{
  "data": {
    "a": {
      "slug": "ironclaw",
      "name": "IronClaw",
      "vendor": "NEAR AI",
      "vendorUrl": "https://www.ironclaw.com",
      "kind": "harness",
      "category": "personal-assistants",
      "summary": "IronClaw is an open-source personal AI assistant written in Rust by NEAR AI. The owner runs it as a local service with a web interface, Slack and Telegram channels, Google and GitHub extensions, scheduled automations and persistent memory.",
      "url": "https://www.anchorterminal.com/tools/ironclaw",
      "markdownUrl": "https://www.anchorterminal.com/tools/ironclaw.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/ironclaw.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/ironclaw.json",
      "repo": "https://github.com/nearai/ironclaw",
      "license": "MIT OR Apache-2.0",
      "transports": [
        "http"
      ],
      "packages": [],
      "auth": "mixed",
      "authNotes": "`ironclaw onboard` writes a bearer token to `~/.ironclaw/reborn/webui-token` and prints a login link that carries it as a `token` query parameter. The same token authorises the web interface and the Responses API with operator rights. Multi-user deployments can add Google or GitHub single sign-on and per-user API tokens with owner, admin or member roles. Connected accounts use OAuth (Google, Slack), a Telegram pairing code, or keys held in the encrypted secret store. The web interface binds to 127.0.0.1:3000 unless `--host` is changed (https://docs.ironclaw.com/using/webui.md).",
      "pricing": "freemium",
      "pricingNotes": "Free to self-host under MIT or Apache-2.0, with model usage billed by whichever provider the owner selects, or nothing with Ollama. NEAR AI sells hosted instances on ironclaw.com as Starter (shown as $5 beside $0 a month, 1 agent, $5 credits), Basic at $20 a month (2 agents, $20 credits) and Pro+ at $200 a month (5 agents, $200 credits). The page does not say whether a card is needed. NEAR AI Cloud inference is priced per million tokens on near.ai/pricing (checked 2026-10-12).",
      "priceSummary": "$20 / mo",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the docs or the release notes (checked 2026-10-12).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 12648,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-10-12"
      },
      "docsUrl": "https://docs.ironclaw.com",
      "llmsTxt": "https://docs.ironclaw.com/llms.txt",
      "capabilities": [
        "assistant.proactive",
        "assistant.messaging",
        "assistant.accounts",
        "assistant.memory",
        "assistant.self-hosted",
        "agent.mcp-client"
      ],
      "tags": [
        "open-source",
        "self-hosted",
        "rust",
        "wasm",
        "telegram",
        "slack",
        "gmail",
        "mcp",
        "hosted-option",
        "llms-txt"
      ],
      "lastRelease": "2026-09-29",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 66.7,
        "grade": "B",
        "agentReady": false,
        "rank": 288,
        "ranked": true,
        "rankOf": 986,
        "categoryRank": 5,
        "methodology": "0.4",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 69,
          "maintenance": 74,
          "payments": 60,
          "reliability": 67,
          "schema": 74,
          "security": 66,
          "transparency": 75
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-12"
        },
        "negative": -2,
        "negativeNotes": [
          "2026-10-12. The ironclaw.com home page lists Discord and Signal among integrations, while the channel docs for the current release say Discord, Signal, WeChat and WeCom are not part of the 1.0 release, which shipped on 27 July 2026. The docs site also says it documents the latest stable release while its heartbeat, cron, shell and WASM pages name settings absent from the 1.4.1 source. A misleading claim, at the minimum, -2. https://www.ironclaw.com/; https://docs.ironclaw.com/channels/overview.md; https://github.com/nearai/ironclaw/blob/ironclaw-v1.4.1/docs/capabilities/routines/heartbeat.mdx"
        ],
        "verdict": "Credentials stay in an encrypted store and are injected at the host boundary, and extensions declare per-tool permissions, network targets and OAuth scopes. The global auto-approve setting defaults to on in the 1.4.1 source, so tools marked ask, such as `gmail.send_message`, run unprompted until the owner turns it off.",
        "bestFor": "One technical owner who wants a self-hosted assistant over Gmail, Calendar, Slack and Telegram with credentials kept out of the model's reach.",
        "strengths": [
          "Dual MIT or Apache-2.0 licence, with installers for seven targets on GitHub releases and no account needed to run it",
