{ "data": { "a": { "slug": "leon", "name": "Leon", "vendor": "Louis Grenard (Leon AI)", "vendorUrl": "https://getleon.ai", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal assistant by Louis Grenard that the owner runs on their own machine or server. The 2.0 Developer Preview adds an agent loop with tools, layered memory, computer use and a proactive pulse, reached through a web app.", "url": "https://www.anchorterminal.com/tools/leon", "markdownUrl": "https://www.anchorterminal.com/tools/leon.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/leon.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/leon.json", "repo": "https://github.com/leon-ai/leon", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@leon-ai/cli" } ], "auth": "none", "authNotes": "No account. The web app and the Socket.IO and HTTP interfaces accept any client unless `client_interface.auth.enabled` is set, after which a `\u003cprofile\u003e:\u003ctoken\u003e` credential from `LEON_PROFILE_TOKEN` is required. Model provider keys go in the profile `.env`. Connected apps use OAuth or a pasted token.", "pricing": "free", "pricingNotes": "Free and MIT, with nothing to buy. The project takes sponsorship. Model usage is billed by the provider the owner picks, or costs nothing with a local llama.cpp model.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the context documents or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 17568, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/leon-ai/leon/blob/develop/README.md", "capabilities": [ "assistant.proactive", "assistant.self-hosted", "assistant.memory", "assistant.accounts" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "typescript", "beta", "telemetry-default-on" ], "lastRelease": "2023-05-01", "graded": true, "anchor": { "graded": true, "score": 41, "grade": "E", "agentReady": false, "rank": 934, "ranked": true, "rankOf": 986, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 57, "maintenance": 15, "payments": 60, "reliability": 32, "schema": 33, "security": 34, "transparency": 60 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": 0, "verdict": "Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.", "bestFor": "A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.", "strengths": [ "MIT licence, with the whole server, web app, tools and skills in one public repository", "Connected-app credentials are stored per profile with AES-256-GCM, and the Gmail connection asks only for the `gmail.readonly` scope", "Runs with a local llama.cpp model or any of 11 hosted providers, so the owner chooses which company sees the content", "Tool allow and disable lists, a configurable iteration limit (256 by default) and per-profile tool-call logs", "At least 200 commits between 25 September and 12 October 2026, with a fresh-install check passing on develop three times a week" ], "weaknesses": [ "No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch", "No approval step before a tool call. Shell commands pass a blocklist of patterns, and the proactive pulse is on by default and runs one task every 30 minutes", "The server listens on 0.0.0.0 and client authentication is off in the sample config", "Telemetry is on in the sample config and posts an instance ID, versions and hardware details to telemetry.getleon.ai. The README and the docs pages read do not describe it", "No `SECURITY.md`, security.txt, privacy policy or 2.0 documentation, and no messaging-app channel or MCP client on the develop branch" ], "agentNotes": [ "Clone the develop branch for 2.0. `npm install --global @leon-ai/cli` and docs.getleon.ai install and describe the legacy 1.0 betas", "Set `client_interface.auth.enabled: true` and a `LEON_PROFILE_TOKEN` before the machine joins a shared network. The server binds 0.0.0.0", "Set `telemetry_enabled: false` and `runtime.pulse_enabled: false` in the profile `config.yml` for an unattended or private run", "Use `availability.tools.allowed` to limit tools. Shell, file writes, computer use and browser control are otherwise available to the agent with no approval prompt", "Back up `LEON_CONNECTIONS_ENCRYPTION_KEY` from the profile `.env`. Without it the stored connections cannot be read" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41 } ], "editorialScores": { "ergonomics": 57, "maintenance": 15, "payments": 60, "reliability": 32, "schema": 33, "security": 34, "transparency": 52 }, "provenanceScore": 68 }, "connect": { "install": "git clone https://github.com/leon-ai/leon.git \u0026\u0026 cd leon \u0026\u0026 npm install --global pnpm@latest \u0026\u0026 pnpm install \u0026\u0026 pnpm start" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/leon" }, "area": "frameworks", "provenance": { "legalEntity": "No legal entity found. Copyright Louis Grenard", "domain": "getleon.ai", "domainRegistered": "2018-02-16", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/leon-ai/leon/blob/develop/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "`LICENSE.md` and the footer of getleon.ai read Copyright 2019 to present Louis Grenard. No company or foundation is named on the pages read.", "No terms of service or privacy policy was found on getleon.ai, docs.getleon.ai or in the repository, so no link is given and the MIT licence stands in.", "getleon.ai/.well-known/security.txt returns 404, and the repository has no `SECURITY.md`. The GitHub API lists no published security advisory.", "RDAP for getleon.ai gives a registration date of 2018-02-16.", "The assistant answers on the owner's own host. The only vendor endpoint the source names is telemetry.getleon.ai, which receives telemetry.", "`CHANGELOG.md` ends at 1.0.0-beta.8 of 1 May 2023. Changes to the 2.0 Developer Preview are recorded only as commits." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/leon.json" }, "answer": "nanobot scores 62.4 (B) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories. Leon leads on transparency \u0026 trust.", "b": { "slug": "nanobot", "name": "nanobot", "vendor": "HKUDS", "vendorUrl": "https://nanobot.wiki", "kind": "harness", "category": "personal-assistants", "summary": "nanobot is an open-source, self-hosted personal AI agent written in Python by HKUDS. It runs as a gateway on the owner's machine and answers in a web UI, a terminal and chat apps, with tools, memory and scheduled automations.", "url": "https://www.anchorterminal.com/tools/nanobot", "markdownUrl": "https://www.anchorterminal.com/tools/nanobot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/nanobot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/nanobot.json", "repo": "https://github.com/HKUDS/nanobot", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "nanobot-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies model provider keys or an OAuth sign-in, and bot tokens or mailbox passwords for each channel, in `~/.nanobot/config.json`. The WebUI on localhost needs no password, and binding to all interfaces requires a token.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model. The optional Render deployment needs a paid Render service.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 49000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://nanobot.wiki/docs/latest/getting-started/nanobot-overview", "llmsTxt": "https://nanobot.wiki/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "assistant.accounts", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker", "alpha" ], "lastRelease": "2026-09-15", "graded": true, "anchor": { "graded": true, "score": 62.4, "grade": "B", "agentReady": false, "rank": 446, "ranked": true, "rankOf": 986, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 48 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-09-02. GHSA-vc5v-6vwm-wf9m (critical, 9.3, no CVE). Web fetch did not block internal addresses, so cloud metadata and internal services could be read without authentication in versions before 0.3.0. Fixed in 0.3.0 of 25 July and published, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-vc5v-6vwm-wf9m", "2026-03-27. GHSA-4gmr-2vc8-7qh3 (CVE-2026-33654, high). A spoofed email could inject instructions through email polling with no user action, up to command execution, in 0.1.4.post5 and earlier. Fixed in 0.1.4.post6 and published, more than six months ago, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-4gmr-2vc8-7qh3", "2026-03-11. GHSA-g6cf-xjwr-pm77 (CVE-2026-31977, critical, 9.0). A sender ID containing `|` passed the `allowFrom` check in versions before 0.1.4.post4. Fixed and published, more than six months ago, -1. https://github.com/HKUDS/nanobot/security/advisories/GHSA-g6cf-xjwr-pm77", "2026-04-14 and 2026-05-24. GHSA-v5j3-4q66-58cf (CVE-2026-35589, high, 8.0), cross-site WebSocket hijacking of the WhatsApp bridge, fixed in 0.1.5, and GHSA-3f63-vcp3-hvqr (CVE-2026-48716, high, 8.7), file write through a WhatsApp document name. Both fixed and published, -1 together. https://github.com/HKUDS/nanobot/security/advisories" ], "verdict": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.3.5", "Long-term memory is plain files (`USER.md`, `SOUL.md`, `memory/MEMORY.md`) versioned with Git, with `/dream-log` and `/dream-restore` to inspect and roll back", "Chat channels deny unknown senders by default since v0.1.4.post4, with pairing codes the owner approves", "Email requires SPF and DKIM results from a named receiving service since v0.3.5, and mailbox access stays off until `consentGranted` is set", "Optional `bwrap` (Linux) and `seatbelt` (macOS) sandboxes for shell commands, and an SSRF guard on web fetches and HTTP MCP connections" ], "weaknesses": [ "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking", "`tools.restrictToWorkspace` defaults to false and `tools.exec.sandbox` to empty. Neither sandbox restricts network access, and Windows has none", "Five advisories published from 11 March to 2 September 2026, two rated critical, among them an allowlist bypass and unauthenticated SSRF in web fetch", "SECURITY.md lists plain-text API keys in `config.json`, no rate limiting and limited security event logging as known limitations", "Version 0.3.5 with an Alpha classifier, 214 open issues and 614 open pull requests on 12 October 2026" ], "agentNotes": [ "Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default", "Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)", "Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing", "Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text", "Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.4 } ], "editorialScores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 69 }, "provenanceScore": 27 }, "connect": { "install": "python -m pip install nanobot-ai # or: uv tool install nanobot-ai # then: nanobot webui", "headless": { "command": "nanobot -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/nanobot" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "nanobot.wiki", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/nanobot/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, which a published advisory title calls the Hong Kong University Data Intelligence Lab. pyproject.toml names Xubin Ren and the nanobot contributors as authors.", "nanobot.wiki has no terms or privacy page linked from its home page or llms.txt, and `/.well-known/security.txt` answered with the site's not-found page on 12 October 2026.", "SECURITY.md in the repository asks for reports through a private GitHub advisory or by email and aims to respond within 48 hours.", "There is no hosted endpoint. A gateway answers on its owner's own host." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/nanobot.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Louis Grenard (Leon AI)", "b": "HKUDS", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2023-05-01", "b": "2026-09-15", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "18k stars", "b": "49k stars", "name": "Popularity" } ], "faq": [ { "answer": "nanobot scores 62.4 (B) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories. Leon leads on transparency \u0026 trust.", "question": "Which is better for AI agents, Leon or nanobot?" }, { "answer": "Yes. Leon is open source (MIT). nanobot is open source (MIT).", "question": "Are Leon and nanobot open source?" } ], "goodFor": [ { "aheadOn": [ "Transparency \u0026 trust, 60 against 48" ], "also": [ "Free to start without a card", "No incidents deducted, where nanobot loses 6 points for them" ], "goodFor": "A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.", "slug": "leon", "watchFor": "No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch" }, { "aheadOn": [ "Reliability, 70 against 32", "Schema \u0026 documentation, 77 against 33", "Agent ergonomics, 74 against 57", "Security \u0026 auth, 63 against 34", "Maintenance \u0026 community, 82 against 15" ], "also": null, "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "slug": "nanobot", "watchFor": "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-leon.json", "title": "AstrBot vs Leon", "url": "https://www.anchorterminal.com/compare/astrbot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot.json", "title": "AstrBot vs nanobot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-leon.json", "title": "CowAgent vs Leon", "url": "https://www.anchorterminal.com/compare/cowagent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot.json", "title": "CowAgent vs nanobot", "url": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-leon.json", "title": "GAIA vs Leon", "url": "https://www.anchorterminal.com/compare/gaia-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-nanobot.json", "title": "GAIA vs nanobot", "url": "https://www.anchorterminal.com/compare/gaia-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-leon.json", "title": "Gemini Spark vs Leon", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.json", "title": "Gemini Spark vs nanobot", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-leon.json", "title": "Grok Bot vs Leon", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.json", "title": "Grok Bot vs nanobot", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-leon.json", "title": "Haven vs Leon", "url": "https://www.anchorterminal.com/compare/haven-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-nanobot.json", "title": "Haven vs nanobot", "url": "https://www.anchorterminal.com/compare/haven-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon.json", "title": "Hermes Agent vs Leon", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.json", "title": "Hermes Agent vs nanobot", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-leon.json", "title": "Instinct vs Leon", "url": "https://www.anchorterminal.com/compare/instinct-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-nanobot.json", "title": "Instinct vs nanobot", "url": "https://www.anchorterminal.com/compare/instinct-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-leon.json", "title": "IronClaw vs Leon", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.json", "title": "IronClaw vs nanobot", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-lindy.json", "title": "Leon vs Lindy", "url": "https://www.anchorterminal.com/compare/leon-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanoclaw.json", "title": "Leon vs NanoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openai-dots.json", "title": "Leon vs