{ "data": { "a": { "slug": "openclaw", "name": "OpenClaw", "vendor": "OpenClaw Foundation", "vendorUrl": "https://openclaw.ai", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal AI assistant that runs as a Gateway on the owner's own computer and answers in WhatsApp, Telegram, Slack, iMessage and other chat apps, with desktop and mobile apps. The OpenClaw Foundation maintains it under the MIT licence.", "url": "https://www.anchorterminal.com/tools/openclaw", "markdownUrl": "https://www.anchorterminal.com/tools/openclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openclaw.json", "repo": "https://github.com/openclaw/openclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "openclaw" }, { "registry": "oci", "name": "ghcr.io/openclaw/openclaw" } ], "auth": "mixed", "authNotes": "No OpenClaw account exists. The owner supplies model provider API keys or signs in with a ChatGPT or Claude subscription, and adds a bot token, QR pairing or OAuth grant for each channel and account. Clients reach the Gateway with a token or password (`gateway.auth.mode`), or through a trusted proxy, and paired devices hold their own tokens. Operator scopes (`operator.read`, `operator.write`, `operator.admin` and others) apply to paired clients, but a shared-secret bearer token on `POST /tools/invoke` gets full operator access whatever scopes the caller sends (https://docs.openclaw.ai/gateway/tools-invoke-http-api; https://docs.openclaw.ai/gateway/operator-scopes).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with no paid tier, hosted service or subscription. The owner pays the model provider for usage, or nothing with a local model, plus any search, speech or media API they configure (https://github.com/openclaw/openclaw; https://docs.openclaw.ai/reference/api-usage-costs).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 391800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.openclaw.ai", "llmsTxt": "https://docs.openclaw.ai/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "foundation", "llms-txt", "docker", "typescript" ], "lastRelease": "2026-10-12", "graded": true, "anchor": { "graded": true, "score": 67.1, "grade": "B", "agentReady": false, "rank": 270, "ranked": true, "rankOf": 986, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 68 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -8, "negativeNotes": [ "2026-09-11. The project's security page and GitHub advisory list show 722 advisories published between 31 January and 11 September 2026, 14 critical, 249 high, 390 medium and 69 low, 39 with a CVE. The largest groups are Gateway auth and scopes (182) and exec, sandbox and approvals (160). The project says all 14 critical issues are fixed and disclosed and reports no known compromise of its infrastructure. Fixed and published, which decays the deduction, but the volume and the two areas affected bear directly on an assistant that holds its owner's accounts, -8. https://openclaw.ai/security; https://github.com/openclaw/openclaw/security/advisories" ], "verdict": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "strengths": [ "State, memory and credentials stay under `~/.openclaw` on the owner's machine, and the project sells no hosted service or paid tier", "Memory is plain Markdown files in the workspace, and `openclaw memory forget` removes what a named session contributed", "Four session permission modes (`read-only`, `guarded`, `workspace`, `full`), exec approvals and an optional Docker or Podman tool sandbox", "Unknown direct-message senders get a pairing code by default and are ignored until the owner approves them", "Telemetry is documented field by field. Feature statistics are opt-in and `update.checkOnStart: false` stops every automatic request", "13 stable releases in the 90 days to 12 October 2026, with npm provenance attestations on the published package" ], "weaknesses": [ "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off", "Agents with the message tool can send across conversations and channel providers by default, with no approval step for a send", "722 advisories published between 31 January and 11 September 2026, 14 critical and 249 high, per the project's own security page", "Credentials sit in files and SQLite databases under `~/.openclaw`, protected by file permissions unless the owner configures a secret provider", "The project's own maturity scorecard rates the product at 68 per cent, labelled Alpha", "The privacy policy covers the mobile apps, the Chrome extension and website analytics, and says it does not cover the Gateway" ], "agentNotes": [ "Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval", "Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default", "Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation", "Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it", "Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.1 } ], "editorialScores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 82 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://openclaw.ai/install.sh | bash # or: npm install -g openclaw@latest --allow-scripts=openclaw \u0026\u0026 openclaw onboard --install-daemon" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/openclaw" }, "area": "frameworks", "provenance": { "legalEntity": "OpenClaw Foundation", "domain": "openclaw.