{ "data": { "a": { "slug": "picoclaw", "name": "PicoClaw", "vendor": "Sipeed", "vendorUrl": "https://picoclaw.io", "kind": "harness", "category": "personal-assistants", "summary": "PicoClaw is an open-source personal AI assistant from Sipeed, a single Go binary for small Linux boards, desktops and Android, reached through chat apps. Its last commit on the main branch was on 19 August 2026.", "url": "https://www.anchorterminal.com/tools/picoclaw", "markdownUrl": "https://www.anchorterminal.com/tools/picoclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/picoclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/picoclaw.json", "repo": "https://github.com/sipeed/picoclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "docker.io/sipeed/picoclaw" }, { "registry": "oci", "name": "ghcr.io/sipeed/picoclaw" } ], "auth": "none", "authNotes": "No account with Sipeed. The owner supplies model provider keys, chat bot tokens and search keys, kept in `~/.picoclaw/.security.yml`. The web launcher asks for a password set on first run, stored as a bcrypt hash. Each channel's `allow_from` list decides who may talk to the assistant, and an empty list admits everyone.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays their model provider by usage, or nothing with a local model through Ollama or vLLM. Search keys are optional, and DuckDuckGo search needs none.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, docs or source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 30000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.picoclaw.io", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "go", "docker", "pre-1.0" ], "lastRelease": "2026-07-03", "graded": true, "anchor": { "graded": true, "score": 46.1, "grade": "D", "agentReady": false, "rank": 881, "ranked": true, "rankOf": 993, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -7, "negativeNotes": [ "2026-04-25 to 2026-07-19. 15 advisories are listed for PicoClaw in the GitHub Advisory Database. Two are reviewed, CVE-2026-36045 (high, 7.3, command injection past the exec deny list, 0.1.2 and earlier) and CVE-2026-6987 (moderate, injection through the launcher's `/api/gateway/restart`, 0.2.4 and earlier), and 13 unreviewed entries of 10 to 19 July name versions up to 0.2.9. None lists a patched version, the project has published no advisory of its own, and it has no security policy. We read four of the fifteen. Several concern old versions and some fixes are in the git history, so -5. https://github.com/advisories?query=picoclaw", "Current behaviour, checked 2026-10-12. The repository's configuration guide says `tools.exec.allow_remote` defaults to `false`. The source at v0.3.1 and on main sets it to `true`, and the docs site calls fully open the default, so a remote chat can run shell commands on a default install. A misleading claim on a security default, the minimum, -2. https://github.com/sipeed/picoclaw/blob/main/docs/guides/configuration.md; https://github.com/sipeed/picoclaw/blob/main/pkg/config/defaults.go" ], "verdict": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.", "bestFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "strengths": [ "MIT licence, one Go binary for x86-64, ARM, RISC-V, MIPS and LoongArch, with Docker images and an Android APK", "Conversations, memory, scheduled jobs and credentials stay in files under `~/.picoclaw` on the owner's device", "File tools are limited to the workspace by default, and command jobs scheduled from remote chats are refused unless the chat is listed", "MCP client over stdio, SSE and HTTP, with optional search-based tool discovery to keep definitions out of context", "Credentials sit in a separate `.security.yml` with optional AES-256-GCM encryption, and are filtered from tool output before the model sees it" ], "weaknesses": [ "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply", "15 CVEs are listed in the GitHub Advisory Database (25 April to 19 July 2026). The project has published no advisory and has no SECURITY.md", "No human approval step. The agent sends messages, writes files and runs shell commands without asking, and the hooks guide says waiting for a human reply is not supported", "Shell execution from remote chats is on by default in the source and on the docs site, while the repository's configuration guide says the default is off", "An empty `allow_from` list lets anyone who can message the bot use it, with only a warning in the log" ], "agentNotes": [ "Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone", "Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says", "Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes", "Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read", "Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 46.1 } ], "editorialScores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 58 }, "provenanceScore": 53 }, "connect": { "install": "git clone https://github.com/sipeed/picoclaw.git \u0026\u0026 cd picoclaw \u0026\u0026 docker compose -f docker/docker-compose.yml --profile launcher up # or download a binary from https://picoclaw.io/download/ and run: picoclaw onboard", "headless": { "command": "picoclaw agent -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/picoclaw" }, "area": "frameworks", "provenance": { "legalEntity": "Sipeed", "domain": "picoclaw.