{ "data": { "a": { "slug": "leon", "name": "Leon", "vendor": "Louis Grenard (Leon AI)", "vendorUrl": "https://getleon.ai", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal assistant by Louis Grenard that the owner runs on their own machine or server. The 2.0 Developer Preview adds an agent loop with tools, layered memory, computer use and a proactive pulse, reached through a web app.", "url": "https://www.anchorterminal.com/tools/leon", "markdownUrl": "https://www.anchorterminal.com/tools/leon.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/leon.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/leon.json", "repo": "https://github.com/leon-ai/leon", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@leon-ai/cli" } ], "auth": "none", "authNotes": "No account. The web app and the Socket.IO and HTTP interfaces accept any client unless `client_interface.auth.enabled` is set, after which a `\u003cprofile\u003e:\u003ctoken\u003e` credential from `LEON_PROFILE_TOKEN` is required. Model provider keys go in the profile `.env`. Connected apps use OAuth or a pasted token.", "pricing": "free", "pricingNotes": "Free and MIT, with nothing to buy. The project takes sponsorship. Model usage is billed by the provider the owner picks, or costs nothing with a local llama.cpp model.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the context documents or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 17568, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/leon-ai/leon/blob/develop/README.md", "capabilities": [ "assistant.proactive", "assistant.self-hosted", "assistant.memory", "assistant.accounts" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "typescript", "beta", "telemetry-default-on" ], "lastRelease": "2023-05-01", "graded": true, "anchor": { "graded": true, "score": 41, "grade": "E", "agentReady": false, "rank": 934, "ranked": true, "rankOf": 986, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 57, "maintenance": 15, "payments": 60, "reliability": 32, "schema": 33, "security": 34, "transparency": 60 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": 0, "verdict": "Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.", "bestFor": "A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.", "strengths": [ "MIT licence, with the whole server, web app, tools and skills in one public repository", "Connected-app credentials are stored per profile with AES-256-GCM, and the Gmail connection asks only for the `gmail.readonly` scope", "Runs with a local llama.cpp model or any of 11 hosted providers, so the owner chooses which company sees the content", "Tool allow and disable lists, a configurable iteration limit (256 by default) and per-profile tool-call logs", "At least 200 commits between 25 September and 12 October 2026, with a fresh-install check passing on develop three times a week" ], "weaknesses": [ "No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch", "No approval step before a tool call. Shell commands pass a blocklist of patterns, and the proactive pulse is on by default and runs one task every 30 minutes", "The server listens on 0.0.0.0 and client authentication is off in the sample config", "Telemetry is on in the sample config and posts an instance ID, versions and hardware details to telemetry.getleon.ai. The README and the docs pages read do not describe it", "No `SECURITY.md`, security.txt, privacy policy or 2.0 documentation, and no messaging-app channel or MCP client on the develop branch" ], "agentNotes": [ "Clone the develop branch for 2.0. `npm install --global @leon-ai/cli` and docs.getleon.ai install and describe the legacy 1.0 betas", "Set `client_interface.auth.enabled: true` and a `LEON_PROFILE_TOKEN` before the machine joins a shared network. The server binds 0.0.0.0", "Set `telemetry_enabled: false` and `runtime.pulse_enabled: false` in the profile `config.yml` for an unattended or private run", "Use `availability.tools.allowed` to limit tools. Shell, file writes, computer use and browser control are otherwise available to the agent with no approval prompt", "Back up `LEON_CONNECTIONS_ENCRYPTION_KEY` from the profile `.env`. Without it the stored connections cannot be read" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41 } ], "editorialScores": { "ergonomics": 57, "maintenance": 15, "payments": 60, "reliability": 32, "schema": 33, "security": 34, "transparency": 52 }, "provenanceScore": 68 }, "connect": { "install": "git clone https://github.com/leon-ai/leon.git \u0026\u0026 cd leon \u0026\u0026 npm install --global pnpm@latest \u0026\u0026 pnpm install \u0026\u0026 pnpm start" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/leon" }, "area": "frameworks", "provenance": { "legalEntity": "No legal entity found. Copyright Louis Grenard", "domain": "getleon.ai", "domainRegistered": "2018-02-16", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/leon-ai/leon/blob/develop/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "`LICENSE.md` and the footer of getleon.ai read Copyright 2019 to present Louis Grenard. No company or foundation is named on the pages read.", "No terms of service or privacy policy was found on getleon.ai, docs.getleon.ai or in the repository, so no link is given and the MIT licence stands in.", "getleon.ai/.well-known/security.txt returns 404, and the repository has no `SECURITY.md`. The GitHub API lists no published security advisory.", "RDAP for getleon.ai gives a registration date of 2018-02-16.", "The assistant answers on the owner's own host. The only vendor endpoint the source names is telemetry.getleon.ai, which receives telemetry.", "`CHANGELOG.md` ends at 1.0.0-beta.8 of 1 May 2023. Changes to the 2.0 Developer Preview are recorded only as commits." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/leon.json" }, "answer": "OpenClaw scores 67.1 (B) on agent readiness against Leon's 41 (E), and leads in 6 of 7 scored categories.", "b": { "slug": "openclaw", "name": "OpenClaw", "vendor": "OpenClaw Foundation", "vendorUrl": "https://openclaw.ai", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal AI assistant that runs as a Gateway on the owner's own computer and answers in WhatsApp, Telegram, Slack, iMessage and other chat apps, with desktop and mobile apps. The OpenClaw Foundation maintains it under the MIT licence.", "url": "https://www.anchorterminal.com/tools/openclaw", "markdownUrl": "https://www.anchorterminal.com/tools/openclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openclaw.json", "repo": "https://github.com/openclaw/openclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "openclaw" }, { "registry": "oci", "name": "ghcr.io/openclaw/openclaw" } ], "auth": "mixed", "authNotes": "No OpenClaw account exists. The owner supplies model provider API keys or signs in with a ChatGPT or Claude subscription, and adds a bot token, QR pairing or OAuth grant for each channel and account. Clients reach the Gateway with a token or password (`gateway.auth.mode`), or through a trusted proxy, and paired devices hold their own tokens. Operator scopes (`operator.read`, `operator.write`, `operator.admin` and others) apply to paired clients, but a shared-secret bearer token on `POST /tools/invoke` gets full operator access whatever scopes the caller sends (https://docs.openclaw.ai/gateway/tools-invoke-http-api; https://docs.openclaw.ai/gateway/operator-scopes).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with no paid tier, hosted service or subscription. The owner pays the model provider for usage, or nothing with a local model, plus any search, speech or media API they configure (https://github.com/openclaw/openclaw; https://docs.openclaw.ai/reference/api-usage-costs).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 391800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.openclaw.ai", "llmsTxt": "https://docs.openclaw.ai/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "foundation", "llms-txt", "docker", "typescript" ], "lastRelease": "2026-10-12", "graded": true, "anchor": { "graded": true, "score": 67.1, "grade": "B", "agentReady": false, "rank": 270, "ranked": true, "rankOf": 986, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 68 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -8, "negativeNotes": [ "2026-09-11. The project's security page and GitHub advisory list show 722 advisories published between 31 January and 11 September 2026, 14 critical, 249 high, 390 medium and 69 low, 39 with a CVE. The largest groups are Gateway auth and scopes (182) and exec, sandbox and approvals (160). The project says all 14 critical issues are fixed and disclosed and reports no known compromise of its infrastructure. Fixed and published, which decays the deduction, but the volume and the two areas affected bear directly on an assistant that holds its owner's accounts, -8. https://openclaw.ai/security; https://github.com/openclaw/openclaw/security/advisories" ], "verdict": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "strengths": [ "State, memory and credentials stay under `~/.openclaw` on the owner's machine, and the project sells no hosted service or paid tier", "Memory is plain Markdown files in the workspace, and `openclaw memory forget` removes what a named session contributed", "Four session permission modes (`read-only`, `guarded`, `workspace`, `full`), exec approvals and an optional Docker or Podman tool sandbox", "Unknown direct-message senders get a pairing code by default and are ignored until the owner approves them", "Telemetry is documented field by field. Feature statistics are opt-in and `update.checkOnStart: false` stops every automatic request", "13 stable releases in the 90 days to 12 October 2026, with npm provenance attestations on the published package" ], "weaknesses": [ "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off", "Agents with the message tool can send across conversations and channel providers by default, with no approval step for a send", "722 advisories published between 31 January and 11 September 2026, 14 critical and 249 high, per the project's own security page", "Credentials sit in files and SQLite databases under `~/.openclaw`, protected by file permissions unless the owner configures a secret provider", "The project's own maturity scorecard rates the product at 68 per cent, labelled Alpha", "The privacy policy covers the mobile apps, the Chrome extension and website analytics, and says it does not cover the Gateway" ], "agentNotes": [ "Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval", "Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default", "Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation", "Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it", "Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.1 } ], "editorialScores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 82 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://openclaw.ai/install.sh | bash # or: npm install -g openclaw@latest --allow-scripts=openclaw \u0026\u0026 openclaw onboard --install-daemon" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/openclaw" }, "area": "frameworks", "provenance": { "legalEntity": "OpenClaw Foundation", "domain": "openclaw.