PicoClaw vs Zo Computer

PicoClaw

Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.

Zo Computer

Zo publishes an OpenAPI file, Markdown docs, plan prices and a named list of the providers that receive user content. One access token grants full access to the workspace, no approval step before sending or buying was found in the reviewed docs, and no status page, rate limit or SLA is published.

PicoClaw

1. Set allow_from to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone
2. Set tools.exec.allow_remote to false unless chats must run shell commands. The shipped default is true, whatever docs/guides/configuration.md says
3. Set isolation.enabled to true on Linux (needs bwrap) or run in a container. The deny patterns do not inspect child processes
4. Use PICOCLAW_KEY_PASSPHRASE for credential encryption. One docs page names PICOCLAW_CREDENTIAL_PASSPHRASE, which the source does not read
5. Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions

Zo Computer

1. Send POST https://api.zo.computer/zo/ask with Authorization: Bearer zo_sk_... and an input string. The owner creates the token under Settings > Advanced
2. Pass persona_id for a persona with a narrow tool set. The token itself carries every permission the owner has
3. Set memory_mode to off to keep workspace memory out of a request. The field is in the OpenAPI file and absent from the API guide
4. Do not retry /zo/ask blindly after a timeout. No idempotency key is documented and the request may already have sent a message
5. Append .md to any guide or reference URL for Markdown