{ "data": { "a": { "slug": "nanobot", "name": "nanobot", "vendor": "HKUDS", "vendorUrl": "https://nanobot.wiki", "kind": "harness", "category": "personal-assistants", "summary": "nanobot is an open-source, self-hosted personal AI agent written in Python by HKUDS. It runs as a gateway on the owner's machine and answers in a web UI, a terminal and chat apps, with tools, memory and scheduled automations.", "url": "https://www.anchorterminal.com/tools/nanobot", "markdownUrl": "https://www.anchorterminal.com/tools/nanobot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/nanobot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/nanobot.json", "repo": "https://github.com/HKUDS/nanobot", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "nanobot-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies model provider keys or an OAuth sign-in, and bot tokens or mailbox passwords for each channel, in `~/.nanobot/config.json`. The WebUI on localhost needs no password, and binding to all interfaces requires a token.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model. The optional Render deployment needs a paid Render service.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 49000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://nanobot.wiki/docs/latest/getting-started/nanobot-overview", "llmsTxt": "https://nanobot.wiki/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "assistant.accounts", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker", "alpha" ], "lastRelease": "2026-09-15", "graded": true, "anchor": { "graded": true, "score": 62.4, "grade": "B", "agentReady": false, "rank": 446, "ranked": true, "rankOf": 993, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 48 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-09-02. GHSA-vc5v-6vwm-wf9m (critical, 9.3, no CVE). Web fetch did not block internal addresses, so cloud metadata and internal services could be read without authentication in versions before 0.3.0. Fixed in 0.3.0 of 25 July and published, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-vc5v-6vwm-wf9m", "2026-03-27. GHSA-4gmr-2vc8-7qh3 (CVE-2026-33654, high). A spoofed email could inject instructions through email polling with no user action, up to command execution, in 0.1.4.post5 and earlier. Fixed in 0.1.4.post6 and published, more than six months ago, -2. https://github.com/HKUDS/nanobot/security/advisories/GHSA-4gmr-2vc8-7qh3", "2026-03-11. GHSA-g6cf-xjwr-pm77 (CVE-2026-31977, critical, 9.0). A sender ID containing `|` passed the `allowFrom` check in versions before 0.1.4.post4. Fixed and published, more than six months ago, -1. https://github.com/HKUDS/nanobot/security/advisories/GHSA-g6cf-xjwr-pm77", "2026-04-14 and 2026-05-24. GHSA-v5j3-4q66-58cf (CVE-2026-35589, high, 8.0), cross-site WebSocket hijacking of the WhatsApp bridge, fixed in 0.1.5, and GHSA-3f63-vcp3-hvqr (CVE-2026-48716, high, 8.7), file write through a WhatsApp document name. Both fixed and published, -1 together. https://github.com/HKUDS/nanobot/security/advisories" ], "verdict": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.3.5", "Long-term memory is plain files (`USER.md`, `SOUL.md`, `memory/MEMORY.md`) versioned with Git, with `/dream-log` and `/dream-restore` to inspect and roll back", "Chat channels deny unknown senders by default since v0.1.4.post4, with pairing codes the owner approves", "Email requires SPF and DKIM results from a named receiving service since v0.3.5, and mailbox access stays off until `consentGranted` is set", "Optional `bwrap` (Linux) and `seatbelt` (macOS) sandboxes for shell commands, and an SSRF guard on web fetches and HTTP MCP connections" ], "weaknesses": [ "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking", "`tools.restrictToWorkspace` defaults to false and `tools.exec.sandbox` to empty. Neither sandbox restricts network access, and Windows has none", "Five advisories published from 11 March to 2 September 2026, two rated critical, among them an allowlist bypass and unauthenticated SSRF in web fetch", "SECURITY.md lists plain-text API keys in `config.json`, no rate limiting and limited security event logging as known limitations", "Version 0.3.5 with an Alpha classifier, 214 open