          "Each extension tool declares a default permission, effects, network targets and OAuth scopes in `manifest.toml`. Gmail reads use `gmail.readonly` and sends use `gmail.send`",
          "Secrets are encrypted with AES-256-GCM per the README, with the master key in the OS keychain, and are injected into requests outside the sandbox",
          "No analytics library was found in the 1.4.1 source. Trace Commons is opt-in and has no default endpoint",
          "Six stable releases between 27 July and 29 September 2026, each with dated notes and upgrade steps"
        ],
        "weaknesses": [
          "Global auto-approve defaults to on in the 1.4.1 source, so tools marked ask (send, trash, delete) run without a prompt. Only financial, approval and budget effects always ask",
          "The `main` branch has had no commit since 10 September 2026, and open reports filed since mid-September show no replies. 1,363 issues and 183 pull requests are open",
          "Docs pages for heartbeat, cron, shell and WASM limits name settings such as `HEARTBEAT_ENABLED` and `ALLOW_LOCAL_TOOLS` that do not appear in the 1.4.1 source",
          "No SECURITY.md, security.txt or published GitHub advisory was found",
          "The home page lists Discord and Signal integrations, while the channel docs say both are not part of the 1.0 release"
        ],
        "agentNotes": [
          "Open Settings and turn off global auto-approve, or set send and delete tools to ask each time, before connecting mail or chat accounts",
          "Install with the release installer and run `ironclaw onboard`. 1.x does not migrate 0.29 data, so use a fresh home directory",
          "Call `POST /api/v1/responses` with the bearer token from `~/.ironclaw/reborn/webui-token`. Keep under 30 requests in 60 seconds",
          "Resolve approval and OAuth gates in the web interface. The Responses API fails the turn instead of surfacing them",
          "Connect MCP servers over HTTP only. The stdio transport is rejected"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "B",
            "methodology": "0.4",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 66.7
          }
        ],
        "editorialScores": {
          "ergonomics": 69,
          "maintenance": 74,
          "payments": 60,
          "reliability": 67,
          "schema": 74,
          "security": 66,
          "transparency": 79
        },
        "provenanceScore": 71
      },
      "connect": {
        "install": "IRONCLAW_RELEASE_TAG=ironclaw-v1.4.1\ncurl --proto '=https' --tlsv1.2 -LsSf \"https://github.com/nearai/ironclaw/releases/download/${IRONCLAW_RELEASE_TAG}/ironclaw-installer.sh\" | sh\nironclaw onboard"
      },
      "letme": {
        "capability": "https://letme.dev/assistant.proactive",
        "tool": "https://letme.dev/ironclaw"
      },
      "area": "frameworks",
      "unitPrices": [
        {
          "item": "Hosted Basic plan (2 agents, $20 credits)",
          "unit": "month",
          "usd": 20,
          "note": "NEAR AI Cloud, per ironclaw.com"
        },
        {
          "item": "Hosted Pro+ plan (5 agents, $200 credits)",
          "unit": "month",
          "usd": 200,
          "note": "NEAR AI Cloud, per ironclaw.com"
        }
      ],
      "provenance": {
        "legalEntity": "Jasnah, Inc. d/b/a NEAR AI",
        "domain": "ironclaw.com",
        "domainRegistered": "2018-01-04",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "https://near.ai/privacy-policy",
        "statusPage": "",
        "changelog": "https://github.com/nearai/ironclaw/releases",
        "securityTxt": "none",
        "checked": "2026-10-12",
        "notes": [
          "The NEAR AI terms of service (updated 24 September 2026) name Jasnah, Inc. d/b/a NEAR AI under Delaware law and cover NEAR AI Cloud and its API. They do not mention IronClaw or agent hosting, so no terms link is set and the MIT or Apache-2.0 licence stands in for the self-hosted software.",
          "The privacy policy (updated 4 September 2026) lists ironclaw.com, agent.near.ai, the IronClaw framework and IronHub among what it covers.",
          "The ironclaw.com home page says Built by Near Foundation and its footer says by NEAR AI.",
          "security.txt answered 404 on www.ironclaw.com, docs.ironclaw.com and near.ai.",
          "RDAP for ironclaw.com gives a registration date of 2018-01-04 and Cloudflare, Inc. as registrar, last changed 2026-04-20.",
          "A self-hosted instance answers on its owner's own host. Hosted instances answer at \u003cinstance-id\u003e.agents.near.ai per the quickstart."
