://docs.heygaia.io/release-notes", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The Terms of Service (effective 14 August 2026) name The Experience Company, Inc., a Delaware corporation. Neither the terms nor the privacy policy gives a postal address.", "The privacy policy (effective 7 August 2026) gives support@heygaia.so as its contact, a different domain from heygaia.io, where the README's security and contact addresses sit.", "heygaia.io/.well-known/security.txt returned 404 on 12 October 2026. The repository's SECURITY.md gives an email address for reports.", "The status page lists api.heygaia.io as the backend. We sent nothing to that host.", "heygaia.io's robots.txt allows every path and names ClaudeBot, Claude-Web and anthropic-ai with Allow. docs.heygaia.io carries Content-Signal ai-input=yes. status.heygaia.io returned an empty robots.txt.", "The domain's registration date was not looked up." ], "score": 70 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/gaia.json", "live": { "slug": "gaia", "vendorStatus": { "page": "https://status.heygaia.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-12T17:28:08.466725732Z" }, "updatedAt": "2026-10-12T17:28:08.466725732Z" } }, "answer": "nanobot scores 62.4 (B) on agent readiness against GAIA's 49.5 (D), and leads in 6 of 7 scored categories. GAIA leads on transparency \u0026 trust.", "b": { "slug": "nanobot", "name": "nanobot", "vendor": "HKUDS", "vendorUrl": "https://nanobot.wiki", "kind": "harness", "category": "personal-assistants", "summary": "nanobot is an open-source, self-hosted personal AI agent written in Python by HKUDS. It runs as a gateway on the owner's machine and answers in a web UI, a terminal and chat apps, with tools, memory and scheduled automations.", "url": "https://www.anchorterminal.com/tools/nanobot", "markdownUrl": "https://www.anchorterminal.com/tools/nanobot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/nanobot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/nanobot.json", "repo": "https://github.com/HKUDS/nanobot", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "nanobot-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies model provider keys or an OAuth sign-in, and bot tokens or mailbox passwords for each channel, in `~/.nanobot/config.json`. The WebUI on localhost needs no password, and binding to all interfaces requires a token.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model. The optional Render deployment needs a paid Render service.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 49000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://nanobot.wiki/docs/latest/getting-started/nanobot-overview", "llmsTxt": "https://nanobot.wiki/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "assistant.accounts", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker", "alpha" ], "lastRelease": "2026-09-15", "graded": true, "anchor": { "graded": true, "score": 62.4, "grade": "B", "agentReady": false, "rank": 446, "ranked": true, "rankOf": 986, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 48 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-09-02. GHSA-vc5v-6vwm-wf9m (critical, 9.3, no CVE). Web fetch did not block internal addresses, so cloud metadata and internal services could be read without authentication in versions before 0.3.0. Fixed in 0.3.0 of 25 July and published, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-vc5v-6vwm-wf9m", "2026-03-27. GHSA-4gmr-2vc8-7qh3 (CVE-2026-33654, high). A spoofed email could inject instructions through email polling with no user action, up to command execution, in 0.1.4.post5 and earlier. Fixed in 0.1.4.post6 and published, more than six months ago, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-4gmr-2vc8-7qh3", "2026-03-11. GHSA-g6cf-xjwr-pm77 (CVE-2026-31977, critical, 9.0). A sender ID containing `|` passed the `allowFrom` check in versions before 0.1.4.post4. Fixed and published, more than six months ago, -1. https://github.com/HKUDS/nanobot/security/advisories/GHSA-g6cf-xjwr-pm77", "2026-04-14 and 2026-05-24. GHSA-v5j3-4q66-58cf (CVE-2026-35589, high, 8.0), cross-site WebSocket hijacking of the WhatsApp bridge, fixed in 0.1.5, and GHSA-3f63-vcp3-hvqr (CVE-2026-48716, high, 8.7), file write through a WhatsApp document name. Both fixed and published, -1 together. https://github.com/HKUDS/nanobot/security/advisories" ], "verdict": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.3.5", "Long-term memory is plain files (`USER.md`, `SOUL.md`, `memory/MEMORY.md`) versioned with Git, with `/dream-log` and `/dream-restore` to inspect and roll back", "Chat channels deny unknown senders by default since v0.1.4.post4, with pairing codes the owner approves", "Email requires SPF and DKIM results from a named receiving service since v0.3.5, and mailbox access stays off until `consentGranted` is set", "Optional `bwrap` (Linux) and `seatbelt` (macOS) sandboxes for shell commands, and an SSRF guard on web fetches and HTTP MCP connections" ], "weaknesses": [ "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking", "`tools.restrictToWorkspace` defaults to false and `tools.exec.sandbox` to empty. Neither sandbox restricts network access, and Windows has none", "Five advisories published from 11 March to 2 September 2026, two rated critical, among them an allowlist bypass and unauthenticated SSRF in web fetch", "SECURITY.md lists plain-text API keys in `config.json`, no rate limiting and limited security event logging as known limitations", "Version 0.3.5 with an Alpha classifier, 214 open issues and 614 open pull requests on 12 October 2026" ], "agentNotes": [ "Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default", "Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)", "Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing", "Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text", "Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.4 } ], "editorialScores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 69 }, "provenanceScore": 27 }, "connect": { "install": "python -m pip install nanobot-ai # or: uv tool install nanobot-ai # then: nanobot webui", "headless": { "command": "nanobot -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/nanobot" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "nanobot.wiki", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/nanobot/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, which a published advisory title calls the Hong Kong University Data Intelligence Lab. pyproject.toml names Xubin Ren and the nanobot contributors as authors.", "nanobot.wiki has no terms or privacy page linked from its home page or llms.txt, and `/.well-known/security.txt` answered with the site's not-found page on 12 October 2026.", "SECURITY.md in the repository asks for reports through a private GitHub advisory or by email and aims to respond within 48 hours.", "There is no hosted endpoint. A gateway answers on its owner's own host." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/nanobot.json" }, "facts": [ { "a": "Platform", "b": "Agent harness", "name": "Kind" }, { "a": "The Experience Company", "b": "HKUDS", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth", "b": "None", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "PolyForm-Noncommercial-1.0.0", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-14", "b": "2026-09-15", "name": "Last release" }, { "a": "2026-08-14", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-08-07", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "308 stars", "b": "49k stars", "name": "Popularity" } ], "faq": [ { "answer": "nanobot scores 62.4 (B) on agent readiness against GAIA's 49.5 (D), and leads in 6 of 7 scored categories. GAIA leads on transparency \u0026 trust.", "question": "Which is better for AI agents, GAIA or nanobot?" }, { "answer": "No open-source release is listed for GAIA. nanobot is open source (MIT).", "question": "Are GAIA and nanobot open source?" } ], "goodFor": [ { "aheadOn": [ "Transparency \u0026 trust, 60 against 48" ], "also": null, "goodFor": "It suits one person who wants mail triage, meeting briefs, todos and scheduled workflows from one assistant reachable on WhatsApp, Telegram, Slack, Discord or iMessage, and who wants to read the source.", "slug": "gaia", "watchFor": "The default approval mode in the source is `always_allow`, commented as nothing gated, while the privacy policy and the 26 August release notes say destructive actions wait for approval." }, { "aheadOn": [ "Schema \u0026 documentation, 77 against 51", "Agent ergonomics, 74 against 54", "Security \u0026 auth, 63 against 54", "Payments \u0026 pricing, 60 against 20" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "slug": "nanobot", "watchFor": "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-gaia.json", "title": "AstrBot vs GAIA", "url": "https://www.anchorterminal.com/compare/astrbot-vs-gaia" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot.json", "title": "AstrBot vs nanobot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-gaia.json", "title": "CowAgent vs