{ "data": { "a": { "slug": "openclaw", "name": "OpenClaw", "vendor": "OpenClaw Foundation", "vendorUrl": "https://openclaw.ai", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal AI assistant that runs as a Gateway on the owner's own computer and answers in WhatsApp, Telegram, Slack, iMessage and other chat apps, with desktop and mobile apps. The OpenClaw Foundation maintains it under the MIT licence.", "url": "https://www.anchorterminal.com/tools/openclaw", "markdownUrl": "https://www.anchorterminal.com/tools/openclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openclaw.json", "repo": "https://github.com/openclaw/openclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "openclaw" }, { "registry": "oci", "name": "ghcr.io/openclaw/openclaw" } ], "auth": "mixed", "authNotes": "No OpenClaw account exists. The owner supplies model provider API keys or signs in with a ChatGPT or Claude subscription, and adds a bot token, QR pairing or OAuth grant for each channel and account. Clients reach the Gateway with a token or password (`gateway.auth.mode`), or through a trusted proxy, and paired devices hold their own tokens. Operator scopes (`operator.read`, `operator.write`, `operator.admin` and others) apply to paired clients, but a shared-secret bearer token on `POST /tools/invoke` gets full operator access whatever scopes the caller sends (https://docs.openclaw.ai/gateway/tools-invoke-http-api; https://docs.openclaw.ai/gateway/operator-scopes).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with no paid tier, hosted service or subscription. The owner pays the model provider for usage, or nothing with a local model, plus any search, speech or media API they configure (https://github.com/openclaw/openclaw; https://docs.openclaw.ai/reference/api-usage-costs).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 391800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.openclaw.ai", "llmsTxt": "https://docs.openclaw.ai/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "foundation", "llms-txt", "docker", "typescript" ], "lastRelease": "2026-10-12", "graded": true, "anchor": { "graded": true, "score": 67.1, "grade": "B", "agentReady": false, "rank": 270, "ranked": true, "rankOf": 986, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 68 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -8, "negativeNotes": [ "2026-09-11. The project's security page and GitHub advisory list show 722 advisories published between 31 January and 11 September 2026, 14 critical, 249 high, 390 medium and 69 low, 39 with a CVE. The largest groups are Gateway auth and scopes (182) and exec, sandbox and approvals (160). The project says all 14 critical issues are fixed and disclosed and reports no known compromise of its infrastructure. Fixed and published, which decays the deduction, but the volume and the two areas affected bear directly on an assistant that holds its owner's accounts, -8. https://openclaw.ai/security; https://github.com/openclaw/openclaw/security/advisories" ], "verdict": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "strengths": [ "State, memory and credentials stay under `~/.openclaw` on the owner's machine, and the project sells no hosted service or paid tier", "Memory is plain Markdown files in the workspace, and `openclaw memory forget` removes what a named session contributed", "Four session permission modes (`read-only`, `guarded`, `workspace`, `full`), exec approvals and an optional Docker or Podman tool sandbox", "Unknown direct-message senders get a pairing code by default and are ignored until the owner approves them", "Telemetry is documented field by field. Feature statistics are opt-in and `update.checkOnStart: false` stops every automatic request", "13 stable releases in the 90 days to 12 October 2026, with npm provenance attestations on the published package" ], "weaknesses": [ "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off", "Agents with the message tool can send across conversations and channel providers by default, with no approval step for a send", "722 advisories published between 31 January and 11 September 2026, 14 critical and 249 high, per the project's own security page", "Credentials sit in files and SQLite databases under `~/.openclaw`, protected by file permissions unless the owner configures a secret provider", "The project's own maturity scorecard rates the product at 68 per cent, labelled Alpha", "The privacy policy covers the mobile apps, the Chrome extension and website analytics, and says it does not cover the Gateway" ], "agentNotes": [ "Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval", "Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default", "Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation", "Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it", "Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.1 } ], "editorialScores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 82 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://openclaw.ai/install.sh | bash # or: npm install -g openclaw@latest --allow-scripts=openclaw \u0026\u0026 openclaw onboard --install-daemon" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/openclaw" }, "area": "frameworks", "provenance": { "legalEntity": "OpenClaw Foundation", "domain": "openclaw.