        ],
        "score": 71
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/ironclaw.json"
    },
    "answer": "IronClaw scores 66.7 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 5 of 7 scored categories.",
    "b": {
      "slug": "qwenpaw",
      "name": "QwenPaw",
      "vendor": "AgentScope",
      "vendorUrl": "https://qwenpaw.agentscope.io",
      "kind": "harness",
      "category": "personal-assistants",
      "summary": "Open-source personal assistant from the AgentScope team that the owner runs on their own machine or server. It answers on chat apps, runs scheduled and proactive tasks, manages a mailbox over IMAP and SMTP, and keeps memory as Markdown files.",
      "url": "https://www.anchorterminal.com/tools/qwenpaw",
      "markdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/qwenpaw.json",
      "repo": "https://github.com/agentscope-ai/QwenPaw",
      "license": "Apache-2.0",
      "transports": [
        "http",
        "stdio"
      ],
      "packages": [
        {
          "registry": "pypi",
          "name": "qwenpaw"
        },
        {
          "registry": "oci",
          "name": "agentscope/qwenpaw"
        }
      ],
      "auth": "none",
      "authNotes": "No account. The Console and API bind to 127.0.0.1:8088 with login off by default. `QWENPAW_AUTH_ENABLED=true` adds one admin account with a salted SHA-256 password hash and a signed token valid for seven days, and requests from localhost skip it. Each channel takes its own bot credentials, and the mailbox takes an IMAP and SMTP authorisation code or app password.",
      "pricing": "free",
      "pricingNotes": "Free under Apache-2.0 with nothing to buy. Model usage is billed by whichever provider the owner configures, and local models through llama.cpp, Ollama or LM Studio need no key. The README describes a hosted deployment on AgentScope Platform as free. That platform's pages are script-drawn and its terms and limits were not read (checked 2026-10-12).",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the README, the docs source or the dependency list (checked 2026-10-12).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 35621,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-10-12"
      },
      "docsUrl": "https://qwenpaw.agentscope.io/docs",
      "capabilities": [
        "assistant.proactive",
        "assistant.messaging",
        "assistant.accounts",
        "assistant.memory",
        "assistant.self-hosted",
        "agent.mcp-client"
      ],
      "tags": [
        "open-source",
        "self-hosted",
        "local",
        "free",
        "python",
        "docker",
        "desktop-app",
        "mcp",
        "telemetry-default-on"
      ],
      "lastRelease": "2026-09-11",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 62.2,
        "grade": "B",
        "agentReady": false,
        "rank": 454,
        "ranked": true,
        "rankOf": 986,
        "categoryRank": 7,
        "methodology": "0.4",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 67,
          "maintenance": 73,
          "payments": 60,
          "reliability": 70,
          "schema": 68,
          "security": 60,
          "transparency": 56
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-12"
        },
        "negative": -3,
        "negativeNotes": [
          "2026-09-11. Version 2.2.1 began enforcing each MCP server's tool allowlist on the agent runtime path (commit f2a292d of 4 September, #7504). Before it, a tool the owner had disabled on an MCP client could still be invoked by the agent. Fixed and listed in the release notes, with no security advisory, -2. https://github.com/agentscope-ai/QwenPaw/pull/7504",
          "2026-09-03. Version 2.2.0 blocked shell line-continuation variants that bypassed sensitive-path protections (#7472). Fixed and listed in the release notes, with no security advisory, -1. https://github.com/agentscope-ai/QwenPaw/blob/main/website/public/release-notes/v2.2.0.md"
        ],
        "verdict": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.",
        "bestFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.",
        "strengths": [
          "New mail driver cards default to the `ask` policy, and automatic mail handling may not call `delete_message` or write to unknown recipients",
          "Kernel sandbox on macOS, Linux and Windows, with a documented list of constraints each backend does not enforce",
          "Model keys, mail credentials and environment secrets are encrypted with a master key held in the OS keychain or a 0600 file",
          "Memory is plain Markdown in the agent workspace that the owner can read, edit and remove",
          "Four stable releases in the 90 days to 12 October 2026, each with dated release notes"
        ],
        "weaknesses": [
          "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs",
          "The default approval level AUTO asks only for tool calls a guard rule flags, and `/proactive` skips approval prompts entirely",
