{ "data": { "a": { "slug": "qwenpaw", "name": "QwenPaw", "vendor": "AgentScope", "vendorUrl": "https://qwenpaw.agentscope.io", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal assistant from the AgentScope team that the owner runs on their own machine or server. It answers on chat apps, runs scheduled and proactive tasks, manages a mailbox over IMAP and SMTP, and keeps memory as Markdown files.", "url": "https://www.anchorterminal.com/tools/qwenpaw", "markdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/qwenpaw.json", "repo": "https://github.com/agentscope-ai/QwenPaw", "license": "Apache-2.0", "transports": [ "http", "stdio" ], "packages": [ { "registry": "pypi", "name": "qwenpaw" }, { "registry": "oci", "name": "agentscope/qwenpaw" } ], "auth": "none", "authNotes": "No account. The Console and API bind to 127.0.0.1:8088 with login off by default. `QWENPAW_AUTH_ENABLED=true` adds one admin account with a salted SHA-256 password hash and a signed token valid for seven days, and requests from localhost skip it. Each channel takes its own bot credentials, and the mailbox takes an IMAP and SMTP authorisation code or app password.", "pricing": "free", "pricingNotes": "Free under Apache-2.0 with nothing to buy. Model usage is billed by whichever provider the owner configures, and local models through llama.cpp, Ollama or LM Studio need no key. The README describes a hosted deployment on AgentScope Platform as free. That platform's pages are script-drawn and its terms and limits were not read (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs source or the dependency list (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 35621, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://qwenpaw.agentscope.io/docs", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "docker", "desktop-app", "mcp", "telemetry-default-on" ], "lastRelease": "2026-09-11", "graded": true, "anchor": { "graded": true, "score": 62.2, "grade": "B", "agentReady": false, "rank": 454, "ranked": true, "rankOf": 986, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 73, "payments": 60, "reliability": 70, "schema": 68, "security": 60, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-09-11. Version 2.2.1 began enforcing each MCP server's tool allowlist on the agent runtime path (commit f2a292d of 4 September, #7504). Before it, a tool the owner had disabled on an MCP client could still be invoked by the agent. Fixed and listed in the release notes, with no security advisory, -2. https://github.com/agentscope-ai/QwenPaw/pull/7504", "2026-09-03. Version 2.2.0 blocked shell line-continuation variants that bypassed sensitive-path protections (#7472). Fixed and listed in the release notes, with no security advisory, -1. https://github.com/agentscope-ai/QwenPaw/blob/main/website/public/release-notes/v2.2.0.md" ], "verdict": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.", "bestFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.", "strengths": [ "New mail driver cards default to the `ask` policy, and automatic mail handling may not call `delete_message` or write to unknown recipients", "Kernel sandbox on macOS, Linux and Windows, with a documented list of constraints each backend does not enforce", "Model keys, mail credentials and environment secrets are encrypted with a master key held in the OS keychain or a 0600 file", "Memory is plain Markdown in the agent workspace that the owner can read, edit and remove", "Four stable releases in the 90 days to 12 October 2026, each with dated release notes" ], "weaknesses": [ "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs", "The default approval level AUTO asks only for tool calls a guard rule flags, and `/proactive` skips approval prompts entirely", "Channel direct-message and group policies default to `open`, and Console login is off by default", "No privacy policy, terms of service or security.txt on qwenpaw.agentscope.io, and no published GitHub security advisory", "Inside containers the sandbox falls back to `mode=none`, which the docs say enforces no isolation", "671 open issues and 381 open pull requests on 12 October 2026, and the Tests workflow on main had not completed a run since 30 September" ], "agentNotes": [ "Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking", "Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags", "Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`", "Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then", "Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.2 } ], "editorialScores": { "ergonomics": 67, "maintenance": 73, "payments": 60, "reliability": 70, "schema": 68, "security": 60, "transparency": 58 }, "provenanceScore": 53 }, "connect": { "install": "pip install qwenpaw \u0026\u0026 qwenpaw init --defaults \u0026\u0026 qwenpaw app # Python 3.11 to 3.13; or: docker pull agentscope/qwenpaw:latest", "http": "curl -X POST http://localhost:8088/api/console/chat -H \"Content-Type: application/json\" -H \"X-Agent-Id: default\" -d '{\"input\": [...]}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/qwenpaw" }, "area": "frameworks", "provenance": { "legalEntity": "Qwenpaw PRIVATE LIMITED", "domain": "agentscope.