issues and 614 open pull requests on 12 October 2026" ], "agentNotes": [ "Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default", "Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)", "Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing", "Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text", "Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.4 } ], "editorialScores": { "ergonomics": 74, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 77, "security": 63, "transparency": 69 }, "provenanceScore": 27 }, "connect": { "install": "python -m pip install nanobot-ai # or: uv tool install nanobot-ai # then: nanobot webui", "headless": { "command": "nanobot -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/nanobot" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "nanobot.wiki", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/nanobot/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, which a published advisory title calls the Hong Kong University Data Intelligence Lab. pyproject.toml names Xubin Ren and the nanobot contributors as authors.", "nanobot.wiki has no terms or privacy page linked from its home page or llms.txt, and `/.well-known/security.txt` answered with the site's not-found page on 12 October 2026.", "SECURITY.md in the repository asks for reports through a private GitHub advisory or by email and aims to respond within 48 hours.", "There is no hosted endpoint. A gateway answers on its owner's own host." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/nanobot.json", "live": { "slug": "nanobot", "versions": [ { "registry": "github", "name": "HKUDS/nanobot", "version": "v0.3.5", "released": "2026-09-15", "seenAt": "2026-10-12T22:16:43.073576298Z" }, { "registry": "pypi", "name": "nanobot-ai", "version": "0.3.5", "released": "2026-09-15", "seenAt": "2026-10-12T22:16:42.890638532Z" } ], "githubStars": 48974, "pypiWeekly": 18972, "updatedAt": "2026-10-12T22:16:43.073576298Z" } }, "answer": "nanobot scores 62.4 (B) on agent readiness against Tomo's 13.1 (F), and leads in every scored category.", "b": { "slug": "tomo", "name": "Tomo", "vendor": "Mapo Labs, Inc.", "vendorUrl": "https://www.tomo.ai", "kind": "platform", "category": "personal-assistants", "summary": "Tomo is a personal AI from Mapo Labs that a person texts over iMessage or uses in its iOS app. It remembers goals, checks in first, joins group chats, sets reminders and connects to the owner's calendar and email.", "url": "https://www.anchorterminal.com/tools/tomo", "markdownUrl": "https://www.anchorterminal.com/tools/tomo.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/tomo.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/tomo.json", "license": "Closed service under Tomo's Terms of Service (Mapo Labs, Inc., last updated 24 September 2026).", "transports": [], "packages": [], "auth": "mixed", "authNotes": "A person starts by texting Tomo, signs in at tomo.ai/login or in the iOS app, and the account is tied to their phone number (https://www.tomo.ai/about). No API key, MCP server or other programmatic access was found.", "pricing": "paid", "pricingNotes": "The base plan starts at $19.99 a month, with other plans that raise messaging limits, and the site says prices may vary by user and promotion (https://www.tomo.ai/about). The App Store lists in-app purchases named Tomo Pro at $19.99 and $119.99 (https://apps.apple.com/us/app/tomo-your-personal-ai/id6757726935), checked 12 October 2026. No free plan was found. Payments run through Stripe.", "priceSummary": "$19.99 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 found on tomo.ai, checked 12 October 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "capabilities": [ "assistant.accounts", "assistant.messaging", "assistant.memory", "messaging.inbound", "calendar.write", "mailbox.read", "notify.push", "memory.user", "web.search" ], "tags": [ "hosted", "official", "closed-source", "paid", "ios" ], "lastRelease": "2026-09-29", "graded": true, "disclosure": "Tomo competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "competesWith": "localghost", "anchor": { "graded": true, "score": 13.1, "grade": "F", "agentReady": false, "rank": 989, "ranked": true, "rankOf": 993, "categoryRank": 25, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 0, "maintenance": 54, "payments": 10, "reliability": 15, "schema": 0, "security": 0, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": 0, "verdict": "Tomo is a hosted personal AI over iMessage and an iOS app, centred on goals, check-ins and reminders, with regular iOS releases since April 2026. No outside agent can call it, there's no free plan, and no status page, security contact or subprocessor list was found.", "bestFor": "People who want accountability, check-ins and reminders by text, including in group chats.", "disclosure": "Tomo competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "strengths": [ "In iMessage group chats it shares only busy times from a connected calendar, not event details.", "Google Workspace and health data are excluded from AI training, per the privacy policy.", "Complete deletion requests are processed within 30 days.", "Eight iOS releases between 31 July and 29 September 2026." ], "weaknesses": [ "No API, MCP server or A2A endpoint for an outside agent.", "No free plan or trial found, and prices may vary by user.", "No status page, security.txt or security contact found.", "The privacy policy shares visitor identifiers with Meta, TikTok and Snap for ad targeting." ], "agentNotes": [ "Don't plan to call Tomo from another agent. It answers only the owner's iMessage, group chats it's added to and the iOS app.", "Tell the owner that adding Tomo to a group chat applies its terms to every participant." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 13.1 } ], "editorialScores": { "ergonomics": 0, "maintenance": 54, "payments": 10, "reliability": 15, "schema": 0, "security": 0, "transparency": 33 }, "provenanceScore": 60 }, "letme": { "capability": "https://letme.dev/assistant.accounts", "tool": "https://letme.dev/tomo" }, "area": "frameworks", "unitPrices": [ { "item": "Tomo base plan", "unit": "month", "usd": 19.99, "note": "Starting price on tomo.ai. Prices may vary by user and promotion." } ], "provenance": { "legalEntity": "Mapo Labs, Inc.", "domain": "tomo.ai", "domainRegistered": "2020-12-14", "endpointOnVendorDomain": null, "terms": "https://www.tomo.ai/terms", "privacy": "https://www.tomo.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "tomo.ai redirects to www.tomo.ai. The footer links mapolabs.com.", "tomo.ai/.well-known/security.txt and tomo.ai/llms.txt redirect to the login page.", "No status page or changelog was found.", "RDAP gives a registration date of 2020-12-14 for tomo.ai." ], "score": 60 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/tomo.json" }, "facts": [ { "a": "Agent harness", "b": "Platform", "name": "Kind" }, { "a": "HKUDS", "b": "Mapo Labs, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Closed service under Tomo's Terms of Service (Mapo Labs, Inc., last updated 24 September 2026).", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-09-15", "b": "2026-09-29", "name": "Last release" }, { "a": "no document linked", "b": "", "name": "Terms last updated" }, { "a": "no document linked", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "49k stars", "b": "none", "name": "Popularity" } ], "faq": [ { "answer": "nanobot scores 62.4 (B) on agent readiness against Tomo's 13.1 (F), and leads in every scored category.", "question": "Which is better for AI agents, nanobot or Tomo?" }, { "answer": "nanobot is open source (MIT). No open-source release is listed for Tomo.", "question": "Are nanobot and Tomo open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 70 against 15", "Schema \u0026 documentation, 77 against 0", "Agent ergonomics, 74 against 0", "Security \u0026 auth, 63 against 0", "Payments \u0026 pricing, 60 against 10", "Maintenance \u0026 community, 82 against 54" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.", "slug": "nanobot", "watchFor": "No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking" }, { "aheadOn": null, "also": [ "No incidents deducted, where nanobot loses 6 points for them" ], "goodFor": "People who want accountability, check-ins and reminders by text, including in group chats.", "slug": "tomo", "watchFor": "No API, MCP server or A2A endpoint for an outside