          "Channel direct-message and group policies default to `open`, and Console login is off by default",
          "No privacy policy, terms of service or security.txt on qwenpaw.agentscope.io, and no published GitHub security advisory",
          "Inside containers the sandbox falls back to `mode=none`, which the docs say enforces no isolation",
          "671 open issues and 381 open pull requests on 12 October 2026, and the Tests workflow on main had not completed a run since 30 September"
        ],
        "agentNotes": [
          "Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking",
          "Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags",
          "Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`",
          "Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then",
          "Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "B",
            "methodology": "0.4",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 62.2
          }
        ],
        "editorialScores": {
          "ergonomics": 67,
          "maintenance": 73,
          "payments": 60,
          "reliability": 70,
          "schema": 68,
          "security": 60,
          "transparency": 58
        },
        "provenanceScore": 53
      },
      "connect": {
        "install": "pip install qwenpaw \u0026\u0026 qwenpaw init --defaults \u0026\u0026 qwenpaw app   # Python 3.11 to 3.13; or: docker pull agentscope/qwenpaw:latest",
        "http": "curl -X POST http://localhost:8088/api/console/chat -H \"Content-Type: application/json\" -H \"X-Agent-Id: default\" -d '{\"input\": [...]}'"
      },
      "letme": {
        "capability": "https://letme.dev/assistant.proactive",
        "tool": "https://letme.dev/qwenpaw"
      },
      "area": "frameworks",
      "provenance": {
        "legalEntity": "Qwenpaw PRIVATE LIMITED",
        "domain": "agentscope.io",
        "domainRegistered": "",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "",
        "statusPage": "",
        "changelog": "https://qwenpaw.agentscope.io/release-notes",
        "securityTxt": "none",
        "checked": "2026-10-12",
        "notes": [
          "The site footer in the repository's website source reads © 2026 Qwenpaw PRIVATE LIMITED. The LICENSE file names The QwenPaw Authors, and the README credits the AgentScope team.",
          "SECURITY.md sends vulnerability reports to the Alibaba Security Response Centre. We found no other first-hand statement of ownership by Alibaba.",
          "The site links a Usage Policy dated 26 August 2026 and no terms of service or privacy policy, so both links are left out and the Apache-2.0 licence stands in.",
          "qwenpaw.agentscope.io answered 404 for robots.txt, llms.txt and /.well-known/security.txt on 12 October 2026.",
          "No hosted endpoint is graded. A self-hosted instance answers on its owner's own host. We did not look up the domain's registration date."
        ],
        "score": 53
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/qwenpaw.json"
    },
    "facts": [
      {
        "a": "Agent harness",
        "b": "Agent harness",
        "name": "Kind"
      },
      {
        "a": "NEAR AI",
        "b": "AgentScope",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "no (local only)",
        "name": "Hosted endpoint"
      },
      {
        "a": "HTTP",
        "b": "HTTP, stdio",
        "name": "Transports"
      },
      {
        "a": "OAuth or key",
        "b": "None",
        "name": "Auth"
      },
      {
        "a": "Freemium",
        "b": "Free",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "MIT OR Apache-2.0",
        "b": "Apache-2.0",
        "name": "Licence"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "yes",
        "b": "no",
        "name": "llms.txt"
      },
      {
        "a": "2026-09-29",
        "b": "2026-09-11",
        "name": "Last release"
      },
      {
        "a": "no document linked",
        "b": "no document linked",
        "name": "Terms last updated"
      },
      {
        "a": "no date given",
        "b": "no document linked",
        "name": "Privacy policy last updated"
      },
      {
        "a": "",
        "b": "",
        "name": "Customer content may train models"
      },
      {
        "a": "",
        "b": "",
        "name": "Terms restrict automated access"
      },
      {
        "a": "",
        "b": "",
        "name": "Terms restrict benchmarking"
      },
      {
        "a": "",
        "b": "",
        "name": "Terms or service can change without notice"
      },
      {
        "a": "",
        "b": "",
        "name": "Arbitration or class-action waiver"
      },
      {
        "a": "13k stars",
        "b": "36k stars",
        "name": "Popularity"
      }
    ],
    "faq": [
      {
        "answer": "IronClaw scores 66.7 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 5 of 7 scored categories.",
        "question": "Which is better for AI agents, IronClaw or QwenPaw?"