GAIA", "url": "https://www.anchorterminal.com/compare/cowagent-vs-gaia" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot.json", "title": "CowAgent vs nanobot", "url": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-gemini-spark.json", "title": "GAIA vs Gemini Spark", "url": "https://www.anchorterminal.com/compare/gaia-vs-gemini-spark" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-grok-bot.json", "title": "GAIA vs Grok Bot", "url": "https://www.anchorterminal.com/compare/gaia-vs-grok-bot" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-haven.json", "title": "GAIA vs Haven", "url": "https://www.anchorterminal.com/compare/gaia-vs-haven" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.json", "title": "GAIA vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-instinct.json", "title": "GAIA vs Instinct", "url": "https://www.anchorterminal.com/compare/gaia-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-ironclaw.json", "title": "GAIA vs IronClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-leon.json", "title": "GAIA vs Leon", "url": "https://www.anchorterminal.com/compare/gaia-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-lindy.json", "title": "GAIA vs Lindy", "url": "https://www.anchorterminal.com/compare/gaia-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-nanoclaw.json", "title": "GAIA vs NanoClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-openai-dots.json", "title": "GAIA vs Dots", "url": "https://www.anchorterminal.com/compare/gaia-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-openclaw.json", "title": "GAIA vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw.json", "title": "GAIA vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-poke.json", "title": "GAIA vs Poke", "url": "https://www.anchorterminal.com/compare/gaia-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.json", "title": "GAIA vs QwenPaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.json", "title": "GAIA vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-zo-computer.json", "title": "GAIA vs Zo Computer", "url": "https://www.anchorterminal.com/compare/gaia-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.json", "title": "Gemini Spark vs nanobot", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.json", "title": "Grok Bot vs nanobot", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-nanobot.json", "title": "Haven vs nanobot", "url": "https://www.anchorterminal.com/compare/haven-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.json", "title": "Hermes Agent vs nanobot", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-nanobot.json", "title": "Instinct vs nanobot", "url": "https://www.anchorterminal.com/compare/instinct-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.json", "title": "IronClaw vs nanobot", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanobot.json", "title": "Leon vs nanobot", "url": "https://www.anchorterminal.com/compare/leon-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-nanobot.json", "title": "Lindy vs nanobot", "url": "https://www.anchorterminal.com/compare/lindy-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.json", "title": "nanobot vs NanoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.json", "title": "nanobot vs Dots", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-poke.json", "title": "nanobot vs Poke", "url": "https://www.anchorterminal.com/compare/nanobot-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json", "title": "nanobot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.json", "title": "nanobot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.json", "title": "nanobot vs Zo Computer", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer" } ], "scores": [ { "by": 3, "edge": "nanobot", "gaia": 67, "key": "reliability", "name": "Reliability", "nanobot": 70, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 26, "edge": "nanobot", "gaia": 51, "key": "schema", "name": "Schema \u0026 documentation", "nanobot": 77, "weight": 13 }, { "by": 20, "edge": "nanobot", "gaia": 54, "key": "ergonomics", "name": "Agent ergonomics", "nanobot": 74, "weight": 13 }, { "by": 9, "edge": "nanobot", "gaia": 54, "key": "security", "name": "Security \u0026 auth", "nanobot": 63, "weight": 14 }, { "by": 40, "edge": "nanobot", "gaia": 20, "key": "payments", "name": "Payments \u0026 pricing", "nanobot": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 4, "edge": "nanobot", "gaia": 78, "key": "maintenance", "name": "Maintenance \u0026 community", "nanobot": 82, "weight": 7 }, { "by": 12, "edge": "gaia", "gaia": 