agent." } ], "job": { "capability": "assistant.accounts", "name": "Assistants that act in your accounts" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot.json", "title": "AstrBot vs nanobot", "url": "https://www.anchorterminal.com/compare/astrbot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot.json", "title": "CowAgent vs nanobot", "url": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-nanobot.json", "title": "GAIA vs nanobot", "url": "https://www.anchorterminal.com/compare/gaia-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.json", "title": "Gemini Spark vs nanobot", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.json", "title": "Grok Bot vs nanobot", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-nanobot.json", "title": "Haven vs nanobot", "url": "https://www.anchorterminal.com/compare/haven-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.json", "title": "Hermes Agent vs nanobot", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-nanobot.json", "title": "Instinct vs nanobot", "url": "https://www.anchorterminal.com/compare/instinct-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.json", "title": "IronClaw vs nanobot", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-nanobot.json", "title": "Leon vs nanobot", "url": "https://www.anchorterminal.com/compare/leon-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-nanobot.json", "title": "Lindy vs nanobot", "url": "https://www.anchorterminal.com/compare/lindy-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.json", "title": "nanobot vs NanoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.json", "title": "nanobot vs Dots", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-poke.json", "title": "nanobot vs Poke", "url": "https://www.anchorterminal.com/compare/nanobot-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json", "title": "nanobot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.json", "title": "nanobot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.json", "title": "nanobot vs Zo Computer", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-tomo.json", "title": "CowAgent vs Tomo", "url": "https://www.anchorterminal.com/compare/cowagent-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-tomo.json", "title": "GAIA vs Tomo", "url": "https://www.anchorterminal.com/compare/gaia-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-tomo.json", "title": "Gemini Spark vs Tomo", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-tomo.json", "title": "Grok Bot vs Tomo", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-tomo.json", "title": "Haven vs Tomo", "url": "https://www.anchorterminal.com/compare/haven-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-tomo.json", "title": "Hermes Agent vs Tomo", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-tomo.json", "title": "Instinct vs Tomo", "url": "https://www.anchorterminal.com/compare/instinct-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-tomo.json", "title": "IronClaw vs Tomo", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-tomo.json", "title": "Leon vs Tomo", "url": "https://www.anchorterminal.com/compare/leon-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-tomo.json", "title": "Lindy vs Tomo", "url": "https://www.anchorterminal.com/compare/lindy-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-natura.json", "title": "nanobot vs Natura tinyNature", "url": "https://www.anchorterminal.com/compare/nanobot-vs-natura" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-pally.json", "title": "nanobot vs Pally", "url": "https://www.anchorterminal.com/compare/nanobot-vs-pally" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-wajo.json", "title": "nanobot vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/nanobot-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-tomo.json", "title": "NanoClaw vs Tomo", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/natura-vs-tomo.json", "title": "Natura tinyNature vs Tomo", "url": "https://www.anchorterminal.com/compare/natura-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-tomo.json", "title": "Dots vs Tomo", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-tomo.json", "title": "OpenClaw