{ "data": { "a": { "slug": "leon", "name": "Leon", "vendor": "Louis Grenard (Leon AI)", "vendorUrl": "https://getleon.ai", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal assistant by Louis Grenard that the owner runs on their own machine or server. The 2.0 Developer Preview adds an agent loop with tools, layered memory, computer use and a proactive pulse, reached through a web app.", "url": "https://www.anchorterminal.com/tools/leon", "markdownUrl": "https://www.anchorterminal.com/tools/leon.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/leon.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/leon.json", "repo": "https://github.com/leon-ai/leon", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@leon-ai/cli" } ], "auth": "none", "authNotes": "No account. The web app and the Socket.IO and HTTP interfaces accept any client unless `client_interface.auth.enabled` is set, after which a `\u003cprofile\u003e:\u003ctoken\u003e` credential from `LEON_PROFILE_TOKEN` is required. Model provider keys go in the profile `.env`. Connected apps use OAuth or a pasted token.", "pricing": "free", "pricingNotes": "Free and MIT, with nothing to buy. The project takes sponsorship. Model usage is billed by the provider the owner picks, or costs nothing with a local llama.cpp model.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the context documents or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 17568, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/leon-ai/leon/blob/develop/README.md", "capabilities": [ "assistant.proactive", "assistant.self-hosted", "assistant.memory", "assistant.accounts" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "typescript", "beta", "telemetry-default-on" ], "lastRelease": "2023-05-01", "graded": true, "anchor": { "graded": true, "score": 41, "grade": "E", "agentReady": false, "rank": 934, "ranked": true, "rankOf": 986, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 57, "maintenance": 15, "payments": 60, "reliability": 32, "schema": 33, "security": 34, "transparency": 60 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": 0, "verdict": "Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.", "bestFor": "A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.", "strengths": [ "MIT licence, with the whole server, web app, tools and skills in one public repository", "Connected-app credentials are stored per profile with AES-256-GCM, and the Gmail connection asks only for the `gmail.readonly` scope", "Runs with a local llama.cpp model or any of 11 hosted providers, so the owner chooses which company sees the content", "Tool allow and disable lists, a configurable iteration limit (256 by default) and per-profile tool-call logs", "At least 200 commits between 25 September and 12 October 2026, with a fresh-install check passing on develop three times a week" ], "weaknesses": [ "No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch", "No approval step before a tool call. Shell commands pass a blocklist of patterns, and the proactive pulse is on by default and runs one task every 30 minutes", "The server listens on 0.0.0.0 and client authentication is off in the sample config", "Telemetry is on in the sample config and posts an instance ID, versions and hardware details to telemetry.getleon.ai. The README and the docs pages read do not describe it", "No `SECURITY.md`, security.txt, privacy policy or 2.0 documentation, and no messaging-app channel or MCP client on the develop branch" ], "agentNotes": [ "Clone the develop branch for 2.0. `npm install --global @leon-ai/cli` and docs.getleon.ai install and describe the legacy 1.0 betas", "Set `client_interface.auth.enabled: true` and a `LEON_PROFILE_TOKEN` before the machine joins a shared network. The server binds 0.0.0.0", "Set `telemetry_enabled: false` and `runtime.pulse_enabled: false` in the profile `config.yml` for an unattended or private run", "Use `availability.tools.allowed` to limit tools. Shell, file writes, computer use and browser control are otherwise available to the agent with no approval prompt", "Back up `LEON_CONNECTIONS_ENCRYPTION_KEY` from the profile `.env`. Without it the stored connections cannot be read" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41 } ], "editorialScores": { "ergonomics": 57, "maintenance": 15, "payments": 60, "reliability": 32, "schema": 33, "security": 34, "transparency": 52 }, "provenanceScore": 68 }, "connect": { "install": "git clone https://github.com/leon-ai/leon.git \u0026\u0026 cd leon \u0026\u0026 npm install --global pnpm@latest \u0026\u0026 pnpm install \u0026\u0026 pnpm start" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/leon" }, "area": "frameworks", "provenance": { "legalEntity": "No legal entity found. Copyright Louis Grenard", "domain": "getleon.ai", "domainRegistered": "2018-02-16", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/leon-ai/leon/blob/develop/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "`LICENSE.md` and the footer of getleon.ai read Copyright 2019 to present Louis Grenard. No company or foundation is named on the pages read.", "No terms of service or privacy policy was found on getleon.ai, docs.getleon.ai or in the repository, so no link is given and the MIT licence stands in.", "getleon.ai/.well-known/security.txt returns 404, and the repository has no `SECURITY.md`. The GitHub API lists no published security advisory.", "RDAP for getleon.ai gives a registration date of 2018-02-16.", "The assistant answers on the owner's own host. The only vendor endpoint the source names is telemetry.getleon.ai, which receives telemetry.", "`CHANGELOG.md` ends at 1.0.0-beta.8 of 1 May 2023. Changes to the 2.0 Developer Preview are recorded only as commits." ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/leon.json" }, "answer": "PicoClaw scores 46.1 (D) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories.", "b": { "slug": "picoclaw", "name": "PicoClaw", "vendor": "Sipeed", "vendorUrl": "https://picoclaw.io", "kind": "harness", "category": "personal-assistants", "summary": "PicoClaw is an open-source personal AI assistant from Sipeed, a single Go binary for small Linux boards, desktops and Android, reached through chat apps. Its last commit on the main branch was on 19 August 2026.", "url": "https://www.anchorterminal.com/tools/picoclaw", "markdownUrl": "https://www.anchorterminal.com/tools/picoclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/picoclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/picoclaw.json", "repo": "https://github.com/sipeed/picoclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "docker.io/sipeed/picoclaw" }, { "registry": "oci", "name": "ghcr.io/sipeed/picoclaw" } ], "auth": "none", "authNotes": "No account with Sipeed. The owner supplies model provider keys, chat bot tokens and search keys, kept in `~/.picoclaw/.security.yml`. The web launcher asks for a password set on first run, stored as a bcrypt hash. Each channel's `allow_from` list decides who may talk to the assistant, and an empty list admits everyone.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays their model provider by usage, or nothing with a local model through Ollama or vLLM. Search keys are optional, and DuckDuckGo search needs none.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, docs or source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 30000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.picoclaw.io", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "go", "docker", "pre-1.0" ], "lastRelease": "2026-07-03", "graded": true, "anchor": { "graded": true, "score": 46.1, "grade": "D", "agentReady": false, "rank": 879, "ranked": true, "rankOf": 986, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -7, "negativeNotes": [ "2026-04-25 to 2026-07-19. 15 advisories are listed for PicoClaw in the GitHub Advisory Database. Two are reviewed, CVE-2026-36045 (high, 7.3, command injection past the exec deny list, 0.1.2 and earlier) and CVE-2026-6987 (moderate, injection through the launcher's `/api/gateway/restart`, 0.2.4 and earlier), and 13 unreviewed entries of 10 to 19 July name versions up to 0.2.9. None lists a patched version, the project has published no advisory of its own, and it has no security policy. We read four of the fifteen. Several concern old versions and some fixes are in the git history, so -5. https://github.com/advisories?query=picoclaw", "Current behaviour, checked 2026-10-12. The repository's configuration guide says `tools.exec.allow_remote` defaults to `false`. The source at v0.3.1 and on main sets it to `true`, and the docs site calls fully open the default, so a remote chat can run shell commands on a default install. A misleading claim on a security default, the minimum, -2. https://github.com/sipeed/picoclaw/blob/main/docs/guides/configuration.md; https://github.com/sipeed/picoclaw/blob/main/pkg/config/defaults.go" ], "verdict": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.", "bestFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "strengths": [ "MIT licence, one Go binary for x86-64, ARM, RISC-V, MIPS and LoongArch, with Docker images and an Android APK", "Conversations, memory, scheduled jobs and credentials stay in files under `~/.picoclaw` on the owner's device", "File tools are limited to the workspace by default, and command jobs scheduled from remote chats are refused unless the chat is listed", "MCP client over stdio, SSE and HTTP, with optional search-based tool discovery to keep definitions out of context", "Credentials sit in a separate `.security.yml` with optional AES-256-GCM encryption, and are filtered from tool output before the model sees it" ], "weaknesses": [ "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply", "15 CVEs are listed in the GitHub Advisory Database (25 April to 19 July 2026). The project has published no advisory and has no SECURITY.md", "No human approval step. The agent sends messages, writes files and runs shell commands without asking, and the hooks guide says waiting for a human reply is not supported", "Shell execution from remote chats is on by default in the source and on the docs site, while the repository's configuration guide says the default is off", "An empty `allow_from` list lets anyone who can message the bot use it, with only a warning in