      },
      {
        "answer": "Yes. IronClaw is open source (MIT OR Apache-2.0). QwenPaw is open source (Apache-2.0).",
        "question": "Are IronClaw and QwenPaw open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": [
          "Schema \u0026 documentation, 74 against 68",
          "Security \u0026 auth, 66 against 60",
          "Transparency \u0026 trust, 75 against 56"
        ],
        "also": null,
        "goodFor": "One technical owner who wants a self-hosted assistant over Gmail, Calendar, Slack and Telegram with credentials kept out of the model's reach.",
        "slug": "ironclaw",
        "watchFor": "Global auto-approve defaults to on in the 1.4.1 source, so tools marked ask (send, trash, delete) run without a prompt. Only financial, approval and budget effects always ask"
      },
      {
        "aheadOn": null,
        "also": [
          "No key needed to call it",
          "Runs on your own machine"
        ],
        "goodFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.",
        "slug": "qwenpaw",
        "watchFor": "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs"
      }
    ],
    "job": {
      "capability": "assistant.proactive",
      "name": "Assistant proactive"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/astrbot-vs-ironclaw.json",
        "title": "AstrBot vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/astrbot-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.json",
        "title": "AstrBot vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cowagent-vs-ironclaw.json",
        "title": "CowAgent vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/cowagent-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.json",
        "title": "CowAgent vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gaia-vs-ironclaw.json",
        "title": "GAIA vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/gaia-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.json",
        "title": "GAIA vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-ironclaw.json",
        "title": "Gemini Spark vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.json",
        "title": "Gemini Spark vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/grok-bot-vs-ironclaw.json",
        "title": "Grok Bot vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/grok-bot-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.json",
        "title": "Grok Bot vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/haven-vs-ironclaw.json",
        "title": "Haven vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/haven-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw.json",
        "title": "Haven vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.json",
        "title": "Hermes Agent vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.json",
        "title": "Hermes Agent vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/instinct-vs-ironclaw.json",
        "title": "Instinct vs IronClaw",
        "url": "https://www.anchorterminal.com/compare/instinct-vs-ironclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.json",
        "title": "Instinct vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-leon.json",
        "title": "IronClaw vs Leon",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-leon"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-lindy.json",
        "title": "IronClaw vs Lindy",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-lindy"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.json",
        "title": "IronClaw vs nanobot",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-nanoclaw.json",
        "title": "IronClaw vs NanoClaw",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-nanoclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-openai-dots.json",
        "title": "IronClaw vs Dots",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-openai-dots"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.json",
        "title": "IronClaw vs OpenClaw",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.json",
        "title": "IronClaw vs PicoClaw",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-poke.json",
        "title": "IronClaw vs Poke",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-poke"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.json",
        "title": "IronClaw vs ZeroClaw",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/ironclaw-vs-zo-computer.json",
        "title": "IronClaw vs Zo Computer",
        "url": "https://www.anchorterminal.com/compare/ironclaw-vs-zo-computer"
      },
      {
        "json": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw.json",
        "title": "Leon vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.json",
        "title": "Lindy vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json",
        "title": "nanobot vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.json",
        "title": "NanoClaw vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.json",
        "title": "Dots vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json",
        "title": "OpenClaw vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json",
        "title": "PicoClaw vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw.json",