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/openclaw/openclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The README and the `LICENSE` file name the OpenClaw Foundation, described as an independent 501(c)(3). Its site at www.openclaw.org gave no address, registration number, board or filings on the page we read.", "No terms of service were found for the software, so the MIT licence stands in.", "The privacy policy at openclaw.ai/privacy, effective 2 August 2026, covers the iOS and Android apps, the Chrome extension and website analytics, and says it does not cover the gateway, server or AI provider the owner connects. It is not linked here for that reason.", "openclaw.ai/.well-known/security.txt returned 404 on 12 October 2026. The repository has a SECURITY.md with private GitHub reporting and security@openclaw.ai.", "There is no hosted endpoint. A Gateway answers on its owner's own host. The daily update check goes to telemetry.openclaw.ai.", "The domain registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Louis Grenard (Leon AI)", "b": "OpenClaw Foundation", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2023-05-01", "b": "2026-10-12", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "18k stars", "b": "392k stars", "name": "Popularity" } ], "faq": [ { "answer": "OpenClaw scores 67.1 (B) on agent readiness against Leon's 41 (E), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Leon or OpenClaw?" }, { "answer": "Yes. Leon is open source (MIT). OpenClaw is open source (MIT).", "question": "Are Leon and OpenClaw open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No key needed to call it", "Free to start without a card", "No incidents deducted, where OpenClaw loses 8 points for them" ], "goodFor": "A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.", "slug": "leon", "watchFor": "No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch" }, { "aheadOn": [ "Reliability, 75 against 32", "Schema \u0026 documentation, 84 against 33", "Agent ergonomics, 77 against 57", "Security \u0026 auth, 74 against 34", "Maintenance \u0026 community, 86 against 15", "Transparency \u0026 trust, 68 against 60" ], "also": null, "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "slug": "openclaw", "watchFor": "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-leon.json", "title": "AstrBot vs Leon", "url": "https://www.anchorterminal.com/compare/astrbot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw.json", "title": "AstrBot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-leon.json", "title": "CowAgent vs Leon", "url": "https://www.anchorterminal.com/compare/cowagent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw.json", "title": "CowAgent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-leon.json", "title": "GAIA vs Leon", "url": "https://www.anchorterminal.com/compare/gaia-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-openclaw.json", "title": "GAIA vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-leon.json", "title": "Gemini Spark vs Leon", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.json", "title": "Gemini Spark vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-leon.json", "title": "Grok Bot vs Leon", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.json", "title": "Grok Bot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-leon.json", "title": "Haven vs Leon", "url": "https://www.anchorterminal.com/compare/haven-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-openclaw.json", "title": "Haven vs OpenClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon.json", "title": "Hermes Agent vs Leon", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.json", "title": "Hermes Agent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-leon.json", "title": "Instinct vs Leon", "url": "https://www.anchorterminal.com/compare/instinct-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-openclaw.json", "title": "Instinct vs OpenClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-leon.json", "title": "IronClaw vs Leon", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.json", "title": "IronClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-lindy.json", "title": "Leon vs Lindy", "url": "https://www.anchorterminal.com/compare/leon-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanobot.json", "title": "Leon vs nanobot", "url": "https://www.anchorterminal.com/compare/leon-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanoclaw.json", "title": "Leon vs NanoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openai-dots.json", "title": "Leon vs Dots", "url": "https://www.anchorterminal.com/compare/leon-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.json", "title": "Leon vs PicoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-poke.json", "title": "Leon vs Poke", "url": "https://www.anchorterminal.com/compare/leon-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw.json", "title": "Leon vs QwenPaw", "url": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw.json", "title": "Leon vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zo-computer.json", "title": "Leon vs Zo Computer", "url": "https://www.anchorterminal.com/compare/leon-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-openclaw.json", "title": "Lindy vs OpenClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.json", "title": "NanoClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.json", "title": "Dots vs OpenClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-poke.json", "title": "OpenClaw vs Poke", "url": "https://www.anchorterminal.com/compare/openclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json", "title": "OpenClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.json", "title": "OpenClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.json", "title": "OpenClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer" } ], "scores": [ { "by": 43, "edge": "openclaw", "key": "reliability", "leon": 32, "name": "Reliability", "openclaw": 75, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 51, "edge": "openclaw", "key": "schema", "leon": 33, "name": "Schema \u0026 documentation", "openclaw": 84, "weight": 13 }, { "by": 20, "edge": "openclaw", "key": "ergonomics", "leon": 57, "name": "Agent ergonomics", "openclaw": 77, "weight": 13 }, { "by": 40, "edge": "openclaw", "key": "security", "leon": 34, "name": "Security \u0026 auth", "openclaw": 74, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "leon": 60, "name": "Payments \u0026 pricing", "openclaw": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 71, "edge": "openclaw", "key": "maintenance", "leon": 15, "name": "Maintenance \u0026 community", "openclaw": 86, "weight": 7 }, { "by": 8, "edge": "openclaw", "key": "transparency", "leon": 60, "name": "Transparency \u0026 trust", "openclaw": 68, "weight": 7 } ], "summary": "OpenClaw scores 67.1 (B) on agent readiness against Leon's 41 (E), and leads in 6 of 7 scored categories. Both do assistant proactive.", "verdicts": { "leon": "Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.", "openclaw": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/leon-vs-openclaw", "json": "https://www.anchorterminal.com/compare/leon-vs-openclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/leon-vs-openclaw.md", "slim": "https://www.anchorterminal.com/compare/leon-vs-openclaw.min.md" }, "markdown": "OpenClaw scores 67.1 (B) on agent readiness against Leon's 41 (E), and leads in 6 of 7 scored categories. Both do assistant proactive.\n\n- Leon: grade E, 41/100, rank #934 of 986. Markdown https://www.anchorterminal.com/tools/leon.md · JSON https://www.anchorterminal.com/api/v1/tools/leon.json\n- OpenClaw: grade B, 67.1/100, rank #270 of 986. Markdown https://www.anchorterminal.com/tools/openclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/openclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### Leon (E)\n\nGood for: A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.\n\nAlso in its favour:\n- No key needed to call it\n- Free to start without a card\n- No incidents deducted, where OpenClaw loses 8 points for them\n\nWatch for: No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch\n\n### OpenClaw (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.\n\nAhead on:\n- Reliability, 75 against 32\n- Schema \u0026 documentation, 84 against 33\n- Agent ergonomics, 77 against 57\n- Security \u0026 auth, 74 against 34\n- Maintenance \u0026 community, 86 against 15\n- Transparency \u0026 trust, 68 against 60\n\nWatch for: Without configuration the default is full access. Host exec runs with no approval and sandboxing is off\n\n\n## Score by category\n\n| Category | Weight | Leon | OpenClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 32 | 75 | OpenClaw +43 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 33 | 84 | OpenClaw +51 |\n| Agent ergonomics | 13% (16.2 this run) | 57 | 77 | OpenClaw +20 |\n| Security \u0026 auth | 14% (17.5 this run) | 34 | 74 | OpenClaw +40 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 15 | 86 | OpenClaw +71 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 60 | 68 | OpenClaw +8 |\n| Negative events | ≤15 | 0 | -8 | |\n| **Total** | | **41 · E** | **67.1 · B** | |\n\n## Facts side by side\n\n| Fact | Leon | OpenClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Louis Grenard (Leon AI) | OpenClaw Foundation |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | OAuth or key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | yes |\n| llms.txt | no | yes |\n| Last release | 2023-05-01 | 2026-10-12 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 18k stars | 392k stars |\n\n## Verdicts\n\n**Leon.** Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.