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/sipeed/picoclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The docs footer reads Copyright 2026 Sipeed and the site says PicoClaw is open-source software by Sipeed. The `LICENSE` file names PicoClaw contributors. No registered company name or address was on the pages read.", "No terms of service or privacy policy is linked from picoclaw.io, docs.picoclaw.io or the repository, so both fields are left out and the MIT licence stands in.", "picoclaw.io/.well-known/security.txt and picoclaw.io/llms.txt answered 403 with a storage Access Denied body, read as absent. docs.picoclaw.io/llms.txt answered 404.", "The repository has no SECURITY.md, and GitHub's policy page says none is set up.", "Self-hosted software with no hosted endpoint. The registration date of picoclaw.io was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/picoclaw.json", "live": { "slug": "picoclaw", "versions": [ { "registry": "github", "name": "sipeed/picoclaw", "version": "v0.3.1", "released": "2026-07-03", "seenAt": "2026-10-12T22:21:56.315193381Z" } ], "githubStars": 30017, "updatedAt": "2026-10-12T22:21:56.315193381Z" } }, "answer": "PicoClaw scores 46.1 (D) on agent readiness against Talorys's 28.9 (F), and leads in 5 of 7 scored categories. Talorys leads on maintenance \u0026 community.", "b": { "slug": "talorys", "name": "Talorys", "vendor": "Roc Yu (rociiu) and contributors", "vendorUrl": "https://github.com/rociiu/talorys", "kind": "platform", "category": "personal-assistants", "summary": "Talorys is an open-source, single-user personal AI assistant that its owner deploys into their own Cloudflare account with one command. It chats, keeps editable memories, and manages tasks, notes, projects, reminders and scheduled routines.", "url": "https://www.anchorterminal.com/tools/talorys", "markdownUrl": "https://www.anchorterminal.com/tools/talorys.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/talorys.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/talorys.json", "repo": "https://github.com/rociiu/talorys", "license": "MIT (Copyright 2026 The Talorys contributors). It runs on the owner's Cloudflare account under Cloudflare's own terms.", "transports": [], "packages": [ { "registry": "npm", "name": "create-talorys" } ], "auth": "mixed", "authNotes": "The installer signs in to Cloudflare through Wrangler's OAuth flow, or uses an API token with Workers Scripts, Pages, Workers AI and Account Settings permissions. The owner password is hashed locally with PBKDF2-SHA256 and stored as a Worker secret. The web app uses an HttpOnly session cookie, and every non-GET request needs an x-talorys-request header and a same-origin Origin (https://github.com/rociiu/talorys/blob/main/docs/security.md). There is no API key, MCP server or signup.", "pricing": "free", "pricingNotes": "Free and MIT-licensed, designed to fit the Cloudflare Workers Free plan, including a daily Workers AI allocation. On a paid Cloudflare plan, use beyond the included amounts is billed by Cloudflare (https://github.com/rociiu/talorys#7-what-is-free-and-what-may-cost-money).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No payment protocol. Talorys has no billing of its own, checked 12 October 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 978, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/rociiu/talorys/tree/main/docs", "capabilities": [ "assistant.memory", "assistant.self-hosted", "memory.user", "memory.search", "tasks.create", "tasks.update", "notify.in-app" ], "tags": [ "open-source", "self-hosted", "free", "typescript", "cloudflare" ], "lastRelease": "2026-10-12", "graded": true, "disclosure": "Talorys competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "competesWith": "localghost", "anchor": { "graded": true, "score": 28.9, "grade": "F", "agentReady": false, "rank": 976, "ranked": true, "rankOf": 993, "categoryRank": 19, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 0, "maintenance": 83, "payments": 60, "reliability": 41, "schema": 0, "security": 8, "transparency": 52 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": 0, "verdict": "Talorys is an MIT-licensed assistant its owner deploys to their own Cloudflare account, with no telemetry, a documented threat model and code-enforced confirmation for destructive tools. It is two days old at version 0.1.5, has no mail, calendar or payment connections, and no interface for an outside agent.", "bestFor": "A single person who wants a private assistant for memory, tasks, notes and reminders on their own Cloudflare account.", "disclosure": "Talorys competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "strengths": [ "MIT licence, and no telemetry, analytics or tracking, stated in the README and confirmed in the code.", "Destructive tools need confirmation in the owner's latest message, enforced in code, and scheduled runs