        "title": "Poke vs QwenPaw",
        "url": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.json",
        "title": "QwenPaw vs ZeroClaw",
        "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw"
      },
      {
        "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.json",
        "title": "QwenPaw vs Zo Computer",
        "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer"
      }
    ],
    "scores": [
      {
        "by": 3,
        "edge": "qwenpaw",
        "ironclaw": 67,
        "key": "reliability",
        "name": "Reliability",
        "qwenpaw": 70,
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "by": 6,
        "edge": "ironclaw",
        "ironclaw": 74,
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "qwenpaw": 68,
        "weight": 13
      },
      {
        "by": 2,
        "edge": "ironclaw",
        "ironclaw": 69,
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "qwenpaw": 67,
        "weight": 13
      },
      {
        "by": 6,
        "edge": "ironclaw",
        "ironclaw": 66,
        "key": "security",
        "name": "Security \u0026 auth",
        "qwenpaw": 60,
        "weight": 14
      },
      {
        "by": 0,
        "edge": "",
        "ironclaw": 60,
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "qwenpaw": 60,
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "by": 1,
        "edge": "ironclaw",
        "ironclaw": 74,
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "qwenpaw": 73,
        "weight": 7
      },
      {
        "by": 19,
        "edge": "ironclaw",
        "ironclaw": 75,
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "qwenpaw": 56,
        "weight": 7
      }
    ],
    "summary": "IronClaw scores 66.7 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 5 of 7 scored categories. Both do assistant proactive.",
    "verdicts": {
      "ironclaw": "Credentials stay in an encrypted store and are injected at the host boundary, and extensions declare per-tool permissions, network targets and OAuth scopes. The global auto-approve setting defaults to on in the 1.4.1 source, so tools marked ask, such as `gmail.send_message`, run unprompted until the owner turns it off.",
      "qwenpaw": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw",
    "json": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.md",
    "slim": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.min.md"
  },
  "markdown": "IronClaw scores 66.7 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 5 of 7 scored categories. Both do assistant proactive.\n\n- IronClaw: grade B, 66.7/100, rank #288 of 986. Markdown https://www.anchorterminal.com/tools/ironclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/ironclaw.json\n- QwenPaw: grade B, 62.2/100, rank #454 of 986. Markdown https://www.anchorterminal.com/tools/qwenpaw.md · JSON https://www.anchorterminal.com/api/v1/tools/qwenpaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### IronClaw (B)\n\nGood for: One technical owner who wants a self-hosted assistant over Gmail, Calendar, Slack and Telegram with credentials kept out of the model's reach.\n\nAhead on:\n- Schema \u0026 documentation, 74 against 68\n- Security \u0026 auth, 66 against 60\n- Transparency \u0026 trust, 75 against 56\n\nWatch for: Global auto-approve defaults to on in the 1.4.1 source, so tools marked ask (send, trash, delete) run without a prompt. Only financial, approval and budget effects always ask\n\n### QwenPaw (B)\n\nGood for: One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n\nWatch for: Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs\n\n\n## Score by category\n\n| Category | Weight | IronClaw | QwenPaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 67 | 70 | QwenPaw +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 74 | 68 | IronClaw +6 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 67 | IronClaw +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 66 | 60 | IronClaw +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 74 | 73 | IronClaw +1 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 75 | 56 | IronClaw +19 |\n| Negative events | ≤15 | -2 | -3 | |\n| **Total** | | **66.7 · B** | **62.2 · B** | |\n\n## Facts side by side\n\n| Fact | IronClaw | QwenPaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | NEAR AI | AgentScope |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP, stdio |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | MIT OR Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-09-29 | 2026-09-11 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models |  |  |\n| Terms restrict automated access |  |  |\n| Terms restrict benchmarking |  |  |\n| Terms or service can change without notice |  |  |\n| Arbitration or class-action waiver |  |  |\n| Popularity | 13k stars | 36k stars |\n\n## Verdicts\n\n**IronClaw.** Credentials stay in an encrypted store and are injected at the host boundary, and extensions declare per-tool permissions, network targets and OAuth scopes. The global auto-approve setting defaults to on in the 1.4.1 source, so tools marked ask, such as `gmail.send_message`, run unprompted until the owner turns it off.\n\n**QwenPaw.** Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.