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/openclaw/openclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The README and the `LICENSE` file name the OpenClaw Foundation, described as an independent 501(c)(3). Its site at www.openclaw.org gave no address, registration number, board or filings on the page we read.", "No terms of service were found for the software, so the MIT licence stands in.", "The privacy policy at openclaw.ai/privacy, effective 2 August 2026, covers the iOS and Android apps, the Chrome extension and website analytics, and says it does not cover the gateway, server or AI provider the owner connects. It is not linked here for that reason.", "openclaw.ai/.well-known/security.txt returned 404 on 12 October 2026. The repository has a SECURITY.md with private GitHub reporting and security@openclaw.ai.", "There is no hosted endpoint. A Gateway answers on its owner's own host. The daily update check goes to telemetry.openclaw.ai.", "The domain registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openclaw.json" }, "answer": "ZeroClaw scores 70.2 (BB) on agent readiness against OpenClaw's 67.1 (B), and leads in 1 of 7 scored categories. OpenClaw leads on agent ergonomics and maintenance \u0026 community.", "b": { "slug": "zeroclaw", "name": "ZeroClaw", "vendor": "ZeroClaw Labs", "vendorUrl": "https://www.zeroclaw.com", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal AI assistant from ZeroClaw Labs, shipped as one Rust binary the owner runs. It answers on chat, email and voice channels, calls tools and MCP servers, and keeps memory in local SQLite.", "url": "https://www.anchorterminal.com/tools/zeroclaw", "markdownUrl": "https://www.anchorterminal.com/tools/zeroclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/zeroclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/zeroclaw.json", "repo": "https://github.com/zeroclaw-labs/zeroclaw", "license": "MIT OR Apache-2.0", "transports": [], "packages": [ { "registry": "oci", "name": "ghcr.io/zeroclaw-labs/zeroclaw" } ], "auth": "none", "authNotes": "No account with the vendor. Model keys, bot tokens and mail passwords go in `~/.zeroclaw/config.toml` as encrypted secret fields, set through `zeroclaw config set`, the dashboard or the terminal UI. OpenAI Codex and Claude subscription tokens are accepted in place of API keys. Gateway clients pair first and then send `Authorization: Bearer \u003ctoken\u003e`, with token hashes kept in config (https://github.com/zeroclaw-labs/zeroclaw/blob/master/docs/book/src/security/authentication.md).", "pricing": "free", "pricingNotes": "Free under MIT or Apache-2.0, with no subscription and no hosted seat (https://www.zeroclaw.com/). The owner pays the model provider, or nothing with a local model. ZeroRouter, the vendor's hosted beta model gateway, is optional and its prices were not read (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source at commit 6c0b1f9 (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 32965, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.zeroclaw.com/master/en/introduction.html", "llmsTxt": "https://www.zeroclaw.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "assistant.accounts", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "rust", "mit", "apache-2.0", "pre-1.0", "no-telemetry", "mcp-client", "approvals", "acp", "docker", "llms-txt" ], "lastRelease": "2026-09-05", "graded": true, "anchor": { "graded": true, "score": 70.2, "grade": "BB", "agentReady": true, "rank": 161, "ranked": true, "rankOf": 986, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 80, "payments": 60, "reliability": 74, "schema": 82, "security": 76, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-09-05. GHSA-93f6-34w8-5g98 (high), an unvalidated `wasm_path` let `zeroclaw plugin install` write an attacker-controlled file outside the plugins directory in 0.8.4 and earlier. Fixed in 0.8.5 and published the same day, inside six months, -2. https://github.com/zeroclaw-labs/zeroclaw/security/advisories/GHSA-93f6-34w8-5g98", "2026-04-01. The project lead wrote that a maintainer's AI automation merged pull requests that should not have gone through and that GitHub took enforcement action on the organisation. Disclosed, the maintainer removed and merge access tightened, over six months old, -1. https://www.zeroclaw.com/blog/community-and-stability" ], "verdict": "Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms.", "bestFor": "One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.", "strengths": [ "Supervised mode is the default. Tools outside an eleven-item read-only and fetch list prompt the owner, and an unanswered prompt is a denial after 120 seconds", "Approval prompts arrive on the channel in use, and `approval_route` can send them to a separate approver channel that denies when unreachable", "Channel secrets and provider keys are encrypted with ChaCha20-Poly1305 in `config.toml`, with the key in `.secret_key` at mode 0600", "An empty peer set denies every inbound sender, and the gateway binds 127.0.0.1 with pairing required by default", "Three tagged releases in the 90 days to 12 October 2026, each with a Breaking Changes section, and CI passing on master on 11 October" ], "weaknesses": [ "The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable", "No privacy policy, terms or security.txt on zeroclaw.com, and the home page links none", "`web_fetch`, `web_search_tool` and `browser_open` run without approval by default, and sandboxed tools keep full network egress", "GHSA-93f6-34w8-5g98 (high) let a plugin install write outside the plugins directory in 0.8.4 and earlier, fixed in 0.8.5 on 5 September 2026", "Version 0.8.5 is pre-1.0, patch releases carry breaking changes, and 576 issues and 384 pull requests were open on 12 October 2026" ], "agentNotes": [ "Keep `[risk_profiles.