\n\n**OpenClaw.** Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.\n\n## Before you call either\n\n### Leon\n\n1. Clone the develop branch for 2.0. `npm install --global @leon-ai/cli` and docs.getleon.ai install and describe the legacy 1.0 betas\n2. Set `client_interface.auth.enabled: true` and a `LEON_PROFILE_TOKEN` before the machine joins a shared network. The server binds 0.0.0.0\n3. Set `telemetry_enabled: false` and `runtime.pulse_enabled: false` in the profile `config.yml` for an unattended or private run\n4. Use `availability.tools.allowed` to limit tools. Shell, file writes, computer use and browser control are otherwise available to the agent with no approval prompt\n5. Back up `LEON_CONNECTIONS_ENCRYPTION_KEY` from the profile `.env`. Without it the stored connections cannot be read\n\n### OpenClaw\n\n1. Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval\n2. Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default\n3. Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation\n4. Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it\n5. Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access\n\n## Questions\n\n### Which is better for AI agents, Leon or OpenClaw?\n\nOpenClaw scores 67.1 (B) on agent readiness against Leon's 41 (E), and leads in 6 of 7 scored categories.\n\n### Are Leon and OpenClaw open source?\n\nYes. Leon is open source (MIT). OpenClaw is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/leon-vs-openclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/leon-vs-openclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"leon\", \"b\": \"openclaw\"}`. From a terminal: `anchor compare leon openclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/leon.json and https://www.anchorterminal.com/api/v1/tools/openclaw.json\n\n## Other comparisons with Leon or OpenClaw\n\n- [AstrBot vs Leon](https://www.anchorterminal.com/compare/astrbot-vs-leon.md)\n- [AstrBot vs OpenClaw](https://www.anchorterminal.com/compare/astrbot-vs-openclaw.md)\n- [CowAgent vs Leon](https://www.anchorterminal.com/compare/cowagent-vs-leon.md)\n- [CowAgent vs OpenClaw](https://www.anchorterminal.com/compare/cowagent-vs-openclaw.md)\n- [GAIA vs Leon](https://www.anchorterminal.com/compare/gaia-vs-leon.md)\n- [GAIA vs OpenClaw](https://www.anchorterminal.com/compare/gaia-vs-openclaw.md)\n- [Gemini Spark vs Leon](https://www.anchorterminal.com/compare/gemini-spark-vs-leon.md)\n- [Gemini Spark vs OpenClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.md)\n- [Grok Bot vs Leon](https://www.anchorterminal.com/compare/grok-bot-vs-leon.md)\n- [Grok Bot vs OpenClaw](https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.md)\n- [Haven vs Leon](https://www.anchorterminal.com/compare/haven-vs-leon.md)\n- [Haven vs OpenClaw](https://www.anchorterminal.com/compare/haven-vs-openclaw.md)\n- [Hermes Agent vs Leon](https://www.anchorterminal.com/compare/hermes-agent-vs-leon.md)\n- [Hermes Agent vs OpenClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.md)\n- [Instinct vs Leon](https://www.anchorterminal.com/compare/instinct-vs-leon.md)\n- [Instinct vs OpenClaw](https://www.anchorterminal.com/compare/instinct-vs-openclaw.md)\n- [IronClaw vs Leon](https://www.anchorterminal.com/compare/ironclaw-vs-leon.md)\n- [IronClaw vs OpenClaw](https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.md)\n- [Leon vs Lindy](https://www.anchorterminal.com/compare/leon-vs-lindy.md)\n- [Leon vs nanobot](https://www.anchorterminal.com/compare/leon-vs-nanobot.md)\n- [Leon vs NanoClaw](https://www.anchorterminal.com/compare/leon-vs-nanoclaw.md)\n- [Leon vs Dots](https://www.anchorterminal.com/compare/leon-vs-openai-dots.md)\n- [Leon vs PicoClaw](https://www.anchorterminal.com/compare/leon-vs-picoclaw.md)\n- [Leon vs Poke](https://www.anchorterminal.com/compare/leon-vs-poke.md)\n- [Leon vs QwenPaw](https://www.anchorterminal.com/compare/leon-vs-qwenpaw.md)\n- [Leon vs ZeroClaw](https://www.anchorterminal.com/compare/leon-vs-zeroclaw.md)\n- [Leon vs Zo Computer](https://www.anchorterminal.com/compare/leon-vs-zo-computer.md)\n- [Lindy vs OpenClaw](https://www.anchorterminal.com/compare/lindy-vs-openclaw.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [NanoClaw vs OpenClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.md)\n- [Dots vs OpenClaw](https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [OpenClaw vs Poke](https://www.anchorterminal.com/compare/openclaw-vs-poke.md)\n- [OpenClaw vs QwenPaw](https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.md)\n- [OpenClaw vs ZeroClaw](https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.md)\n- [OpenClaw vs Zo Computer](https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Leon vs OpenClaw", "url": "" } ], "description": "OpenClaw scores 67.1 (B) to Leon's 41 (E) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Leon E 41", "OpenClaw B 67.1", "scores" ], "h1": "Leon vs OpenClaw", "image": "https://www.anchorterminal.com/assets/og/compare-leon-vs-openclaw.png", "path": "/compare/leon-vs-openclaw", "published": "2026-10-01", "section": "tools", "title": "Leon vs OpenClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/leon-vs-openclaw" }, "tokens": { "markdown": 2500, "slim": 530 }, "version": 1 }