vs Tomo", "url": "https://www.anchorterminal.com/compare/openclaw-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/pally-vs-tomo.json", "title": "Pally vs Tomo", "url": "https://www.anchorterminal.com/compare/pally-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-tomo.json", "title": "Poke vs Tomo", "url": "https://www.anchorterminal.com/compare/poke-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-tomo.json", "title": "QwenPaw vs Tomo", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/tomo-vs-wajo.json", "title": "Tomo vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/tomo-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/tomo-vs-zeroclaw.json", "title": "Tomo vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/tomo-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/tomo-vs-zo-computer.json", "title": "Tomo vs Zo Computer", "url": "https://www.anchorterminal.com/compare/tomo-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-talorys.json", "title": "nanobot vs Talorys", "url": "https://www.anchorterminal.com/compare/nanobot-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/talorys-vs-tomo.json", "title": "Talorys vs Tomo", "url": "https://www.anchorterminal.com/compare/talorys-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-tomo.json", "title": "AstrBot vs Tomo", "url": "https://www.anchorterminal.com/compare/astrbot-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-tomo.json", "title": "PicoClaw vs Tomo", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-tomo" } ], "scores": [ { "by": 55, "edge": "nanobot", "key": "reliability", "name": "Reliability", "nanobot": 70, "tomo": 15, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 77, "edge": "nanobot", "key": "schema", "name": "Schema \u0026 documentation", "nanobot": 77, "tomo": 0, "weight": 13 }, { "by": 74, "edge": "nanobot", "key": "ergonomics", "name": "Agent ergonomics", "nanobot": 74, "tomo": 0, "weight": 13 }, { "by": 63, "edge": "nanobot", "key": "security", "name": "Security \u0026 auth", "nanobot": 63, "tomo": 0, "weight": 14 }, { "by": 50, "edge": "nanobot", "key": "payments", "name": "Payments \u0026 pricing", "nanobot": 60, "tomo": 10, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 28, "edge": "nanobot", "key": "maintenance", "name": "Maintenance \u0026 community", "nanobot": 82, "tomo": 54, "weight": 7 }, { "by": 1, "edge": "nanobot", "key": "transparency", "name": "Transparency \u0026 trust", "nanobot": 48, "tomo": 47, "weight": 7 } ], "summary": "nanobot scores 62.4 (B) on agent readiness against Tomo's 13.1 (F), and leads in every scored category. Both do assistants that act in your accounts.", "verdicts": { "nanobot": "nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.", "tomo": "Tomo is a hosted personal AI over iMessage and an iOS app, centred on goals, check-ins and reminders, with regular iOS releases since April 2026. No outside agent can call it, there's no free plan, and no status page, security contact or subprocessor list was found." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/nanobot-vs-tomo", "json": "https://www.anchorterminal.com/compare/nanobot-vs-tomo.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/nanobot-vs-tomo.md", "slim": "https://www.anchorterminal.com/compare/nanobot-vs-tomo.min.md" }, "markdown": "nanobot scores 62.4 (B) on agent readiness against Tomo's 13.1 (F), and leads in every scored category. Both do assistants that act in your accounts.\n\n- nanobot: grade B, 62.4/100, rank #446 of 993. Markdown https://www.anchorterminal.com/tools/nanobot.md · JSON https://www.anchorterminal.com/api/v1/tools/nanobot.json\n- Tomo: grade F, 13.1/100, rank #989 of 993. Markdown https://www.anchorterminal.com/tools/tomo.md · JSON https://www.anchorterminal.com/api/v1/tools/tomo.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 314 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### nanobot (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with file-based memory and a free choice of model.