60, "key": "transparency", "name": "Transparency \u0026 trust", "nanobot": 48, "weight": 7 } ], "summary": "nanobot scores 62.4 (B) on agent readiness against GAIA's 49.5 (D), and leads in 6 of 7 scored categories. GAIA leads on transparency \u0026 trust. Both do assistant proactive.", "verdicts": { "gaia": "GAIA's source is public, so its approval gate, memory store and token handling can be read. Three approval modes and per-tool overrides exist, but the default mode in the source runs every action unasked, which the privacy policy and release notes do not say. Pro costs $30 a month and self-hosting is limited to noncommercial use.", "nanobot": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/gaia-vs-nanobot", "json": "https://www.anchorterminal.com/compare/gaia-vs-nanobot.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/gaia-vs-nanobot.md", "slim": "https://www.anchorterminal.com/compare/gaia-vs-nanobot.min.md" }, "markdown": "nanobot scores 62.4 (B) on agent readiness against GAIA's 49.5 (D), and leads in 6 of 7 scored categories. GAIA leads on transparency \u0026 trust. Both do assistant proactive.\n\n- GAIA: grade D, 49.5/100, rank #813 of 986. Markdown https://www.anchorterminal.com/tools/gaia.md · JSON https://www.anchorterminal.com/api/v1/tools/gaia.json\n- nanobot: grade B, 62.4/100, rank #446 of 986. Markdown https://www.anchorterminal.com/tools/nanobot.md · JSON https://www.anchorterminal.com/api/v1/tools/nanobot.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### GAIA (D)\n\nGood for: It suits one person who wants mail triage, meeting briefs, todos and scheduled workflows from one assistant reachable on WhatsApp, Telegram, Slack, Discord or iMessage, and who wants to read the source.\n\nAhead on:\n- Transparency \u0026 trust, 60 against 48\n\nWatch for: The default approval mode in the source is `always_allow`, commented as nothing gated, while the privacy policy and the 26 August release notes say destructive actions wait for approval.\n\n### nanobot (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.\n\nAhead on:\n- Schema \u0026 documentation, 77 against 51\n- Agent ergonomics, 74 against 54\n- Security \u0026 auth, 63 against 54\n- Payments \u0026 pricing, 60 against 20\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking\n\n\n## Score by category\n\n| Category | Weight | GAIA | nanobot | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 67 | 70 | nanobot +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 51 | 77 | nanobot +26 |\n| Agent ergonomics | 13% (16.2 this run) | 54 | 74 | nanobot +20 |\n| Security \u0026 auth | 14% (17.5 this run) | 54 | 63 | nanobot +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 60 | nanobot +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 82 | nanobot +4 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 60 | 48 | GAIA +12 |\n| Negative events | ≤15 | -5 | -6 | |\n| **Total** | | **49.5 · D** | **62.4 · B** | |\n\n## Facts side by side\n\n| Fact | GAIA | nanobot |\n| --- | --- | --- |\n| Kind | Platform | Agent harness |\n| Vendor | The Experience Company | HKUDS |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth | None |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | PolyForm-Noncommercial-1.0.0 | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-14 | 2026-09-15 |\n| Terms last updated | 2026-08-14 | no document linked |\n| Privacy policy last updated | 2026-08-07 | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 308 stars | 49k stars |\n\n## Verdicts\n\n**GAIA.** GAIA's source is public, so its approval gate, memory store and token handling can be read. Three approval modes and per-tool overrides exist, but the default mode in the source runs every action unasked, which the privacy policy and release notes do not say. Pro costs $30 a month and self-hosting is limited to noncommercial use.\n\n**nanobot.** nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.\n\n## Before you call either\n\n### GAIA\n\n1. Set Settings \u003e Approvals to Always ask or Auto before connecting mail. The default in the source runs every action, including send and delete, without asking.\n2. Expect no public API on the hosted service. The backend turns off its OpenAPI document in production, so reach GAIA through its apps, bots or CLI.\n3. Check the plan before relying on the hosted service. The README and docs describe a Free plan, and the pricing page says GAIA is a paid product.\n4. For self-hosting, prepare Docker, Node.js 20, a WorkOS account and a model key first, and confirm the use is noncommercial under the licence.