get read-only tools.", "SECURITY.md with private reporting, a 3-business-day acknowledgement target and a threat model.", "Designed to fit Cloudflare's Workers Free plan, with nothing to buy from Talorys." ], "weaknesses": [ "No API key, MCP server or A2A endpoint, and the /api routes need the owner's browser session.", "First released on 10 October 2026 and still pre-1.0 at 0.1.5.", "No changelog or breaking-change notes.", "No mail, calendar, booking, payment or messaging connections in the code." ], "agentNotes": [ "Run `npx create-talorys@latest` with Node.js 22 or later and a Cloudflare login or an API token with Workers, Pages and Workers AI permissions.", "Don't script the /api routes. They need the owner's session cookie and CSRF header and aren't documented for other callers.", "Update with `npx create-talorys@latest update`. Only the latest version gets security fixes." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 28.9 } ], "editorialScores": { "ergonomics": 0, "maintenance": 83, "payments": 60, "reliability": 41, "schema": 0, "security": 8, "transparency": 77 }, "provenanceScore": 27 }, "connect": { "install": "npx create-talorys@latest # Node.js 22+, signs in to Cloudflare and deploys into your account" }, "letme": { "capability": "https://letme.dev/assistant.memory", "tool": "https://letme.dev/talorys" }, "sameCompany": [ "github-mcp-server", "github-copilot-cli" ], "area": "frameworks", "provenance": { "legalEntity": "", "domain": "github.com", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/rociiu/talorys/commits/main", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No company, terms of service or privacy policy. The MIT licence names The Talorys contributors, and Cloudflare's terms and privacy policy cover the hosting.", "Security reports go through GitHub private vulnerability reporting per SECURITY.md. There is no security.txt.", "There is no hosted endpoint. Each install answers on the owner's own pages.dev address.", "GitHub star count was not checked because the GitHub API was not available to us." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/talorys.json", "live": { "slug": "talorys", "versions": [ { "registry": "npm", "name": "create-talorys", "version": "0.1.5", "seenAt": "2026-10-12T22:32:28.340613655Z" } ], "githubStars": 892, "npmWeekly": 978, "updatedAt": "2026-10-12T22:32:29.267294141Z" } }, "facts": [ { "a": "Agent harness", "b": "Platform", "name": "Kind" }, { "a": "Sipeed", "b": "Roc Yu (rociiu) and contributors", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT (Copyright 2026 The Talorys contributors). It runs on the owner's Cloudflare account under Cloudflare's own terms.", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-07-03", "b": "2026-10-12", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "30k stars", "b": "978 npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "PicoClaw scores 46.1 (D) on agent readiness against Talorys's 28.9 (F), and leads in 5 of 7 scored categories. Talorys leads on maintenance \u0026 community.", "question": "Which is better for AI agents, PicoClaw or Talorys?" }, { "answer": "Yes. PicoClaw is open source (MIT). Talorys is open source (MIT (Copyright 2026 The Talorys contributors). It runs on the owner's Cloudflare account under Cloudflare's own terms.).", "question": "Are PicoClaw and Talorys open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 54 against 41", "Schema \u0026 documentation, 51 against 0", "Agent ergonomics, 66 against 0", "Security \u0026 auth, 51 against 8" ], "also": [ "No key needed to call it", "Free to start without a card" ], "goodFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "slug": "picoclaw", "watchFor": "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply" }, { "aheadOn": [ "Maintenance \u0026 community, 83 against 22" ], "also": [ "No incidents deducted, where PicoClaw loses 7 points for them" ], "goodFor": "A single person who wants a private assistant for memory, tasks, notes and reminders on their own Cloudflare account.", "slug": "talorys", "watchFor": "No API key, MCP server or A2A endpoint, and the /api routes need the owner's browser session." } ], "job": { "capability": "assistant.memory", "name": "Assistants that remember you" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.json", "title": "AstrBot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.json", "title": "CowAgent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw.json", "title": "GAIA vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.json", "title": "Gemini Spark vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.json", "title": "Grok Bot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-picoclaw.json", "title": "Haven vs PicoClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.json", "title": "Hermes Agent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw.json", "title": "Instinct vs PicoClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.json", "title": "IronClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.json", "title": "Leon vs PicoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw.json", "title": "Lindy vs PicoClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.json", "title": "NanoClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.json", "title": "Dots vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-poke.json", "title": "PicoClaw vs Poke", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json", "title": "PicoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.json", "title": "PicoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.json", "title": "PicoClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-talorys.json", "title": "CowAgent vs Talorys", "url": "https://www.anchorterminal.com/compare/cowagent-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-talorys.json", "title": "GAIA vs Talorys", "url": "https://www.anchorterminal.com/compare/gaia-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-talorys.json", "title": "Gemini Spark vs Talorys", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-talorys.json", "title": "Grok Bot vs Talorys", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-talorys.json", "title": "Haven vs Talorys", "url": "https://www.anchorterminal.com/compare/haven-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-talorys.json", "title": "Hermes Agent vs Talorys", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-talorys.json", "title": "Instinct vs Talorys", "url": "https://www.anchorterminal.com/compare/instinct-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-talorys.json", "title": "IronClaw vs Talorys", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-talorys.json", "title": "Leon vs Talorys", "url": "https://www.anchorterminal.com/compare/leon-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-talorys.json", "title": "Lindy vs Talorys", "url": "https://www.anchorterminal.com/compare/lindy-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-talorys.json", "title": "nanobot vs Talorys", "url": "https://www.anchorterminal.com/compare/nanobot-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-talorys.json", "title": "NanoClaw vs Talorys", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/natura-vs-talorys.json", "title": "Natura tinyNature vs Talorys", "url": "https://www.anchorterminal.com/compare/natura-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-talorys.json", "title": "Dots vs Talorys", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-talorys.json", "title": "OpenClaw vs Talorys", "url": "https://www.anchorterminal.com/compare/openclaw-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/pally-vs-talorys.json", "title": "Pally vs Talorys", "url": "https://www.anchorterminal.com/compare/pally-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-wajo.json", "title": "PicoClaw vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-talorys.json", "title": "Poke vs Talorys", "url": "https://www.anchorterminal.com/compare/poke-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-talorys.json", "title": "QwenPaw vs Talorys", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/talorys-vs-tomo.json", "title": "Talorys vs Tomo", "url": "https://www.anchorterminal.com/compare/talorys-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/talorys-vs-wajo.json", "title": "Talorys vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/talorys-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/talorys-vs-zeroclaw.json", "title": "Talorys vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/talorys-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/talorys-vs-zo-computer.json", "title": "Talorys vs Zo Computer", "url": "https://www.anchorterminal.com/compare/talorys-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/natura-vs-picoclaw.json", "title": "Natura tinyNature vs PicoClaw", "url": "https://www.anchorterminal.com/compare/natura-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/pally-vs-picoclaw.json", "title": "Pally vs PicoClaw", "url": "https://www.anchorterminal.com/compare/pally-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-tomo.json", "title": "PicoClaw vs Tomo", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-talorys.json", "title": "AstrBot vs Talorys", "url": "https://www.anchorterminal.com/compare/astrbot-vs-talorys" } ], "scores": [ { "by": 13, "edge": "picoclaw", "key": "reliability", "name": "Reliability", "picoclaw": 54, "talorys": 41, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 51, "edge": "picoclaw", "key": "schema", "name": "Schema \u0026 documentation", "picoclaw": 51, "talorys": 0, "weight": 13 }, { "by": 66, "edge": "picoclaw", "key": "ergonomics", "name": "Agent ergonomics", "picoclaw": 66, "talorys": 0, "weight": 13 }, { "by": 43, "edge": "picoclaw", "key": "security", "name": "Security \u0026 auth", "picoclaw": 51, "talorys": 8, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "picoclaw": 60, "talorys": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 61, "edge": "talorys", "key": "maintenance", "name": "Maintenance \u0026 community", "picoclaw": 22, "talorys": 83, "weight": 7 }, { "by": 4, "edge": "picoclaw", "key": "transparency", "name": "Transparency \u0026 trust", "picoclaw": 56, "talorys": 52, "weight": 7 } ], "summary": "PicoClaw scores 46.1 (D) on agent readiness against Talorys's 28.9 (F), and leads in 5 of 7 scored categories. Talorys leads on maintenance \u0026 community. Both do assistants that remember you.", "verdicts": { "picoclaw": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.", "talorys": "Talorys is an MIT-licensed assistant its owner deploys to their own Cloudflare account, with no telemetry, a documented threat model and code-enforced confirmation for destructive tools. It is two days old at version 0.1.5, has no mail, calendar or payment connections, and no interface for an outside agent." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/picoclaw-vs-talorys", "json": "https://www.anchorterminal.com/compare/picoclaw-vs-talorys.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/picoclaw-vs-talorys.md", "slim": "https://www.anchorterminal.com/compare/picoclaw-vs-talorys.min.md" }, "markdown": "PicoClaw scores 46.1 (D) on agent readiness against Talorys's 28.9 (F), and leads in 5 of 7 scored categories. Talorys leads on maintenance \u0026 community. Both do assistants that remember you.\n\n- PicoClaw: grade D, 46.1/100, rank #881 of 993. Markdown https://www.anchorterminal.com/tools/picoclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/picoclaw.json\n- Talorys: grade F, 28.9/100, rank #976 of 993. Markdown https://www.anchorterminal.com/tools/talorys.md · JSON https://www.anchorterminal.com/api/v1/tools/talorys.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 314 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### PicoClaw (D)\n\nGood for: A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.\n\nAhead on:\n- Reliability, 54 against 41\n- Schema \u0026 documentation, 51 against 0\n- Agent ergonomics, 66 against 0\n- Security \u0026 auth, 51 against 8\n\nAlso in its favour:\n- No key needed to call it\n- Free to start without a card\n\nWatch for: No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply\n\n### Talorys (F)\n\nGood for: A single person who wants a private assistant for memory, tasks, notes and reminders on their own Cloudflare account.\n\nAhead on:\n- Maintenance \u0026 community, 83 against 22\n\nAlso in its favour:\n- No incidents deducted, where PicoClaw loses 7 points for them\n\nWatch for: No API key, MCP server or A2A endpoint, and the /api routes need the owner's browser session.\n\n\n## Score by category\n\n| Category | Weight | PicoClaw | Talorys | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 54 | 41 | PicoClaw +13 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 51 | 0 | PicoClaw +51 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 0 | PicoClaw +66 |\n| Security \u0026 auth | 14% (17.5 this run) | 51 | 8 | PicoClaw +43 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 22 | 83 | Talorys +61 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 56 | 52 | PicoClaw +4 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **46.1 · D** | **28.9 · F** | |\n\n## Facts side by side\n\n| Fact | PicoClaw | Talorys |\n| --- | --- | --- |\n| Kind | Agent harness | Platform |\n| Vendor | Sipeed | Roc Yu (rociiu) and contributors |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | OAuth or key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT (Copyright 2026 The Talorys contributors). It runs on the owner's Cloudflare account under Cloudflare's own terms. |\n| Read-only variant documented | no | yes |\n| llms.txt | no | no |\n| Last release | 2026-07-03 | 2026-10-12 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 30k stars | 978 npm/wk |\n\n## Verdicts\n\n**PicoClaw.** Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.\n\n**Talorys.** Talorys is an MIT-licensed assistant its owner deploys to their own Cloudflare account, with no telemetry, a documented threat model and code-enforced confirmation for destructive tools. It is two days old at version 0.1.5, has no mail, calendar or payment connections, and no interface for an outside agent.\n\n## Before you call either\n\n### PicoClaw\n\n1. Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone\n2. Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says\n3. Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes\n4. Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read\n5. Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions\n\n### Talorys\n\n1. Run `npx create-talorys@latest` with Node.js 22 or later and a Cloudflare login or an API token with Workers, Pages and Workers AI permissions.\n2. Don't script the /api routes. They need the owner's session cookie and CSRF header and aren't documented for other callers.\n3. Update with `npx create-talorys@latest update`. Only the latest version gets security fixes.\n\n## Questions\n\n### Which is better for AI agents, PicoClaw or Talorys?\n\nPicoClaw scores 46.1 (D) on agent readiness against Talorys's 28.9 (F), and leads in 5 of 7 scored categories. Talorys leads on maintenance \u0026 community.\n\n### Are PicoClaw and Talorys open source?