\n\nAhead on:\n- Reliability, 70 against 15\n- Schema \u0026 documentation, 77 against 0\n- Agent ergonomics, 74 against 0\n- Security \u0026 auth, 63 against 0\n- Payments \u0026 pricing, 60 against 10\n- Maintenance \u0026 community, 82 against 54\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: No per-action approval was found in the docs or source. The agent sends messages, runs shell commands and edits files without asking\n\n### Tomo (F)\n\nGood for: People who want accountability, check-ins and reminders by text, including in group chats.\n\nAlso in its favour:\n- No incidents deducted, where nanobot loses 6 points for them\n\nWatch for: No API, MCP server or A2A endpoint for an outside agent.\n\n\n## Score by category\n\n| Category | Weight | nanobot | Tomo | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 70 | 15 | nanobot +55 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 0 | nanobot +77 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 0 | nanobot +74 |\n| Security \u0026 auth | 14% (17.5 this run) | 63 | 0 | nanobot +63 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 10 | nanobot +50 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 54 | nanobot +28 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 48 | 47 | nanobot +1 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **62.4 · B** | **13.1 · F** | |\n\n## Facts side by side\n\n| Fact | nanobot | Tomo |\n| --- | --- | --- |\n| Kind | Agent harness | Platform |\n| Vendor | HKUDS | Mapo Labs, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | OAuth or key |\n| Pricing | Free | Paid |\n| x402 | no | no |\n| Licence | MIT | Closed service under Tomo's Terms of Service (Mapo Labs, Inc., last updated 24 September 2026). |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-09-15 | 2026-09-29 |\n| Terms last updated | no document linked | |\n| Privacy policy last updated | no document linked | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 49k stars | none |\n\n## Verdicts\n\n**nanobot.** nanobot runs on the owner's machine under the MIT licence, with no telemetry found in its source and memory kept as files the owner can read and restore. No per-action approval step was found, and the shell sandbox and workspace restriction are off by default. Five security advisories were published between March and September 2026, all with fixes.\n\n**Tomo.** Tomo is a hosted personal AI over iMessage and an iOS app, centred on goals, check-ins and reminders, with regular iOS releases since April 2026. No outside agent can call it, there's no free plan, and no status page, security contact or subprocessor list was found.\n\n## Before you call either\n\n### nanobot\n\n1. Set `tools.restrictToWorkspace` to true and `tools.exec.sandbox` to `bwrap` or `seatbelt` before giving it real accounts. Both are off by default\n2. Run 0.3.0 or later. Earlier versions carry the published SSRF flaw in web fetch (GHSA-vc5v-6vwm-wf9m)\n3. Keep `allowFrom` narrow on every channel and never set `[\"*\"]` on Email, which has no pairing\n4. Write secrets as `${VAR}` references in `~/.nanobot/config.json`. Plain values are stored in clear text\n5. Use `nanobot -m \"...\"` for a one-shot run, and keep `nanobot gateway` running for channels, schedules and heartbeat\n\n### Tomo\n\n1. Don't plan to call Tomo from another agent. It answers only the owner's iMessage, group chats it's added to and the iOS app.\n2. Tell the owner that adding Tomo to a group chat applies its terms to every participant.\n\n## Questions\n\n### Which is better for AI agents, nanobot or Tomo?\n\nnanobot scores 62.4 (B) on agent readiness against Tomo's 13.1 (F), and leads in every scored category.\n\n### Are nanobot and Tomo open source?\n\nnanobot is open source (MIT). No open-source release is listed for Tomo.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/nanobot-vs-tomo.json, and with the fewest tokens: https://www.anchorterminal.com/compare/nanobot-vs-tomo.