\u003calias\u003e] level = \"supervised\"`. `full` runs every tool not listed in `always_ask`, and the YOLO preset removes the sandbox and path rules too", "Add sending and account tools such as `send_via`, `google_workspace` and `http_request` to `always_ask` so a session-level Always grant cannot skip the prompt", "List senders in `[peer_groups.\u003cname\u003e] external_peers`. `[\"*\"]` accepts anyone on that channel", "Set `[web_fetch].allowed_domains` and `[http_request].allowed_domains`. Fetches run unprompted and the OS sandbox does not block egress", "Run one-shot tasks with `zeroclaw agent -a \u003calias\u003e -m \"\u003ctask\u003e\"`. A cron or webhook turn has no prompt, so shell calls fall to the command policy" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.2 } ], "editorialScores": { "ergonomics": 72, "maintenance": 80, "payments": 60, "reliability": 74, "schema": 82, "security": 76, "transparency": 74 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://raw.githubusercontent.com/zeroclaw-labs/zeroclaw/master/install.sh | sh # or: brew install zeroclaw", "headless": { "command": "zeroclaw agent -a \u003calias\u003e -m \"$TASK\"", "setup": "zeroclaw quickstart" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/zeroclaw" }, "area": "frameworks", "provenance": { "legalEntity": "ZeroClaw Labs", "domain": "zeroclaw.com", "domainRegistered": "2026-03-02", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/zeroclaw-labs/zeroclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The NOTICE file reads Copyright 2025 ZeroClaw Labs and the blog signs posts as CEO, ZeroClaw Labs. No company form, registration or address was found on the site or in the repository.", "The home page of www.zeroclaw.com links no terms and no privacy policy, so both fields are empty and the MIT or Apache-2.0 licence stands in.", "www.zeroclaw.com/.well-known/security.txt answered 404 on 12 October 2026. SECURITY.md asks for GitHub private vulnerability reporting and the README gives security@zeroclaw.dev.", "RDAP gives zeroclaw.com a registration date of 2026-03-02, registrar Atom.com Domains LLC. The repository was created on 13 February 2026.", "There is no hosted endpoint for the assistant. A gateway answers on its owner's own host." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/zeroclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "OpenClaw Foundation", "b": "ZeroClaw Labs", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT OR Apache-2.0", "name": "Licence" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-12", "b": "2026-09-05", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "392k stars", "b": "33k stars", "name": "Popularity" } ], "faq": [ { "answer": "ZeroClaw scores 70.2 (BB) on agent readiness against OpenClaw's 67.1 (B), and leads in 1 of 7 scored categories. OpenClaw leads on agent ergonomics and maintenance \u0026 community.", "question": "Which is better for AI agents, OpenClaw or ZeroClaw?" }, { "answer": "Yes. OpenClaw is open source (MIT). ZeroClaw is open source (MIT OR Apache-2.0).", "question": "Are OpenClaw and ZeroClaw open source?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 77 against 72", "Maintenance \u0026 community, 86 against 80" ], "also": null, "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "slug": "openclaw", "watchFor": "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off" }, { "aheadOn": null, "also": [ "Agent-ready, a grade of BB or better", "No key needed to call it", "Free to start without a card" ], "goodFor": "One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.", "slug": "zeroclaw", "watchFor": "The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw.json", "title": "AstrBot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.json", "title": "AstrBot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw.json", "title": "CowAgent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.json", "title": "CowAgent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-openclaw.json", "title": "GAIA vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.json", "title": "GAIA vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.json", "title": "Gemini Spark vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw.json", "title": "Gemini Spark vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.json", "title": "Grok Bot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw.json", "title": "Grok Bot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-openclaw.json", "title": "Haven vs OpenClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-zeroclaw.json", "title": "Haven vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.json", "title": "Hermes Agent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.json", "title": "Hermes Agent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-openclaw.json", "title": "Instinct vs OpenClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-zeroclaw.json", "title": "Instinct vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.json", "title": "IronClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.json", "title": "IronClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openclaw.json", "title": "Leon vs OpenClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw.json", "title": "Leon vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-openclaw.json", "title": "Lindy vs OpenClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-zeroclaw.json", "title": "Lindy vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.json", "title": "nanobot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.json", "title": "NanoClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw.json", "title": "NanoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.json", "title": "Dots vs OpenClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw.json", "title": "Dots vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-poke.json", "title": "OpenClaw vs Poke", "url": "https://www.anchorterminal.com/compare/openclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json", "title": "OpenClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.json", "title": "OpenClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.json", "title": "PicoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-zeroclaw.json", "title": "Poke vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/poke-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.json", "title": "QwenPaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer.json", "title": "ZeroClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer" } ], "scores": [ { "by": 1, "edge": "openclaw", "key": "reliability", "name": "Reliability", "openclaw": 75, "weight": 16, "zeroclaw": 74 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "edge": "openclaw", "key": "schema", "name": "Schema \u0026 documentation", "openclaw": 84, "weight": 13, "zeroclaw": 82 }, { "by": 5, "edge": "openclaw", "key": "ergonomics", "name": "Agent ergonomics", "openclaw": 77, "weight": 13, "zeroclaw": 72 }, { "by": 2, "edge": "zeroclaw", "key": "security", "name": "Security \u0026 auth", "openclaw": 74, "weight": 14, "zeroclaw": 76 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "openclaw": 60, "weight": 10, "zeroclaw": 60 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 6, "edge": "openclaw", "key": "maintenance", "name": "Maintenance \u0026 community", "openclaw": 86, "weight": 7, "zeroclaw": 80 }, { "by": 4, "edge": "openclaw", "key": "transparency", "name": "Transparency \u0026 trust", "openclaw": 68, "weight": 7, "zeroclaw": 64 } ], "summary": "ZeroClaw scores 70.2 (BB) on agent readiness against OpenClaw's 67.1 (B), and leads in 1 of 7 scored categories. OpenClaw leads on agent ergonomics and maintenance \u0026 community. Both do assistant proactive.", "verdicts": { "openclaw": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.", "zeroclaw": "Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw", "json": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.md", "slim": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.min.md" }, "markdown": "ZeroClaw scores 70.2 (BB) on agent readiness against OpenClaw's 67.1 (B), and leads in 1 of 7 scored categories. OpenClaw leads on agent ergonomics and maintenance \u0026 community. Both do assistant proactive.\n\n- OpenClaw: grade B, 67.1/100, rank #270 of 986. Markdown https://www.anchorterminal.com/tools/openclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/openclaw.json\n- ZeroClaw: grade BB, 70.2/100, rank #161 of 986. Markdown https://www.anchorterminal.com/tools/zeroclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/zeroclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### OpenClaw (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.\n\nAhead on:\n- Agent ergonomics, 77 against 72\n- Maintenance \u0026 community, 86 against 80\n\nWatch for: Without configuration the default is full access. Host exec runs with no approval and sandboxing is off\n\n### ZeroClaw (BB)\n\nGood for: One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No key needed to call it\n- Free to start without a card\n\nWatch for: The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable\n\n\n## Score by category\n\n| Category | Weight | OpenClaw | ZeroClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 74 | OpenClaw +1 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 84 | 82 | OpenClaw +2 |\n| Agent ergonomics | 13% (16.2 this run) | 77 | 72 | OpenClaw +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 74 | 76 | ZeroClaw +2 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 86 | 80 | OpenClaw +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 68 | 64 | OpenClaw +4 |\n| Negative events | ≤15 | -8 | -3 | |\n| **Total** | | **67.1 · B** | **70.2 · BB** | |\n\n## Facts side by side\n\n| Fact | OpenClaw | ZeroClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | OpenClaw Foundation | ZeroClaw Labs |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT OR Apache-2.0 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-10-12 | 2026-09-05 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 392k stars | 33k stars |\n\n## Verdicts\n\n**OpenClaw.** Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.\n\n**ZeroClaw.** Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms.\n\n## Before you call either\n\n### OpenClaw\n\n1. Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval\n2. Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default\n3. Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation\n4. Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it\n5. Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access\n\n### ZeroClaw\n\n1. Keep `[risk_profiles.\u003calias\u003e] level = \"supervised\"`. `full` runs every tool not listed in `always_ask`, and the YOLO preset removes the sandbox and path rules too\n2. Add sending and account tools such as `send_via`, `google_workspace` and `http_request` to `always_ask` so a session-level Always grant cannot skip the prompt\n3. List senders in `[peer_groups.\u003cname\u003e] external_peers`. `[\"*\"]` accepts anyone on that channel\n4. Set `[web_fetch].allowed_domains` and `[http_request].allowed_domains`. Fetches run unprompted and the OS sandbox does not block egress\n5. Run one-shot tasks with `zeroclaw agent -a \u003calias\u003e -m \"\u003ctask\u003e\"`. A cron or webhook turn has no prompt, so shell calls fall to the command policy\n\n## Questions\n\n### Which is better for AI agents, OpenClaw or ZeroClaw?\n\nZeroClaw scores 70.2 (BB) on agent readiness against OpenClaw's 67.1 (B), and leads in 1 of 7 scored categories. OpenClaw leads on agent ergonomics and maintenance \u0026 community.\n\n### Are OpenClaw and ZeroClaw open source?\n\nYes. OpenClaw is open source (MIT). ZeroClaw is open source (MIT OR Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"openclaw\", \"b\": \"zeroclaw\"}`. From a terminal: `anchor compare openclaw zeroclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/openclaw.json and https://www.anchorterminal.com/api/v1/tools/zeroclaw.json\n\n## Other comparisons with OpenClaw or ZeroClaw\n\n- [AstrBot vs OpenClaw](https://www.anchorterminal.com/compare/astrbot-vs-openclaw.md)\n- [AstrBot vs ZeroClaw](https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.md)\n- [CowAgent vs OpenClaw](https://www.anchorterminal.com/compare/cowagent-vs-openclaw.md)\n- [CowAgent vs ZeroClaw](https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.md)\n- [GAIA vs OpenClaw](https://www.anchorterminal.com/compare/gaia-vs-openclaw.md)\n- [GAIA vs ZeroClaw](https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.md)\n- [Gemini Spark vs OpenClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.md)\n- [Gemini Spark vs ZeroClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw.md)\n- [Grok Bot vs OpenClaw](https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.md)\n- [Grok Bot vs ZeroClaw](https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw.md)\n- [Haven vs OpenClaw](https://www.anchorterminal.com/compare/haven-vs-openclaw.md)\n- [Haven vs ZeroClaw](https://www.anchorterminal.com/compare/haven-vs-zeroclaw.md)\n- [Hermes Agent vs OpenClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.md)\n- [Hermes Agent vs ZeroClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.md)\n- [Instinct vs OpenClaw](https://www.anchorterminal.com/compare/instinct-vs-openclaw.md)\n- [Instinct vs ZeroClaw](https://www.anchorterminal.com/compare/instinct-vs-zeroclaw.md)\n- [IronClaw vs OpenClaw](https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.md)\n- [IronClaw vs ZeroClaw](https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.md)\n- [Leon vs OpenClaw](https://www.anchorterminal.com/compare/leon-vs-openclaw.md)\n- [Leon vs ZeroClaw](https://www.anchorterminal.com/compare/leon-vs-zeroclaw.md)\n- [Lindy vs OpenClaw](https://www.anchorterminal.com/compare/lindy-vs-openclaw.md)\n- [Lindy vs ZeroClaw](https://www.anchorterminal.com/compare/lindy-vs-zeroclaw.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [nanobot vs ZeroClaw](https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.md)\n- [NanoClaw vs OpenClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.md)\n- [NanoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw.md)\n- [Dots vs OpenClaw](https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.md)\n- [Dots vs ZeroClaw](https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [OpenClaw vs Poke](https://www.anchorterminal.com/compare/openclaw-vs-poke.md)\n- [OpenClaw vs QwenPaw](https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.md)\n- [OpenClaw vs Zo Computer](https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.md)\n- [PicoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.md)\n- [Poke vs ZeroClaw](https://www.anchorterminal.com/compare/poke-vs-zeroclaw.md)\n- [QwenPaw vs ZeroClaw](https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.md)\n- [ZeroClaw vs Zo Computer](https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "OpenClaw vs ZeroClaw", "url": "" } ], "description": "ZeroClaw scores 70.2 (BB) to OpenClaw's 67.1 (B) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "OpenClaw B 67.1", "ZeroClaw BB 70.2", "scores" ], "h1": "OpenClaw vs ZeroClaw", "image": "https://www.anchorterminal.com/assets/og/compare-openclaw-vs-zeroclaw.png", "path": "/compare/openclaw-vs-zeroclaw", "published": "2026-10-01", "section": "tools", "title": "OpenClaw vs ZeroClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw" }, "tokens": { "markdown": 2550, "slim": 530 }, "version": 1 }