the log" ], "agentNotes": [ "Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone", "Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says", "Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes", "Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read", "Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 46.1 } ], "editorialScores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 58 }, "provenanceScore": 53 }, "connect": { "install": "git clone https://github.com/sipeed/picoclaw.git \u0026\u0026 cd picoclaw \u0026\u0026 docker compose -f docker/docker-compose.yml --profile launcher up # or download a binary from https://picoclaw.io/download/ and run: picoclaw onboard", "headless": { "command": "picoclaw agent -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/picoclaw" }, "area": "frameworks", "provenance": { "legalEntity": "Sipeed", "domain": "picoclaw.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/sipeed/picoclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The docs footer reads Copyright 2026 Sipeed and the site says PicoClaw is open-source software by Sipeed. The `LICENSE` file names PicoClaw contributors. No registered company name or address was on the pages read.", "No terms of service or privacy policy is linked from picoclaw.io, docs.picoclaw.io or the repository, so both fields are left out and the MIT licence stands in.", "picoclaw.io/.well-known/security.txt and picoclaw.io/llms.txt answered 403 with a storage Access Denied body, read as absent. docs.picoclaw.io/llms.txt answered 404.", "The repository has no SECURITY.md, and GitHub's policy page says none is set up.", "Self-hosted software with no hosted endpoint. The registration date of picoclaw.io was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/picoclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Louis Grenard (Leon AI)", "b": "Sipeed", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2023-05-01", "b": "2026-07-03", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "18k stars", "b": "30k stars", "name": "Popularity" } ], "faq": [ { "answer": "PicoClaw scores 46.1 (D) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, Leon or PicoClaw?" }, { "answer": "Yes. Leon is open source (MIT). PicoClaw is open source (MIT).", "question": "Are Leon and PicoClaw open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No incidents deducted, where PicoClaw loses 7 points for them" ], "goodFor": "A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.", "slug": "leon", "watchFor": "No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch" }, { "aheadOn": [ "Reliability, 54 against 32", "Schema \u0026 documentation, 51 against 33", "Agent ergonomics, 66 against 57", "Security \u0026 auth, 51 against 34", "Maintenance \u0026 community, 22 against 15" ], "also": null, "goodFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "slug": "picoclaw", "watchFor": "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-leon.json", "title": "AstrBot vs Leon", "url": "https://www.anchorterminal.com/compare/astrbot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.json", "title": "AstrBot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-leon.json", "title": "CowAgent vs Leon", "url": "https://www.anchorterminal.com/compare/cowagent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.json", "title": "CowAgent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-leon.json", "title": "GAIA vs Leon", "url": "https://www.anchorterminal.com/compare/gaia-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw.json", "title": "GAIA vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-leon.json", "title": "Gemini Spark vs Leon", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.json", "title": "Gemini Spark vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-leon.json", "title": "Grok Bot vs Leon", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.json", "title": "Grok Bot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-leon.json", "title": "Haven vs Leon", "url": "https://www.anchorterminal.com/compare/haven-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-picoclaw.json", "title": "Haven vs PicoClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon.json", "title": "Hermes Agent vs Leon", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.json", "title": "Hermes Agent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-leon.json", "title": "Instinct vs Leon", "url": "https://www.anchorterminal.com/compare/instinct-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw.json", "title": "Instinct vs PicoClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-leon.json", "title": "IronClaw vs Leon", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.json", "title": "IronClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-lindy.json", "title": "Leon vs Lindy", "url": "https://www.anchorterminal.com/compare/leon-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanobot.json", "title": "Leon vs nanobot", "url": "https://www.anchorterminal.com/compare/leon-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanoclaw.json", "title": "Leon vs NanoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openai-dots.json", "title": "Leon vs Dots", "url": "https://www.anchorterminal.com/compare/leon-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openclaw.json", "title": "Leon vs OpenClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-poke.json", "title": "Leon vs Poke", "url": "https://www.anchorterminal.com/compare/leon-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw.json", "title": "Leon vs QwenPaw", "url": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw.json", "title": "Leon vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zo-computer.json", "title": "Leon vs Zo Computer", "url": "https://www.anchorterminal.com/compare/leon-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw.json", "title": "Lindy vs PicoClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.json", "title": "NanoClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.json", "title": "Dots vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-poke.json", "title": "PicoClaw vs Poke", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json", "title": "PicoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.json", "title": "PicoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.json", "title": "PicoClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer" } ], "scores": [ { "by": 22, "edge": "picoclaw", "key": "reliability", "leon": 32, "name": "Reliability", "picoclaw": 54, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 18, "edge": "picoclaw", "key": "schema", "leon": 33, "name": "Schema \u0026 documentation", "picoclaw": 51, "weight": 13 }, { "by": 9, "edge": "picoclaw", "key": "ergonomics", "leon": 57, "name": "Agent ergonomics", "picoclaw": 66, "weight": 13 }, { "by": 17, "edge": "picoclaw", "key": "security", "leon": 34, "name": "Security \u0026 auth", "picoclaw": 51, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "leon": 60, "name": "Payments \u0026 pricing", "picoclaw": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 7, "edge": "picoclaw", "key": "maintenance", "leon": 15, "name": "Maintenance \u0026 community", "picoclaw": 22, "weight": 7 }, { "by": 4, "edge": "leon", "key": "transparency", "leon": 60, "name": "Transparency \u0026 trust", "picoclaw": 56, "weight": 7 } ], "summary": "PicoClaw scores 46.1 (D) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories. Both do assistant proactive.", "verdicts": { "leon": "Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.", "picoclaw": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/leon-vs-picoclaw", "json": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.md", "slim": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.min.md" }, "markdown": "PicoClaw scores 46.1 (D) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories. Both do assistant proactive.\n\n- Leon: grade E, 41/100, rank #934 of 986. Markdown https://www.anchorterminal.com/tools/leon.md · JSON https://www.anchorterminal.com/api/v1/tools/leon.json\n- PicoClaw: grade D, 46.1/100, rank #879 of 986. Markdown https://www.anchorterminal.com/tools/picoclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/picoclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### Leon (E)\n\nGood for: A developer who wants a self-hosted assistant with memory, computer use and a local model, and who will read the source.\n\nAlso in its favour:\n- No incidents deducted, where PicoClaw loses 7 points for them\n\nWatch for: No tagged release of the core since 1.0.0-beta.8 on 1 May 2023. The 2.0 Developer Preview is installed by cloning the develop branch\n\n### PicoClaw (D)\n\nGood for: A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.\n\nAhead on:\n- Reliability, 54 against 32\n- Schema \u0026 documentation, 51 against 33\n- Agent ergonomics, 66 against 57\n- Security \u0026 auth, 51 against 34\n- Maintenance \u0026 community, 22 against 15\n\nWatch for: No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply\n\n\n## Score by category\n\n| Category | Weight | Leon | PicoClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 32 | 54 | PicoClaw +22 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 33 | 51 | PicoClaw +18 |\n| Agent ergonomics | 13% (16.2 this run) | 57 | 66 | PicoClaw +9 |\n| Security \u0026 auth | 14% (17.5 this run) | 34 | 51 | PicoClaw +17 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 15 | 22 | PicoClaw +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 60 | 56 | Leon +4 |\n| Negative events | ≤15 | 0 | -7 | |\n| **Total** | | **41 · E** | **46.1 · D** | |\n\n## Facts side by side\n\n| Fact | Leon | PicoClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Louis Grenard (Leon AI) | Sipeed |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2023-05-01 | 2026-07-03 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 18k stars | 30k stars |\n\n## Verdicts\n\n**Leon.** Connected-app credentials are encrypted per profile and the Gmail connection is read-only. The 2.0 Developer Preview has no tagged release, runs tools and a 30-minute proactive pulse with no approval step, listens on every network interface with client authentication off, and sends telemetry by default.