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://qwenpaw.agentscope.io/release-notes", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer in the repository's website source reads © 2026 Qwenpaw PRIVATE LIMITED. The LICENSE file names The QwenPaw Authors, and the README credits the AgentScope team.", "SECURITY.md sends vulnerability reports to the Alibaba Security Response Centre. We found no other first-hand statement of ownership by Alibaba.", "The site links a Usage Policy dated 26 August 2026 and no terms of service or privacy policy, so both links are left out and the Apache-2.0 licence stands in.", "qwenpaw.agentscope.io answered 404 for robots.txt, llms.txt and /.well-known/security.txt on 12 October 2026.", "No hosted endpoint is graded. A self-hosted instance answers on its owner's own host. We did not look up the domain's registration date." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/qwenpaw.json" }, "answer": "ZeroClaw scores 70.2 (BB) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories.", "b": { "slug": "zeroclaw", "name": "ZeroClaw", "vendor": "ZeroClaw Labs", "vendorUrl": "https://www.zeroclaw.com", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal AI assistant from ZeroClaw Labs, shipped as one Rust binary the owner runs. It answers on chat, email and voice channels, calls tools and MCP servers, and keeps memory in local SQLite.", "url": "https://www.anchorterminal.com/tools/zeroclaw", "markdownUrl": "https://www.anchorterminal.com/tools/zeroclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/zeroclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/zeroclaw.json", "repo": "https://github.com/zeroclaw-labs/zeroclaw", "license": "MIT OR Apache-2.0", "transports": [], "packages": [ { "registry": "oci", "name": "ghcr.io/zeroclaw-labs/zeroclaw" } ], "auth": "none", "authNotes": "No account with the vendor. Model keys, bot tokens and mail passwords go in `~/.zeroclaw/config.toml` as encrypted secret fields, set through `zeroclaw config set`, the dashboard or the terminal UI. OpenAI Codex and Claude subscription tokens are accepted in place of API keys. Gateway clients pair first and then send `Authorization: Bearer \u003ctoken\u003e`, with token hashes kept in config (https://github.com/zeroclaw-labs/zeroclaw/blob/master/docs/book/src/security/authentication.md).", "pricing": "free", "pricingNotes": "Free under MIT or Apache-2.0, with no subscription and no hosted seat (https://www.zeroclaw.com/). The owner pays the model provider, or nothing with a local model. ZeroRouter, the vendor's hosted beta model gateway, is optional and its prices were not read (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source at commit 6c0b1f9 (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 32965, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.zeroclaw.com/master/en/introduction.html", "llmsTxt": "https://www.zeroclaw.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "assistant.accounts", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "rust", "mit", "apache-2.0", "pre-1.0", "no-telemetry", "mcp-client", "approvals", "acp", "docker", "llms-txt" ], "lastRelease": "2026-09-05", "graded": true, "anchor": { "graded": true, "score": 70.2, "grade": "BB", "agentReady": true, "rank": 161, "ranked": true, "rankOf": 986, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 80, "payments": 60, "reliability": 74, "schema": 82, "security": 76, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-09-05. GHSA-93f6-34w8-5g98 (high), an unvalidated `wasm_path` let `zeroclaw plugin install` write an attacker-controlled file outside the plugins directory in 0.8.4 and earlier. Fixed in 0.8.5 and published the same day, inside six months, -2. https://github.com/zeroclaw-labs/zeroclaw/security/advisories/GHSA-93f6-34w8-5g98", "2026-04-01. The project lead wrote that a maintainer's AI automation merged pull requests that should not have gone through and that GitHub took enforcement action on the organisation. Disclosed, the maintainer removed and merge access tightened, over six months old, -1. https://www.zeroclaw.com/blog/community-and-stability" ], "verdict": "Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms.", "bestFor": "One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.", "strengths": [ "Supervised mode is the default. Tools outside an eleven-item read-only and fetch list prompt the owner, and an unanswered prompt is a denial after 120 seconds", "Approval prompts arrive on the channel in use, and `approval_route` can send them to a separate approver channel that denies when unreachable", "Channel secrets and provider keys are encrypted with ChaCha20-Poly1305 in `config.toml`, with the key in `.secret_key` at mode 0600", "An empty peer set denies every inbound sender, and the gateway binds 127.0.0.1 with pairing required by default", "Three tagged releases in the 90 days to 12 October 2026, each with a Breaking Changes section, and CI passing on master on 11 October" ], "weaknesses": [ "The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable", "No privacy policy, terms or security.txt on zeroclaw.com, and the home page links none", "`web_fetch`, `web_search_tool` and `browser_open` run without approval by default, and sandboxed tools keep full network egress", "GHSA-93f6-34w8-5g98 (high) let a plugin install write outside the plugins directory in 0.8.4 and earlier, fixed in 0.8.5 on 5 September 2026", "Version 0.8.5 is pre-1.0, patch releases carry breaking changes, and 576 issues and 384 pull requests were open on 12 October 2026" ], "agentNotes": [ "Keep `[risk_profiles.