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"nanobot\", \"b\": \"tomo\"}`. From a terminal: `anchor compare nanobot tomo`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/nanobot.json and https://www.anchorterminal.com/api/v1/tools/tomo.json\n\n## Other comparisons with nanobot or Tomo\n\n- [AstrBot vs nanobot](https://www.anchorterminal.com/compare/astrbot-vs-nanobot.md)\n- [CowAgent vs nanobot](https://www.anchorterminal.com/compare/cowagent-vs-nanobot.md)\n- [GAIA vs nanobot](https://www.anchorterminal.com/compare/gaia-vs-nanobot.md)\n- [Gemini Spark vs nanobot](https://www.anchorterminal.com/compare/gemini-spark-vs-nanobot.md)\n- [Grok Bot vs nanobot](https://www.anchorterminal.com/compare/grok-bot-vs-nanobot.md)\n- [Haven vs nanobot](https://www.anchorterminal.com/compare/haven-vs-nanobot.md)\n- [Hermes Agent vs nanobot](https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.md)\n- [Instinct vs nanobot](https://www.anchorterminal.com/compare/instinct-vs-nanobot.md)\n- [IronClaw vs nanobot](https://www.anchorterminal.com/compare/ironclaw-vs-nanobot.md)\n- [Leon vs nanobot](https://www.anchorterminal.com/compare/leon-vs-nanobot.md)\n- [Lindy vs nanobot](https://www.anchorterminal.com/compare/lindy-vs-nanobot.md)\n- [nanobot vs NanoClaw](https://www.anchorterminal.com/compare/nanobot-vs-nanoclaw.md)\n- [nanobot vs Dots](https://www.anchorterminal.com/compare/nanobot-vs-openai-dots.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [nanobot vs Poke](https://www.anchorterminal.com/compare/nanobot-vs-poke.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [nanobot vs ZeroClaw](https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.md)\n- [nanobot vs Zo Computer](https://www.anchorterminal.com/compare/nanobot-vs-zo-computer.md)\n- [CowAgent vs Tomo](https://www.anchorterminal.com/compare/cowagent-vs-tomo.md)\n- [GAIA vs Tomo](https://www.anchorterminal.com/compare/gaia-vs-tomo.md)\n- [Gemini Spark vs Tomo](https://www.anchorterminal.com/compare/gemini-spark-vs-tomo.md)\n- [Grok Bot vs Tomo](https://www.anchorterminal.com/compare/grok-bot-vs-tomo.md)\n- [Haven vs Tomo](https://www.anchorterminal.com/compare/haven-vs-tomo.md)\n- [Hermes Agent vs Tomo](https://www.anchorterminal.com/compare/hermes-agent-vs-tomo.md)\n- [Instinct vs Tomo](https://www.anchorterminal.com/compare/instinct-vs-tomo.md)\n- [IronClaw vs Tomo](https://www.anchorterminal.com/compare/ironclaw-vs-tomo.md)\n- [Leon vs Tomo](https://www.anchorterminal.com/compare/leon-vs-tomo.md)\n- [Lindy vs Tomo](https://www.anchorterminal.com/compare/lindy-vs-tomo.md)\n- [nanobot vs Natura tinyNature](https://www.anchorterminal.com/compare/nanobot-vs-natura.md)\n- [nanobot vs Pally](https://www.anchorterminal.com/compare/nanobot-vs-pally.md)\n- [nanobot vs Wajo (Fo)](https://www.anchorterminal.com/compare/nanobot-vs-wajo.md)\n- [NanoClaw vs Tomo](https://www.anchorterminal.com/compare/nanoclaw-vs-tomo.md)\n- [Natura tinyNature vs Tomo](https://www.anchorterminal.com/compare/natura-vs-tomo.md)\n- [Dots vs Tomo](https://www.anchorterminal.com/compare/openai-dots-vs-tomo.md)\n- [OpenClaw vs Tomo](https://www.anchorterminal.com/compare/openclaw-vs-tomo.md)\n- [Pally vs Tomo](https://www.anchorterminal.com/compare/pally-vs-tomo.md)\n- [Poke vs Tomo](https://www.anchorterminal.com/compare/poke-vs-tomo.md)\n- [QwenPaw vs Tomo](https://www.anchorterminal.com/compare/qwenpaw-vs-tomo.md)\n- [Tomo vs Wajo (Fo)](https://www.anchorterminal.com/compare/tomo-vs-wajo.md)\n- [Tomo vs ZeroClaw](https://www.anchorterminal.com/compare/tomo-vs-zeroclaw.md)\n- [Tomo vs Zo Computer](https://www.anchorterminal.com/compare/tomo-vs-zo-computer.md)\n- [nanobot vs Talorys](https://www.anchorterminal.com/compare/nanobot-vs-talorys.md)\n- [Talorys vs Tomo](https://www.anchorterminal.com/compare/talorys-vs-tomo.md)\n- [AstrBot vs Tomo](https://www.anchorterminal.com/compare/astrbot-vs-tomo.md)\n- [PicoClaw vs Tomo](https://www.anchorterminal.com/compare/picoclaw-vs-tomo.md)\n\n## Disclosure\n\n- Tomo competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "nanobot vs Tomo", "url": "" } ], "description": "nanobot scores 62.4 (B) to Tomo's 13.1 (F) for assistants that act in your accounts. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "nanobot B 62.4", "Tomo F 13.1", "scores" ], "h1": "nanobot vs Tomo", "image": "https://www.anchorterminal.com/assets/og/compare-nanobot-vs-tomo.png", "path": "/compare/nanobot-vs-tomo", "published": "2026-10-01", "section": "tools", "title": "nanobot vs Tomo for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/nanobot-vs-tomo" }, "tokens": { "markdown": 2600, "slim": 580 }, "version": 1 }