\n\n**PicoClaw.** Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.\n\n## Before you call either\n\n### Leon\n\n1. Clone the develop branch for 2.0. `npm install --global @leon-ai/cli` and docs.getleon.ai install and describe the legacy 1.0 betas\n2. Set `client_interface.auth.enabled: true` and a `LEON_PROFILE_TOKEN` before the machine joins a shared network. The server binds 0.0.0.0\n3. Set `telemetry_enabled: false` and `runtime.pulse_enabled: false` in the profile `config.yml` for an unattended or private run\n4. Use `availability.tools.allowed` to limit tools. Shell, file writes, computer use and browser control are otherwise available to the agent with no approval prompt\n5. Back up `LEON_CONNECTIONS_ENCRYPTION_KEY` from the profile `.env`. Without it the stored connections cannot be read\n\n### PicoClaw\n\n1. Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone\n2. Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says\n3. Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes\n4. Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read\n5. Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions\n\n## Questions\n\n### Which is better for AI agents, Leon or PicoClaw?\n\nPicoClaw scores 46.1 (D) on agent readiness against Leon's 41 (E), and leads in 5 of 7 scored categories.\n\n### Are Leon and PicoClaw open source?\n\nYes. Leon is open source (MIT). PicoClaw is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/leon-vs-picoclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/leon-vs-picoclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"leon\", \"b\": \"picoclaw\"}`. From a terminal: `anchor compare leon picoclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/leon.json and https://www.anchorterminal.com/api/v1/tools/picoclaw.json\n\n## Other comparisons with Leon or PicoClaw\n\n- [AstrBot vs Leon](https://www.anchorterminal.com/compare/astrbot-vs-leon.md)\n- [AstrBot vs PicoClaw](https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.md)\n- [CowAgent vs Leon](https://www.anchorterminal.com/compare/cowagent-vs-leon.md)\n- [CowAgent vs PicoClaw](https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.md)\n- [GAIA vs Leon](https://www.anchorterminal.com/compare/gaia-vs-leon.md)\n- [GAIA vs PicoClaw](https://www.anchorterminal.com/compare/gaia-vs-picoclaw.md)\n- [Gemini Spark vs Leon](https://www.anchorterminal.com/compare/gemini-spark-vs-leon.md)\n- [Gemini Spark vs PicoClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.md)\n- [Grok Bot vs Leon](https://www.anchorterminal.com/compare/grok-bot-vs-leon.md)\n- [Grok Bot vs PicoClaw](https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.md)\n- [Haven vs Leon](https://www.anchorterminal.com/compare/haven-vs-leon.md)\n- [Haven vs PicoClaw](https://www.anchorterminal.com/compare/haven-vs-picoclaw.md)\n- [Hermes Agent vs Leon](https://www.anchorterminal.com/compare/hermes-agent-vs-leon.md)\n- [Hermes Agent vs PicoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.md)\n- [Instinct vs Leon](https://www.anchorterminal.com/compare/instinct-vs-leon.md)\n- [Instinct vs PicoClaw](https://www.anchorterminal.com/compare/instinct-vs-picoclaw.md)\n- [IronClaw vs Leon](https://www.anchorterminal.com/compare/ironclaw-vs-leon.md)\n- [IronClaw vs PicoClaw](https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.md)\n- [Leon vs Lindy](https://www.anchorterminal.com/compare/leon-vs-lindy.md)\n- [Leon vs nanobot](https://www.anchorterminal.com/compare/leon-vs-nanobot.md)\n- [Leon vs NanoClaw](https://www.anchorterminal.com/compare/leon-vs-nanoclaw.md)\n- [Leon vs Dots](https://www.anchorterminal.com/compare/leon-vs-openai-dots.md)\n- [Leon vs OpenClaw](https://www.anchorterminal.com/compare/leon-vs-openclaw.md)\n- [Leon vs Poke](https://www.anchorterminal.com/compare/leon-vs-poke.md)\n- [Leon vs QwenPaw](https://www.anchorterminal.com/compare/leon-vs-qwenpaw.md)\n- [Leon vs ZeroClaw](https://www.anchorterminal.com/compare/leon-vs-zeroclaw.md)\n- [Leon vs Zo Computer](https://www.anchorterminal.com/compare/leon-vs-zo-computer.md)\n- [Lindy vs PicoClaw](https://www.anchorterminal.com/compare/lindy-vs-picoclaw.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [NanoClaw vs PicoClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.md)\n- [Dots vs PicoClaw](https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [PicoClaw vs Poke](https://www.anchorterminal.com/compare/picoclaw-vs-poke.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [PicoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.md)\n- [PicoClaw vs Zo Computer](https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Leon vs PicoClaw", "url": "" } ], "description": "PicoClaw scores 46.1 (D) to Leon's 41 (E) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Leon E 41", "PicoClaw D 46.1", "scores" ], "h1": "Leon vs PicoClaw", "image": "https://www.anchorterminal.com/assets/og/compare-leon-vs-picoclaw.png", "path": "/compare/leon-vs-picoclaw", "published": "2026-10-01", "section": "tools", "title": "Leon vs PicoClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/leon-vs-picoclaw" }, "tokens": { "markdown": 2500, "slim": 480 }, "version": 1 }