\n5. Add outside tools as MCP servers by URL on the Integrations page. GAIA asks before adding a server in every approval mode.\n\n### nanobot\n\n1. Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default\n2. Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)\n3. Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing\n4. Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text\n5. Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat\n\n## Questions\n\n### Which is better for AI agents, GAIA or nanobot?\n\nnanobot scores 62.4 (B) on agent readiness against GAIA's 49.5 (D), and leads in 6 of 7 scored categories. GAIA leads on transparency \u0026 trust.\n\n### Are GAIA and nanobot open source?\n\nNo open-source release is listed for GAIA. nanobot is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/gaia-vs-nanobot.json, and with the fewest tokens: https://www.anchorterminal.com/compare/gaia-vs-nanobot.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"gaia\", \"b\": \"nanobot\"}`. From a terminal: `anchor compare gaia nanobot`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/gaia.json and https://www.anchorterminal.com/api/v1/tools/nanobot.json\n\n## Other comparisons with GAIA or nanobot\n\n- [AstrBot vs GAIA](https://www.anchorterminal.com/compare/astrbot-vs-gaia.md)\n- [AstrBot vs nanobot](https://www.anchorterminal.com/compare/astrbot-vs-nanobot.md)\n- [CowAgent vs GAIA](https://www.anchorterminal.com/compare/cowagent-vs-gaia.md)\n- [CowAgent vs nanobot](https://www.anchorterminal.com/compare/cowagent-vs-nanobot.md)\n- [GAIA vs Gemini Spark](https://www.anchorterminal.com/compare/gaia-vs-gemini-spark.md)\n- [GAIA vs Grok Bot](https://www.anchorterminal.com/compare/gaia-vs-grok-bot.md)\n- [GAIA vs Haven](https://www.anchorterminal.com/compare/gaia-vs-haven.md)\n- [GAIA vs Hermes Agent](https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.md)\n- [GAIA vs Instinct](https://www.anchorterminal.com/compare/gaia-vs-instinct.md)\n- [GAIA vs IronClaw](https://www.anchorterminal.com/compare/gaia-vs-ironclaw.md)\n- [GAIA vs Leon](https://www.anchorterminal.com/compare/gaia-vs-leon.md)\n- [GAIA vs Lindy](https://www.anchorterminal.com/compare/gaia-vs-lindy.md)\n- [GAIA vs NanoClaw](https://www.anchorterminal.com/compare/gaia-vs-nanoclaw.md)\n- [GAIA vs Dots](https://www.anchorterminal.com/compare/gaia-vs-openai-dots.md)\n- [GAIA vs OpenClaw](https://www.anchorterminal.com/compare/gaia-vs-openclaw.md)\n- [GAIA vs PicoClaw](https://www.anchorterminal.com/compare/gaia-vs-picoclaw.md)\n- [GAIA vs Poke](https://www.anchorterminal.com/compare/gaia-vs-poke.md)\n- [GAIA vs QwenPaw](https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.md)\n- [GAIA vs ZeroClaw](https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.md)\n- [GAIA vs Zo Computer](https://www.anchorterminal.com/compare/gaia-vs-zo-computer.md)\n- [Gemini Spark vs nanobot](https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.md)\n- [Grok Bot vs nanobot](https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.md)\n- [Haven vs nanobot](https://www.anchorterminal.com/compare/haven-vs-nanobot.md)\n- [Hermes Agent vs nanobot](https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.md)\n- [Instinct vs nanobot](https://www.anchorterminal.com/compare/instinct-vs-nanobot.md)\n- [IronClaw vs nanobot](https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.md)\n- [Leon vs nanobot](https://www.anchorterminal.com/compare/leon-vs-nanobot.md)\n- [Lindy vs nanobot](https://www.anchorterminal.com/compare/lindy-vs-nanobot.md)\n- [nanobot vs NanoClaw](https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.md)\n- [nanobot vs Dots](https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [nanobot vs Poke](https://www.anchorterminal.com/compare/nanobot-vs-poke.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [nanobot vs ZeroClaw](https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.md)\n- [nanobot vs Zo Computer](https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "GAIA vs nanobot", "url": "" } ], "description": "nanobot scores 62.4 (B) to GAIA's 49.5 (D) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "GAIA D 49.5", "nanobot B 62.4", "scores" ], "h1": "GAIA vs nanobot", "image": "https://www.anchorterminal.com/assets/og/compare-gaia-vs-nanobot.png", "path": "/compare/gaia-vs-nanobot", "published": "2026-10-01", "section": "tools", "title": "GAIA vs nanobot for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/gaia-vs-nanobot" }, "tokens": { "markdown": 2500, "slim": 630 }, "version": 1 }