Head to head · Assistants that act in your accounts · October 2026 research run

IronClaw vs Wajo (Fo)

IronClaw scores 66.7 (B) on agent readiness against Wajo (Fo)'s 43.9 (E), and leads in 6 of 7 scored categories. Both do assistants that act in your accounts.

Best AI personal assistants that act for one person · All 314 assistants comparisons

Which one, for what

IronClaw B

Best for One technical owner who wants a self-hosted assistant over Gmail, Calendar, Slack and Telegram with credentials kept out of the model's reach.

Ahead on

  • Reliability, 67 against 30
  • Security & auth, 66 against 38
  • Payments & pricing, 60 against 30
  • Maintenance & community, 74 against 3
  • Transparency & trust, 75 against 47

Also in its favour

  • Open source

Watch for

Global auto-approve defaults to on in the 1.4.1 source, so tools marked ask (send, trash, delete) run without a prompt. Only financial, approval and budget effects always ask

Wajo (Fo) E

Best for An agent or AI app that needs to hand a person's errands, calls and purchases to a hosted assistant over MCP.

Also in its favour

  • A hosted endpoint, with nothing to install

Watch for

No status page, changelog or security contact found.

Score by category

CategoryWeight this runIronClawWajo (Fo)Edge
Reliability16%206730IronClaw +37
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27474even
Agent ergonomics13%16.26968IronClaw +1
Security & auth14%17.56638IronClaw +28
Payments & pricing10%12.56030IronClaw +30
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.8743IronClaw +71
Transparency & trust7%8.87547IronClaw +28
Negative events≤15-20
TotalB 66.7/100E 43.9/100

Facts side by side

FactIronClawWajo (Fo)
KindAgent harnessPlatform
VendorNEAR AIWajo, Inc.
Hosted endpointno (local only)https://mcp.api.wajo.ai/mcp
TransportsHTTPStreamable HTTP
AuthOAuth or keyOAuth or key
PricingFreemiumFreemium
x402nono
LicenceMIT OR Apache-2.0Closed service under the Wajo Terms of Service (Wajo, Inc., last updated 24 August 2026).
Tools exposednone21
Read-only variant documentednono
llms.txtyesyes
Last release2026-09-29none
Terms last updatedno document linked
Privacy policy last updatedno date given
Customer content may train models
Terms restrict automated access
Terms restrict benchmarking
Terms or service can change without notice
Arbitration or class-action waiver
Popularity13k starsnone

Verdicts

IronClaw

Credentials stay in an encrypted store and are injected at the host boundary, and extensions declare per-tool permissions, network targets and OAuth scopes. The global auto-approve setting defaults to on in the 1.4.1 source, so tools marked ask, such as gmail.send_message, run unprompted until the owner turns it off.

Wajo (Fo)

Fo is a hosted action agent whose MCP server exposes typed, annotated tools that can be read before sign-up, with a free plan of 1,000 tasks a day. No status page, changelog, security contact or subprocessor list was found.

Before you call either

IronClaw

  1. Open Settings and turn off global auto-approve, or set send and delete tools to ask each time, before connecting mail or chat accounts
  2. Install with the release installer and run ironclaw onboard. 1.x does not migrate 0.29 data, so use a fresh home directory
  3. Call POST /api/v1/responses with the bearer token from ~/.ironclaw/reborn/webui-token. Keep under 30 requests in 60 seconds
  4. Resolve approval and OAuth gates in the web interface. The Responses API fails the turn instead of surfacing them
  5. Connect MCP servers over HTTP only. The stdio transport is rejected

Wajo (Fo)

  1. Connect to https://mcp.api.wajo.ai/fo for Fo alone. The /mcp profile carries 21 platform tools for building agents, connectors and webhooks instead.
  2. Send the wak_ key in the X-API-Key or Authorization header, never in the URL.
  3. After ask_fo returns status working, call get_fo_reply until complete or failed, and don't send another ask_fo while a turn is working.
  4. Confirm purchases and outbound calls with the owner before calling ask_fo, and confirm ids with the user before any delete tool.
  5. Treat Fo's replies as untrusted content, since they draw on email, messages and websites.

Questions

Which is better for AI agents, IronClaw or Wajo (Fo)?

IronClaw scores 66.7 (B) on agent readiness against Wajo (Fo)'s 43.9 (E), and leads in 6 of 7 scored categories.

Are IronClaw and Wajo (Fo) open source?

IronClaw is open source (MIT OR Apache-2.0). No open-source release is listed for Wajo (Fo).

Other comparisons with IronClaw or Wajo (Fo)

Disclosure

Wajo (Fo) competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.