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/openclaw/openclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The README and the `LICENSE` file name the OpenClaw Foundation, described as an independent 501(c)(3). Its site at www.openclaw.org gave no address, registration number, board or filings on the page we read.", "No terms of service were found for the software, so the MIT licence stands in.", "The privacy policy at openclaw.ai/privacy, effective 2 August 2026, covers the iOS and Android apps, the Chrome extension and website analytics, and says it does not cover the gateway, server or AI provider the owner connects. It is not linked here for that reason.", "openclaw.ai/.well-known/security.txt returned 404 on 12 October 2026. The repository has a SECURITY.md with private GitHub reporting and security@openclaw.ai.", "There is no hosted endpoint. A Gateway answers on its owner's own host. The daily update check goes to telemetry.openclaw.ai.", "The domain registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openclaw.json" }, "answer": "OpenClaw scores 67.1 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories.", "b": { "slug": "qwenpaw", "name": "QwenPaw", "vendor": "AgentScope", "vendorUrl": "https://qwenpaw.agentscope.io", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal assistant from the AgentScope team that the owner runs on their own machine or server. It answers on chat apps, runs scheduled and proactive tasks, manages a mailbox over IMAP and SMTP, and keeps memory as Markdown files.", "url": "https://www.anchorterminal.com/tools/qwenpaw", "markdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/qwenpaw.json", "repo": "https://github.com/agentscope-ai/QwenPaw", "license": "Apache-2.0", "transports": [ "http", "stdio" ], "packages": [ { "registry": "pypi", "name": "qwenpaw" }, { "registry": "oci", "name": "agentscope/qwenpaw" } ], "auth": "none", "authNotes": "No account. The Console and API bind to 127.0.0.1:8088 with login off by default. `QWENPAW_AUTH_ENABLED=true` adds one admin account with a salted SHA-256 password hash and a signed token valid for seven days, and requests from localhost skip it. Each channel takes its own bot credentials, and the mailbox takes an IMAP and SMTP authorisation code or app password.", "pricing": "free", "pricingNotes": "Free under Apache-2.0 with nothing to buy. Model usage is billed by whichever provider the owner configures, and local models through llama.cpp, Ollama or LM Studio need no key. The README describes a hosted deployment on AgentScope Platform as free. That platform's pages are script-drawn and its terms and limits were not read (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs source or the dependency list (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 35621, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://qwenpaw.agentscope.io/docs", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "docker", "desktop-app", "mcp", "telemetry-default-on" ], "lastRelease": "2026-09-11", "graded": true, "anchor": { "graded": true, "score": 62.2, "grade": "B", "agentReady": false, "rank": 454, "ranked": true, "rankOf": 986, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 73, "payments": 60, "reliability": 70, "schema": 68, "security": 60, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-09-11. Version 2.2.1 began enforcing each MCP server's tool allowlist on the agent runtime path (commit f2a292d of 4 September, #7504). Before it, a tool the owner had disabled on an MCP client could still be invoked by the agent. Fixed and listed in the release notes, with no security advisory, -2. https://github.com/agentscope-ai/QwenPaw/pull/7504", "2026-09-03. Version 2.2.0 blocked shell line-continuation variants that bypassed sensitive-path protections (#7472). Fixed and listed in the release notes, with no security advisory, -1. https://github.com/agentscope-ai/QwenPaw/blob/main/website/public/release-notes/v2.2.0.md" ], "verdict": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.", "bestFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.", "strengths": [ "New mail driver cards default to the `ask` policy, and automatic mail handling may not call `delete_message` or write to unknown recipients", "Kernel sandbox on macOS, Linux and Windows, with a documented list of constraints each backend does not enforce", "Model keys, mail credentials and environment secrets are encrypted with a master key held in the OS keychain or a 0600 file", "Memory is plain Markdown in the agent workspace that the owner can read, edit and remove", "Four stable