\u003calias\u003e] level = \"supervised\"`. `full` runs every tool not listed in `always_ask`, and the YOLO preset removes the sandbox and path rules too", "Add sending and account tools such as `send_via`, `google_workspace` and `http_request` to `always_ask` so a session-level Always grant cannot skip the prompt", "List senders in `[peer_groups.\u003cname\u003e] external_peers`. `[\"*\"]` accepts anyone on that channel", "Set `[web_fetch].allowed_domains` and `[http_request].allowed_domains`. Fetches run unprompted and the OS sandbox does not block egress", "Run one-shot tasks with `zeroclaw agent -a \u003calias\u003e -m \"\u003ctask\u003e\"`. A cron or webhook turn has no prompt, so shell calls fall to the command policy" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.2 } ], "editorialScores": { "ergonomics": 72, "maintenance": 80, "payments": 60, "reliability": 74, "schema": 82, "security": 76, "transparency": 74 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://raw.githubusercontent.com/zeroclaw-labs/zeroclaw/master/install.sh | sh # or: brew install zeroclaw", "headless": { "command": "zeroclaw agent -a \u003calias\u003e -m \"$TASK\"", "setup": "zeroclaw quickstart" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/zeroclaw" }, "area": "frameworks", "provenance": { "legalEntity": "ZeroClaw Labs", "domain": "zeroclaw.com", "domainRegistered": "2026-03-02", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/zeroclaw-labs/zeroclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The NOTICE file reads Copyright 2025 ZeroClaw Labs and the blog signs posts as CEO, ZeroClaw Labs. No company form, registration or address was found on the site or in the repository.", "The home page of www.zeroclaw.com links no terms and no privacy policy, so both fields are empty and the MIT or Apache-2.0 licence stands in.", "www.zeroclaw.com/.well-known/security.txt answered 404 on 12 October 2026. SECURITY.md asks for GitHub private vulnerability reporting and the README gives security@zeroclaw.dev.", "RDAP gives zeroclaw.com a registration date of 2026-03-02, registrar Atom.com Domains LLC. The repository was created on 13 February 2026.", "There is no hosted endpoint for the assistant. A gateway answers on its owner's own host." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/zeroclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "AgentScope", "b": "ZeroClaw Labs", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT OR Apache-2.0", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-11", "b": "2026-09-05", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "36k stars", "b": "33k stars", "name": "Popularity" } ], "faq": [ { "answer": "ZeroClaw scores 70.2 (BB) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, QwenPaw or ZeroClaw?" }, { "answer": "Yes. QwenPaw is open source (Apache-2.0). ZeroClaw is open source (MIT OR Apache-2.0).", "question": "Are QwenPaw and ZeroClaw open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "Runs on your own machine" ], "goodFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.", "slug": "qwenpaw", "watchFor": "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs" }, { "aheadOn": [ "Schema \u0026 documentation, 82 against 68", "Agent ergonomics, 72 against 67", "Security \u0026 auth, 76 against 60", "Maintenance \u0026 community, 80 against 73", "Transparency \u0026 trust, 64 against 56" ], "also": [ "Agent-ready, a grade of BB or better", "Free to start without a card" ], "goodFor": "One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.", "slug": "zeroclaw", "watchFor": "The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.json", "title": "AstrBot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.json", "title": "AstrBot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.json", "title": "CowAgent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.json", "title": "CowAgent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.json", "title": "GAIA vs QwenPaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.json", "title": "GAIA vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.json", "title": "Gemini Spark vs QwenPaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw.json", "title": "Gemini Spark vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.json", "title": "Grok Bot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw.json", "title": "Grok Bot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw.json", "title": "Haven vs QwenPaw", "url": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-zeroclaw.json", "title": "Haven vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.json", "title": "Hermes Agent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.json", "title": "Hermes Agent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.json", "title": "Instinct vs QwenPaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-zeroclaw.json", "title": "Instinct vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.json", "title": "IronClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.json", "title": "IronClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw.json", "title": "Leon vs QwenPaw", "url": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw.json", "title": "Leon vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.json", "title": "Lindy