\n\nYes. PicoClaw is open source (MIT). Talorys is open source (MIT (Copyright 2026 The Talorys contributors). It runs on the owner's Cloudflare account under Cloudflare's own terms.).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/picoclaw-vs-talorys.json, and with the fewest tokens: https://www.anchorterminal.com/compare/picoclaw-vs-talorys.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"picoclaw\", \"b\": \"talorys\"}`. From a terminal: `anchor compare picoclaw talorys`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/picoclaw.json and https://www.anchorterminal.com/api/v1/tools/talorys.json\n\n## Other comparisons with PicoClaw or Talorys\n\n- [AstrBot vs PicoClaw](https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.md)\n- [CowAgent vs PicoClaw](https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.md)\n- [GAIA vs PicoClaw](https://www.anchorterminal.com/compare/gaia-vs-picoclaw.md)\n- [Gemini Spark vs PicoClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.md)\n- [Grok Bot vs PicoClaw](https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.md)\n- [Haven vs PicoClaw](https://www.anchorterminal.com/compare/haven-vs-picoclaw.md)\n- [Hermes Agent vs PicoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.md)\n- [Instinct vs PicoClaw](https://www.anchorterminal.com/compare/instinct-vs-picoclaw.md)\n- [IronClaw vs PicoClaw](https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.md)\n- [Leon vs PicoClaw](https://www.anchorterminal.com/compare/leon-vs-picoclaw.md)\n- [Lindy vs PicoClaw](https://www.anchorterminal.com/compare/lindy-vs-picoclaw.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [NanoClaw vs PicoClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.md)\n- [Dots vs PicoClaw](https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [PicoClaw vs Poke](https://www.anchorterminal.com/compare/picoclaw-vs-poke.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [PicoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.md)\n- [PicoClaw vs Zo Computer](https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.md)\n- [CowAgent vs Talorys](https://www.anchorterminal.com/compare/cowagent-vs-talorys.md)\n- [GAIA vs Talorys](https://www.anchorterminal.com/compare/gaia-vs-talorys.md)\n- [Gemini Spark vs Talorys](https://www.anchorterminal.com/compare/gemini-spark-vs-talorys.md)\n- [Grok Bot vs Talorys](https://www.anchorterminal.com/compare/grok-bot-vs-talorys.md)\n- [Haven vs Talorys](https://www.anchorterminal.com/compare/haven-vs-talorys.md)\n- [Hermes Agent vs Talorys](https://www.anchorterminal.com/compare/hermes-agent-vs-talorys.md)\n- [Instinct vs Talorys](https://www.anchorterminal.com/compare/instinct-vs-talorys.md)\n- [IronClaw vs Talorys](https://www.anchorterminal.com/compare/ironclaw-vs-talorys.md)\n- [Leon vs Talorys](https://www.anchorterminal.com/compare/leon-vs-talorys.md)\n- [Lindy vs Talorys](https://www.anchorterminal.com/compare/lindy-vs-talorys.md)\n- [nanobot vs Talorys](https://www.anchorterminal.com/compare/nanobot-vs-talorys.md)\n- [NanoClaw vs Talorys](https://www.anchorterminal.com/compare/nanoclaw-vs-talorys.md)\n- [Natura tinyNature vs Talorys](https://www.anchorterminal.com/compare/natura-vs-talorys.md)\n- [Dots vs Talorys](https://www.anchorterminal.com/compare/openai-dots-vs-talorys.md)\n- [OpenClaw vs Talorys](https://www.anchorterminal.com/compare/openclaw-vs-talorys.md)\n- [Pally vs Talorys](https://www.anchorterminal.com/compare/pally-vs-talorys.md)\n- [PicoClaw vs Wajo (Fo)](https://www.anchorterminal.com/compare/picoclaw-vs-wajo.md)\n- [Poke vs Talorys](https://www.anchorterminal.com/compare/poke-vs-talorys.md)\n- [QwenPaw vs Talorys](https://www.anchorterminal.com/compare/qwenpaw-vs-talorys.md)\n- [Talorys vs Tomo](https://www.anchorterminal.com/compare/talorys-vs-tomo.md)\n- [Talorys vs Wajo (Fo)](https://www.anchorterminal.com/compare/talorys-vs-wajo.md)\n- [Talorys vs ZeroClaw](https://www.anchorterminal.com/compare/talorys-vs-zeroclaw.md)\n- [Talorys vs Zo Computer](https://www.anchorterminal.com/compare/talorys-vs-zo-computer.md)\n- [Natura tinyNature vs PicoClaw](https://www.anchorterminal.com/compare/natura-vs-picoclaw.md)\n- [Pally vs PicoClaw](https://www.anchorterminal.com/compare/pally-vs-picoclaw.md)\n- [PicoClaw vs Tomo](https://www.anchorterminal.com/compare/picoclaw-vs-tomo.md)\n- [AstrBot vs Talorys](https://www.anchorterminal.com/compare/astrbot-vs-talorys.md)\n\n## Disclosure\n\n- Talorys competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "PicoClaw vs Talorys", "url": "" } ], "description": "PicoClaw scores 46.1 (D) to Talorys's 28.9 (F) for assistants that remember you. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "PicoClaw D 46.1", "Talorys F 28.9", "scores" ], "h1": "PicoClaw vs Talorys", "image": "https://www.anchorterminal.com/assets/og/compare-picoclaw-vs-talorys.png", "path": "/compare/picoclaw-vs-talorys", "published": "2026-10-01", "section": "tools", "title": "PicoClaw vs Talorys for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-talorys" }, "tokens": { "markdown": 2850, "slim": 580 }, "version": 1 }