Dots", "url": "https://www.anchorterminal.com/compare/leon-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openclaw.json", "title": "Leon vs OpenClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.json", "title": "Leon vs PicoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-poke.json", "title": "Leon vs Poke", "url": "https://www.anchorterminal.com/compare/leon-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw.json", "title": "Leon vs QwenPaw", "url": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw.json", "title": "Leon vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zo-computer.json", "title": "Leon vs Zo Computer", "url": "https://www.anchorterminal.com/compare/leon-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-nanobot.json", "title": "Lindy vs nanobot", "url": "https://www.anchorterminal.com/compare/lindy-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.json", "title": "nanobot vs NanoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.json", "title": "nanobot vs Dots", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-poke.json", "title": "nanobot vs Poke", "url": "https://www.anchorterminal.com/compare/nanobot-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json", "title": "nanobot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.json", "title": "nanobot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.json", "title": "nanobot vs Zo Computer", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer" } ], "scores": [ { "by": 38, "edge": "nanobot", "key": "reliability", "leon": 32, "name": "Reliability", "nanobot": 70, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 44, "edge": "nanobot", "key": "schema", "leon": 33, "name": "Schema \u0026 documentation", "nanobot": 77, "weight": 13 }, { "by": 17, "edge": "nanobot", "key": "ergonomics", "leon": 57, "name": "Agent ergonomics", "nanobot": 74, "weight": 13 }, { "by": 29, "edge": "nanobot", "key": "security", "leon": 34, "name": "Security \u0026 auth", "nanobot": 63, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "leon": 60, "name": "Payments \u0026 pricing", "nanobot": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 67, "edge": "nanobot", "key": "maintenance", "leon": 15, "name": "Maintenance \u0026 community", "nanobot": 82, "weight": 7 }, { "by": 12, "edge": "leon", "key": "transparency", "leon": 60, "name": "Transparency \u0026 trust", "nanobot": 48, "weight": 7 } ], "summary": "nanobot scores 62.4 (B) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories. Leon leads on transparency \u0026 trust. Both do assistant proactive.", "verdicts": { "leon": "Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.", "nanobot": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/leon-vs-nanobot", "json": "https://www.anchorterminal.com/compare/leon-vs-nanobot.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/leon-vs-nanobot.md", "slim": "https://www.anchorterminal.com/compare/leon-vs-nanobot.min.md" }, "markdown": "nanobot scores 62.4 (B) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories. Leon leads on transparency \u0026 trust. Both do assistant proactive.\n\n- Leon: grade E, 41/100, rank #934 of 986. Markdown https://www.anchorterminal.com/tools/leon.md · JSON https://www.anchorterminal.com/api/v1/tools/leon.json\n- nanobot: grade B, 62.4/100, rank #446 of 986. Markdown https://www.anchorterminal.com/tools/nanobot.md · JSON https://www.anchorterminal.com/api/v1/tools/nanobot.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### Leon (E)\n\nGood for: A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.\n\nAhead on:\n- Transparency \u0026 trust, 60 against 48\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where nanobot loses 6 points for them\n\nWatch for: No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch\n\n### nanobot (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.\n\nAhead on:\n- Reliability, 70 against 32\n- Schema \u0026 documentation, 77 against 33\n- Agent ergonomics, 74 against 57\n- Security \u0026 auth, 63 against 34\n- Maintenance \u0026 community, 82 against 15\n\nWatch for: No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking\n\n\n## Score by category\n\n| Category | Weight | Leon | nanobot | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 32 | 70 | nanobot +38 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 33 | 77 | nanobot +44 |\n| Agent ergonomics | 13% (16.2 this run) | 57 | 74 | nanobot +17 |\n| Security \u0026 auth | 14% (17.5 this run) | 34 | 63 | nanobot +29 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 15 | 82 | nanobot +67 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 60 | 48 | Leon +12 |\n| Negative events | ≤15 | 0 | -6 | |\n| **Total** | | **41 · E** | **62.4 · B** | |\n\n## Facts side by side\n\n| Fact | Leon | nanobot |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Louis Grenard (Leon AI) | HKUDS |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2023-05-01 | 2026-09-15 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 18k stars | 49k stars |\n\n## Verdicts\n\n**Leon.** Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.\n\n**nanobot.** nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.