releases in the 90 days to 12 October 2026, each with dated release notes" ], "weaknesses": [ "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs", "The default approval level AUTO asks only for tool calls a guard rule flags, and `/proactive` skips approval prompts entirely", "Channel direct-message and group policies default to `open`, and Console login is off by default", "No privacy policy, terms of service or security.txt on qwenpaw.agentscope.io, and no published GitHub security advisory", "Inside containers the sandbox falls back to `mode=none`, which the docs say enforces no isolation", "671 open issues and 381 open pull requests on 12 October 2026, and the Tests workflow on main had not completed a run since 30 September" ], "agentNotes": [ "Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking", "Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags", "Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`", "Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then", "Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.2 } ], "editorialScores": { "ergonomics": 67, "maintenance": 73, "payments": 60, "reliability": 70, "schema": 68, "security": 60, "transparency": 58 }, "provenanceScore": 53 }, "connect": { "install": "pip install qwenpaw \u0026\u0026 qwenpaw init --defaults \u0026\u0026 qwenpaw app # Python 3.11 to 3.13; or: docker pull agentscope/qwenpaw:latest", "http": "curl -X POST http://localhost:8088/api/console/chat -H \"Content-Type: application/json\" -H \"X-Agent-Id: default\" -d '{\"input\": [...]}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/qwenpaw" }, "area": "frameworks", "provenance": { "legalEntity": "Qwenpaw PRIVATE LIMITED", "domain": "agentscope.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://qwenpaw.agentscope.io/release-notes", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer in the repository's website source reads © 2026 Qwenpaw PRIVATE LIMITED. The LICENSE file names The QwenPaw Authors, and the README credits the AgentScope team.", "SECURITY.md sends vulnerability reports to the Alibaba Security Response Centre. We found no other first-hand statement of ownership by Alibaba.", "The site links a Usage Policy dated 26 August 2026 and no terms of service or privacy policy, so both links are left out and the Apache-2.0 licence stands in.", "qwenpaw.agentscope.io answered 404 for robots.txt, llms.txt and /.well-known/security.txt on 12 October 2026.", "No hosted endpoint is graded. A self-hosted instance answers on its owner's own host. We did not look up the domain's registration date." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/qwenpaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "OpenClaw Foundation", "b": "AgentScope", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-12", "b": "2026-09-11", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "392k stars", "b": "36k stars", "name": "Popularity" } ], "faq": [ { "answer": "OpenClaw scores 67.1 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, OpenClaw or QwenPaw?" }, { "answer": "Yes. OpenClaw is open source (MIT). QwenPaw is open source (Apache-2.0).", "question": "Are OpenClaw and QwenPaw open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 75 against 70", "Schema \u0026 documentation, 84 against 68", "Agent ergonomics, 77 against 67", "Security \u0026 auth, 74 against 60", "Maintenance \u0026 community, 86 against 73", "Transparency \u0026 trust, 68 against 56" ], "also": null, "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "slug": "openclaw", "watchFor": "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off" }, { "aheadOn": null, "also": [ "No key needed to call it", "Runs on your own machine" ], "goodFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.", "slug": "qwenpaw", "watchFor": "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw.json", "title": "AstrBot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.json", "title": "AstrBot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw.json", "title": "CowAgent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.json", "title": "CowAgent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-openclaw.json", "title": "GAIA vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.json", "title": "GAIA vs QwenPaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.json", "title": "Gemini Spark vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.json", "title": "Gemini Spark vs QwenPaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.json", "title": "Grok Bot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.json", "title": "Grok Bot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-openclaw.json", "title": "Haven vs OpenClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw.json", "title": "Haven vs QwenPaw", "url": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.json", "title": "Hermes Agent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.json", "title": "Hermes