vs QwenPaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-zeroclaw.json", "title": "Lindy vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json", "title": "nanobot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.json", "title": "nanobot vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.json", "title": "NanoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw.json", "title": "NanoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.json", "title": "Dots vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw.json", "title": "Dots vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json", "title": "OpenClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.json", "title": "OpenClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json", "title": "PicoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.json", "title": "PicoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw.json", "title": "Poke vs QwenPaw", "url": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-zeroclaw.json", "title": "Poke vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/poke-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.json", "title": "QwenPaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer.json", "title": "ZeroClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer" } ], "scores": [ { "by": 4, "edge": "zeroclaw", "key": "reliability", "name": "Reliability", "qwenpaw": 70, "weight": 16, "zeroclaw": 74 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 14, "edge": "zeroclaw", "key": "schema", "name": "Schema \u0026 documentation", "qwenpaw": 68, "weight": 13, "zeroclaw": 82 }, { "by": 5, "edge": "zeroclaw", "key": "ergonomics", "name": "Agent ergonomics", "qwenpaw": 67, "weight": 13, "zeroclaw": 72 }, { "by": 16, "edge": "zeroclaw", "key": "security", "name": "Security \u0026 auth", "qwenpaw": 60, "weight": 14, "zeroclaw": 76 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "qwenpaw": 60, "weight": 10, "zeroclaw": 60 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 7, "edge": "zeroclaw", "key": "maintenance", "name": "Maintenance \u0026 community", "qwenpaw": 73, "weight": 7, "zeroclaw": 80 }, { "by": 8, "edge": "zeroclaw", "key": "transparency", "name": "Transparency \u0026 trust", "qwenpaw": 56, "weight": 7, "zeroclaw": 64 } ], "summary": "ZeroClaw scores 70.2 (BB) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories. Both do assistant proactive.", "verdicts": { "qwenpaw": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.", "zeroclaw": "Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw", "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.md", "slim": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.min.md" }, "markdown": "ZeroClaw scores 70.2 (BB) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories. Both do assistant proactive.\n\n- QwenPaw: grade B, 62.2/100, rank #454 of 986. Markdown https://www.anchorterminal.com/tools/qwenpaw.md · JSON https://www.anchorterminal.com/api/v1/tools/qwenpaw.json\n- ZeroClaw: grade BB, 70.2/100, rank #161 of 986. Markdown https://www.anchorterminal.com/tools/zeroclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/zeroclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### QwenPaw (B)\n\nGood for: One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs\n\n### ZeroClaw (BB)\n\nGood for: One person who wants an assistant on their own hardware that answers on Telegram, Discord, Matrix or email, asks before it writes or runs commands, and works with a local model.\n\nAhead on:\n- Schema \u0026 documentation, 82 against 68\n- Agent ergonomics, 72 against 67\n- Security \u0026 auth, 76 against 60\n- Maintenance \u0026 community, 80 against 73\n- Transparency \u0026 trust, 64 against 56\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Free to start without a card\n\nWatch for: The docs state that command execution is not audited. `[security.audit]` records certificate events only, and tool receipts are opt-in and not durable\n\n\n## Score by category\n\n| Category | Weight | QwenPaw | ZeroClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 70 | 74 | ZeroClaw +4 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 68 | 82 | ZeroClaw +14 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 72 | ZeroClaw +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 60 | 76 | ZeroClaw +16 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 73 | 80 | ZeroClaw +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 56 | 64 | ZeroClaw +8 |\n| Negative events | ≤15 | -3 | -3 | |\n| **Total** | | **62.2 · B** | **70.2 · BB** | |\n\n## Facts side by side\n\n| Fact | QwenPaw | ZeroClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | AgentScope | ZeroClaw Labs |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP, stdio | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT OR Apache-2.0 |\n| Read-only variant documented | no | yes |\n| llms.txt | no | yes |\n| Last release | 2026-09-11 | 2026-09-05 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 36k stars | 33k stars |\n\n## Verdicts\n\n**QwenPaw.** Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.\n\n**ZeroClaw.** Supervised autonomy is the default, so tools outside a short read-only list wait for the owner's approval, and secrets are encrypted in the config file. The docs state that command execution is not written to an audit log, and the project publishes no privacy policy or terms.