\n\n## Before you call either\n\n### Leon\n\n1. Clone the develop branch for 2.0. `npm install --global @leon-ai/cli` and docs.getleon.ai install and describe the legacy 1.0 betas\n2. Set `client_interface.auth.enabled: true` and a `LEON_PROFILE_TOKEN` before the machine joins a shared network. The server binds 0.0.0.0\n3. Set `telemetry_enabled: false` and `runtime.pulse_enabled: false` in the profile `config.yml` for an unattended or private run\n4. Use `availability.tools.allowed` to limit tools. Shell, file writes, computer use and browser control are otherwise available to the agent with no approval prompt\n5. Back up `LEON_CONNECTIONS_ENCRYPTION_KEY` from the profile `.env`. Without it the stored connections cannot be read\n\n### nanobot\n\n1. Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default\n2. Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)\n3. Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing\n4. Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text\n5. Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat\n\n## Questions\n\n### Which is better for AI agents, Leon or nanobot?\n\nnanobot scores 62.4 (B) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories. Leon leads on transparency \u0026 trust.\n\n### Are Leon and nanobot open source?\n\nYes. Leon is open source (MIT). nanobot is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/leon-vs-nanobot.json, and with the fewest tokens: https://www.anchorterminal.com/compare/leon-vs-nanobot.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"leon\", \"b\": \"nanobot\"}`. From a terminal: `anchor compare leon nanobot`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/leon.json and https://www.anchorterminal.com/api/v1/tools/nanobot.json\n\n## Other comparisons with Leon or nanobot\n\n- [AstrBot vs Leon](https://www.anchorterminal.com/compare/astrbot-vs-leon.md)\n- [AstrBot vs nanobot](https://www.anchorterminal.com/compare/astrbot-vs-nanobot.md)\n- [CowAgent vs Leon](https://www.anchorterminal.com/compare/cowagent-vs-leon.md)\n- [CowAgent vs nanobot](https://www.anchorterminal.com/compare/cowagent-vs-nanobot.md)\n- [GAIA vs Leon](https://www.anchorterminal.com/compare/gaia-vs-leon.md)\n- [GAIA vs nanobot](https://www.anchorterminal.com/compare/gaia-vs-nanobot.md)\n- [Gemini Spark vs Leon](https://www.anchorterminal.com/compare/gemini-spark-vs-leon.md)\n- [Gemini Spark vs nanobot](https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.md)\n- [Grok Bot vs Leon](https://www.anchorterminal.com/compare/grok-bot-vs-leon.md)\n- [Grok Bot vs nanobot](https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.md)\n- [Haven vs Leon](https://www.anchorterminal.com/compare/haven-vs-leon.md)\n- [Haven vs nanobot](https://www.anchorterminal.com/compare/haven-vs-nanobot.md)\n- [Hermes Agent vs Leon](https://www.anchorterminal.com/compare/hermes-agent-vs-leon.md)\n- [Hermes Agent vs nanobot](https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.md)\n- [Instinct vs Leon](https://www.anchorterminal.com/compare/instinct-vs-leon.md)\n- [Instinct vs nanobot](https://www.anchorterminal.com/compare/instinct-vs-nanobot.md)\n- [IronClaw vs Leon](https://www.anchorterminal.com/compare/ironclaw-vs-leon.md)\n- [IronClaw vs nanobot](https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.md)\n- [Leon vs Lindy](https://www.anchorterminal.com/compare/leon-vs-lindy.md)\n- [Leon vs NanoClaw](https://www.anchorterminal.com/compare/leon-vs-nanoclaw.md)\n- [Leon vs Dots](https://www.anchorterminal.com/compare/leon-vs-openai-dots.md)\n- [Leon vs OpenClaw](https://www.anchorterminal.com/compare/leon-vs-openclaw.md)\n- [Leon vs PicoClaw](https://www.anchorterminal.com/compare/leon-vs-picoclaw.md)\n- [Leon vs Poke](https://www.anchorterminal.com/compare/leon-vs-poke.md)\n- [Leon vs QwenPaw](https://www.anchorterminal.com/compare/leon-vs-qwenpaw.md)\n- [Leon vs ZeroClaw](https://www.anchorterminal.com/compare/leon-vs-zeroclaw.md)\n- [Leon vs Zo Computer](https://www.anchorterminal.com/compare/leon-vs-zo-computer.md)\n- [Lindy vs nanobot](https://www.anchorterminal.com/compare/lindy-vs-nanobot.md)\n- [nanobot vs NanoClaw](https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.md)\n- [nanobot vs Dots](https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [nanobot vs Poke](https://www.anchorterminal.com/compare/nanobot-vs-poke.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [nanobot vs ZeroClaw](https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.md)\n- [nanobot vs Zo Computer](https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Leon vs nanobot", "url": "" } ], "description": "nanobot scores 62.4 (B) to Leon's 41 (E) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Leon E 41", "nanobot B 62.4", "scores" ], "h1": "Leon vs nanobot", "image": "https://www.anchorterminal.com/assets/og/compare-leon-vs-nanobot.png", "path": "/compare/leon-vs-nanobot", "published": "2026-10-01", "section": "tools", "title": "Leon vs nanobot for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/leon-vs-nanobot" }, "tokens": { "markdown": 2450, "slim": 480 }, "version": 1 }