Agent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-openclaw.json", "title": "Instinct vs OpenClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.json", "title": "Instinct vs QwenPaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.json", "title": "IronClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.json", "title": "IronClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openclaw.json", "title": "Leon vs OpenClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw.json", "title": "Leon vs QwenPaw", "url": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-openclaw.json", "title": "Lindy vs OpenClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.json", "title": "Lindy vs QwenPaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json", "title": "nanobot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.json", "title": "NanoClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.json", "title": "NanoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.json", "title": "Dots vs OpenClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.json", "title": "Dots vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-poke.json", "title": "OpenClaw vs Poke", "url": "https://www.anchorterminal.com/compare/openclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.json", "title": "OpenClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.json", "title": "OpenClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json", "title": "PicoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw.json", "title": "Poke vs QwenPaw", "url": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.json", "title": "QwenPaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.json", "title": "QwenPaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer" } ], "scores": [ { "by": 5, "edge": "openclaw", "key": "reliability", "name": "Reliability", "openclaw": 75, "qwenpaw": 70, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 16, "edge": "openclaw", "key": "schema", "name": "Schema \u0026 documentation", "openclaw": 84, "qwenpaw": 68, "weight": 13 }, { "by": 10, "edge": "openclaw", "key": "ergonomics", "name": "Agent ergonomics", "openclaw": 77, "qwenpaw": 67, "weight": 13 }, { "by": 14, "edge": "openclaw", "key": "security", "name": "Security \u0026 auth", "openclaw": 74, "qwenpaw": 60, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "openclaw": 60, "qwenpaw": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 13, "edge": "openclaw", "key": "maintenance", "name": "Maintenance \u0026 community", "openclaw": 86, "qwenpaw": 73, "weight": 7 }, { "by": 12, "edge": "openclaw", "key": "transparency", "name": "Transparency \u0026 trust", "openclaw": 68, "qwenpaw": 56, "weight": 7 } ], "summary": "OpenClaw scores 67.1 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories. Both do assistant proactive.", "verdicts": { "openclaw": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.", "qwenpaw": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw", "json": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.md", "slim": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.min.md" }, "markdown": "OpenClaw scores 67.1 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories. Both do assistant proactive.\n\n- OpenClaw: grade B, 67.1/100, rank #270 of 986. Markdown https://www.anchorterminal.com/tools/openclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/openclaw.json\n- QwenPaw: grade B, 62.2/100, rank #454 of 986. Markdown https://www.anchorterminal.com/tools/qwenpaw.md · JSON https://www.anchorterminal.com/api/v1/tools/qwenpaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### OpenClaw (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.\n\nAhead on:\n- Reliability, 75 against 70\n- Schema \u0026 documentation, 84 against 68\n- Agent ergonomics, 77 against 67\n- Security \u0026 auth, 74 against 60\n- Maintenance \u0026 community, 86 against 73\n- Transparency \u0026 trust, 68 against 56\n\nWatch for: Without configuration the default is full access. Host exec runs with no approval and sandboxing is off\n\n### QwenPaw (B)\n\nGood for: One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n\nWatch for: Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs\n\n\n## Score by category\n\n| Category | Weight | OpenClaw | QwenPaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 70 | OpenClaw +5 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 84 | 68 | OpenClaw +16 |\n| Agent ergonomics | 13% (16.2 this run) | 77 | 67 | OpenClaw +10 |\n| Security \u0026 auth | 14% (17.5 this run) | 74 | 60 | OpenClaw +14 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 86 | 73 | OpenClaw +13 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 68 | 56 | OpenClaw +12 |\n| Negative events | ≤15 | -8 | -3 | |\n| **Total** | | **67.1 · B** | **62.2 · B** | |\n\n## Facts side by side\n\n| Fact | OpenClaw | QwenPaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | OpenClaw Foundation | AgentScope |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | HTTP, stdio |\n| Auth | OAuth or key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-12 | 2026-09-11 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 392k stars | 36k stars |\n\n## Verdicts\n\n**OpenClaw.** Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.\n\n**QwenPaw.** Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.\n\n## Before you call either\n\n### OpenClaw\n\n1. Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval\n2. Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default\n3. Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation\n4. Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it\n5. Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access\n\n### QwenPaw\n\n1. Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking\n2. Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags\n3. Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`\n4. Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then\n5. Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling\n\n## Questions\n\n### Which is better for AI agents, OpenClaw or QwenPaw?\n\nOpenClaw scores 67.1 (B) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories.\n\n### Are OpenClaw and QwenPaw open source?\n\nYes. OpenClaw is open source (MIT). QwenPaw is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"openclaw\", \"b\": \"qwenpaw\"}`. From a terminal: `anchor compare openclaw qwenpaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/openclaw.json and https://www.anchorterminal.com/api/v1/tools/qwenpaw.json\n\n## Other comparisons with OpenClaw or QwenPaw\n\n- [AstrBot vs OpenClaw](https://www.anchorterminal.com/compare/astrbot-vs-openclaw.md)\n- [AstrBot vs QwenPaw](https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.md)\n- [CowAgent vs OpenClaw](https://www.anchorterminal.com/compare/cowagent-vs-openclaw.md)\n- [CowAgent vs QwenPaw](https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.md)\n- [GAIA vs OpenClaw](https://www.anchorterminal.com/compare/gaia-vs-openclaw.md)\n- [GAIA vs QwenPaw](https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.md)\n- [Gemini Spark vs OpenClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.md)\n- [Gemini Spark vs QwenPaw](https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.md)\n- [Grok Bot vs OpenClaw](https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.md)\n- [Grok Bot vs QwenPaw](https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.md)\n- [Haven vs OpenClaw](https://www.anchorterminal.com/compare/haven-vs-openclaw.md)\n- [Haven vs QwenPaw](https://www.anchorterminal.com/compare/haven-vs-qwenpaw.md)\n- [Hermes Agent vs OpenClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.md)\n- [Hermes Agent vs QwenPaw](https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.md)\n- [Instinct vs OpenClaw](https://www.anchorterminal.com/compare/instinct-vs-openclaw.md)\n- [Instinct vs QwenPaw](https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.md)\n- [IronClaw vs OpenClaw](https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.md)\n- [IronClaw vs QwenPaw](https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.md)\n- [Leon vs OpenClaw](https://www.anchorterminal.com/compare/leon-vs-openclaw.md)\n- [Leon vs QwenPaw](https://www.anchorterminal.com/compare/leon-vs-qwenpaw.md)\n- [Lindy vs OpenClaw](https://www.anchorterminal.com/compare/lindy-vs-openclaw.md)\n- [Lindy vs QwenPaw](https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [NanoClaw vs OpenClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.md)\n- [NanoClaw vs QwenPaw](https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.md)\n- [Dots vs OpenClaw](https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.md)\n- [Dots vs QwenPaw](https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [OpenClaw vs Poke](https://www.anchorterminal.com/compare/openclaw-vs-poke.md)\n- [OpenClaw vs ZeroClaw](https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.md)\n- [OpenClaw vs Zo Computer](https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [Poke vs QwenPaw](https://www.anchorterminal.com/compare/poke-vs-qwenpaw.md)\n- [QwenPaw vs ZeroClaw](https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.md)\n- [QwenPaw vs Zo Computer](https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "OpenClaw vs QwenPaw", "url": "" } ], "description": "OpenClaw scores 67.1 (B) to QwenPaw's 62.2 (B) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "OpenClaw B 67.1", "QwenPaw B 62.2", "scores" ], "h1": "OpenClaw vs QwenPaw", "image": "https://www.anchorterminal.com/assets/og/compare-openclaw-vs-qwenpaw.png", "path": "/compare/openclaw-vs-qwenpaw", "published": "2026-10-01", "section": "tools", "title": "OpenClaw vs QwenPaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw" }, "tokens": { "markdown": 2550, "slim": 530 }, "version": 1 }