\n\n## Before you call either\n\n### QwenPaw\n\n1. Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking\n2. Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags\n3. Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`\n4. Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then\n5. Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling\n\n### ZeroClaw\n\n1. Keep `[risk_profiles.\u003calias\u003e] level = \"supervised\"`. `full` runs every tool not listed in `always_ask`, and the YOLO preset removes the sandbox and path rules too\n2. Add sending and account tools such as `send_via`, `google_workspace` and `http_request` to `always_ask` so a session-level Always grant cannot skip the prompt\n3. List senders in `[peer_groups.\u003cname\u003e] external_peers`. `[\"*\"]` accepts anyone on that channel\n4. Set `[web_fetch].allowed_domains` and `[http_request].allowed_domains`. Fetches run unprompted and the OS sandbox does not block egress\n5. Run one-shot tasks with `zeroclaw agent -a \u003calias\u003e -m \"\u003ctask\u003e\"`. A cron or webhook turn has no prompt, so shell calls fall to the command policy\n\n## Questions\n\n### Which is better for AI agents, QwenPaw or ZeroClaw?\n\nZeroClaw scores 70.2 (BB) on agent readiness against QwenPaw's 62.2 (B), and leads in 6 of 7 scored categories.\n\n### Are QwenPaw and ZeroClaw open source?\n\nYes. QwenPaw is open source (Apache-2.0). ZeroClaw is open source (MIT OR Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"qwenpaw\", \"b\": \"zeroclaw\"}`. From a terminal: `anchor compare qwenpaw zeroclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/qwenpaw.json and https://www.anchorterminal.com/api/v1/tools/zeroclaw.json\n\n## Other comparisons with QwenPaw or ZeroClaw\n\n- [AstrBot vs QwenPaw](https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.md)\n- [AstrBot vs ZeroClaw](https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.md)\n- [CowAgent vs QwenPaw](https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.md)\n- [CowAgent vs ZeroClaw](https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.md)\n- [GAIA vs QwenPaw](https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.md)\n- [GAIA vs ZeroClaw](https://www.anchorterminal.com/compare/gaia-vs-zeroclaw.md)\n- [Gemini Spark vs QwenPaw](https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.md)\n- [Gemini Spark vs ZeroClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-zeroclaw.md)\n- [Grok Bot vs QwenPaw](https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.md)\n- [Grok Bot vs ZeroClaw](https://www.anchorterminal.com/compare/grok-bot-vs-zeroclaw.md)\n- [Haven vs QwenPaw](https://www.anchorterminal.com/compare/haven-vs-qwenpaw.md)\n- [Haven vs ZeroClaw](https://www.anchorterminal.com/compare/haven-vs-zeroclaw.md)\n- [Hermes Agent vs QwenPaw](https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.md)\n- [Hermes Agent vs ZeroClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.md)\n- [Instinct vs QwenPaw](https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.md)\n- [Instinct vs ZeroClaw](https://www.anchorterminal.com/compare/instinct-vs-zeroclaw.md)\n- [IronClaw vs QwenPaw](https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.md)\n- [IronClaw vs ZeroClaw](https://www.anchorterminal.com/compare/ironclaw-vs-zeroclaw.md)\n- [Leon vs QwenPaw](https://www.anchorterminal.com/compare/leon-vs-qwenpaw.md)\n- [Leon vs ZeroClaw](https://www.anchorterminal.com/compare/leon-vs-zeroclaw.md)\n- [Lindy vs QwenPaw](https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.md)\n- [Lindy vs ZeroClaw](https://www.anchorterminal.com/compare/lindy-vs-zeroclaw.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [nanobot vs ZeroClaw](https://www.anchorterminal.com/compare/nanobot-vs-zeroclaw.md)\n- [NanoClaw vs QwenPaw](https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.md)\n- [NanoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-zeroclaw.md)\n- [Dots vs QwenPaw](https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.md)\n- [Dots vs ZeroClaw](https://www.anchorterminal.com/compare/openai-dots-vs-zeroclaw.md)\n- [OpenClaw vs QwenPaw](https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.md)\n- [OpenClaw vs ZeroClaw](https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [PicoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.md)\n- [Poke vs QwenPaw](https://www.anchorterminal.com/compare/poke-vs-qwenpaw.md)\n- [Poke vs ZeroClaw](https://www.anchorterminal.com/compare/poke-vs-zeroclaw.md)\n- [QwenPaw vs Zo Computer](https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.md)\n- [ZeroClaw vs Zo Computer](https://www.anchorterminal.com/compare/zeroclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "QwenPaw vs ZeroClaw", "url": "" } ], "description": "ZeroClaw scores 70.2 (BB) to QwenPaw's 62.2 (B) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "QwenPaw B 62.2", "ZeroClaw BB 70.2", "scores" ], "h1": "QwenPaw vs ZeroClaw", "image": "https://www.anchorterminal.com/assets/og/compare-qwenpaw-vs-zeroclaw.png", "path": "/compare/qwenpaw-vs-zeroclaw", "published": "2026-10-01", "section": "tools", "title": "QwenPaw vs ZeroClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw" }, "tokens": { "markdown": 2550, "slim": 530 }, "version": 1 }