\n\n## Before you call either\n\n### IronClaw\n\n1. Open Settings and turn off global auto-approve, or set send and delete tools to ask each time, before connecting mail or chat accounts\n2. Install with the release installer and run `ironclaw onboard`. 1.x does not migrate 0.29 data, so use a fresh home directory\n3. Call `POST /api/v1/responses` with the bearer token from `~/.ironclaw/reborn/webui-token`. Keep under 30 requests in 60 seconds\n4. Resolve approval and OAuth gates in the web interface. The Responses API fails the turn instead of surfacing them\n5. Connect MCP servers over HTTP only. The stdio transport is rejected\n\n### QwenPaw\n\n1. Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking\n2. Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags\n3. Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`\n4. Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then\n5. Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling\n\n## Questions\n\n### Which is better for AI agents, IronClaw or QwenPaw?\n\nIronClaw scores 66.7 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 5 of 7 scored categories.\n\n### Are IronClaw and QwenPaw open source?\n\nYes. IronClaw is open source (MIT OR Apache-2.0). QwenPaw is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"ironclaw\", \"b\": \"qwenpaw\"}`. From a terminal: `anchor compare ironclaw qwenpaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/ironclaw.json and https://www.anchorterminal.com/api/v1/tools/qwenpaw.json\n\n## Other comparisons with IronClaw or QwenPaw\n\n- [AstrBot vs IronClaw](https://www.anchorterminal.com/compare/astrbot-vs-ironclaw.md)\n- [AstrBot vs QwenPaw](https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.md)\n- [CowAgent vs IronClaw](https://www.anchorterminal.com/compare/cowagent-vs-ironclaw.md)\n- [CowAgent vs QwenPaw](https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.md)\n- [GAIA vs IronClaw](https://www.anchorterminal.com/compare/gaia-vs-ironclaw.md)\n- [GAIA vs QwenPaw](https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.md)\n- [Gemini Spark vs IronClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-ironclaw.md)\n- [Gemini Spark vs QwenPaw](https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.md)\n- [Grok Bot vs IronClaw](https://www.anchorterminal.com/compare/grok-bot-vs-ironclaw.md)\n- [Grok Bot vs QwenPaw](https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.md)\n- [Haven vs IronClaw](https://www.anchorterminal.com/compare/haven-vs-ironclaw.md)\n- [Haven vs QwenPaw](https://www.anchorterminal.com/compare/haven-vs-qwenpaw.md)\n- [Hermes Agent vs IronClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.md)\n- [Hermes Agent vs QwenPaw](https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.md)\n- [Instinct vs IronClaw](https://www.anchorterminal.com/compare/instinct-vs-ironclaw.md)\n- [Instinct vs QwenPaw](https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.md)\n- [IronClaw vs Leon](https://www.anchorterminal.com/compare/ironclaw-vs-leon.md)\n- [IronClaw vs Lindy](https://www.anchorterminal.com/compare/ironclaw-vs-lindy.md)\n- [IronClaw vs nanobot](https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.md)\n- [IronClaw vs NanoClaw](https://www.anchorterminal.com/compare/ironclaw-vs-nanoclaw.md)\n- [IronClaw vs Dots](https://www.anchorterminal.com/compare/ironclaw-vs-openai-dots.md)\n- [IronClaw vs OpenClaw](https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.md)\n- [IronClaw vs PicoClaw](https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.md)\n- [IronClaw vs Poke](https://www.anchorterminal.com/compare/ironclaw-vs-poke.md)\n- [IronClaw vs ZeroClaw](https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.md)\n- [IronClaw vs Zo Computer](https://www.anchorterminal.com/compare/ironclaw-vs-zo-computer.md)\n- [Leon vs QwenPaw](https://www.anchorterminal.com/compare/leon-vs-qwenpaw.md)\n- [Lindy vs QwenPaw](https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [NanoClaw vs QwenPaw](https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.md)\n- [Dots vs QwenPaw](https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.md)\n- [OpenClaw vs QwenPaw](https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [Poke vs QwenPaw](https://www.anchorterminal.com/compare/poke-vs-qwenpaw.md)\n- [QwenPaw vs ZeroClaw](https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.md)\n- [QwenPaw vs Zo Computer](https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-12",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.4",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "IronClaw vs QwenPaw",
        "url": ""
      }
    ],
    "description": "IronClaw scores 66.7 (B) to QwenPaw's 62.2 (B) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "IronClaw B 66.7",
      "QwenPaw B 62.2",
      "scores"
    ],
    "h1": "IronClaw vs QwenPaw",
    "image": "https://www.anchorterminal.com/assets/og/compare-ironclaw-vs-qwenpaw.png",
    "path": "/compare/ironclaw-vs-qwenpaw",
    "published": "2026-10-01",
    "section": "tools",
    "title": "IronClaw vs QwenPaw for AI agents in 2026: scores and prices",
    "toc": null,
    "updated": "2026-10-12",
    "url": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw"
  },
  "tokens": {
    "markdown": 2500,
    "slim": 530
  },
  "version": 1
}