# AstrBot > AstrBot is an open-source chatbot and agent program that the owner runs and connects to messaging platforms such as QQ, Telegram, Slack, Discord, Lark and WeCom, with scheduled tasks, MCP tools, plugins and a web admin panel. - Canonical: https://www.anchorterminal.com/tools/astrbot - Markdown: https://www.anchorterminal.com/tools/astrbot.md (~8,600 tokens) - Slim: https://www.anchorterminal.com/tools/astrbot.min.md (~1,930 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/astrbot.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - Updated: 2026-10-12 ## Overview **Grade C · 58.8/100 · rank #584 of 986 · #8 in Personal assistants · not agent-ready · confidence medium** ## Assessment Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default. ## Facts | Field | Value | | --- | --- | | Vendor | AstrBotDevs (https://astrbot.app) | | Kind | Agent harness | | Category | Personal assistants (https://www.anchorterminal.com/categories/personal-assistants) | | Auth | OAuth or key · No account with the project. The web panel signs in with the user `astrbot` and a random initial password printed in the startup log, with optional TOTP and a login rate limit (https://github.com/AstrBotDevs/AstrBot/blob/master/docs/en/use/webui.md). Outside programs use `abk_` API keys created in Settings, OpenAPI, sent as `Authorization: Bearer` or `X-API-Key`, limited by 11 scopes and two sensitive sub-scopes and stored as PBKDF2 hashes (https://github.com/AstrBotDevs/AstrBot/blob/master/docs/en/dev/openapi.md). Messaging platform tokens and model provider keys are entered in the panel and kept in `data/cmd_config.json`. | | Pricing | Free (Free · OSS) · Free under AGPL-3.0 with nothing to buy. The EULA says the team sells no service and that a request for payment is a likely scam (https://github.com/AstrBotDevs/AstrBot/blob/master/EULA.md). The owner pays the model provider and any search or sandbox service, or nothing with a local model. The README links a paid third-party cloud host and several model resellers through referral links (checked 2026-10-12). | | x402 | No · No x402, MPP or L402 in the docs, the OpenAPI file or the source (checked 2026-10-12). | | Licence | AGPL-3.0-or-later | | Packages | pypi: `astrbot`; oci: `soulter/astrbot` | | Source | https://github.com/AstrBotDevs/AstrBot | | Docs | https://docs.astrbot.app | | llms.txt | not found | | Last release | 2026-09-27 | | GitHub stars | 41,800 (as of 2026-10-12) | | What it is | A chatbot and agent program with a development framework for plugins. It answers in private and group chats on the platforms the owner connects, and it is a personal assistant only as far as the owner adds plugins or MCP servers for their own accounts | | Runs | On the owner's machine or server. `uv tool install astrbot` with Python 3.12 or later, the `soulter/astrbot` Docker image, a desktop app, or Kubernetes and panel installs (https://github.com/AstrBotDevs/AstrBot) | | Channels | Official adapters for QQ, OneBot v11, Telegram, WeCom and WeCom AI Bot, WeChat Official Accounts, Lark, DingTalk, Slack, Discord, LINE, Satori, KOOK, Misskey and Mattermost, plus a built-in web chat. Matrix, Rocket.Chat and VoceChat are community plugins. WhatsApp is listed as coming soon | | Acts without asking | Replies, `send_message_to_user`, `future_task` scheduling, web search and MCP tools all run with no approval prompt. A scheduled task wakes the agent, which may call paid models and send messages | | Approval controls | None per tool call. Per-persona tool selection, administrator IDs, a session whitelist, command permissions, and computer use off by default with role permissions | | Accounts | Bot credentials for each messaging platform and keys for model, search and sandbox providers. No built-in mail, calendar or file-storage connector. These come only through MCP servers or third-party plugins | | Credential storage | Platform tokens and provider keys are kept in `data/cmd_config.json` on the owner's disk. We found no encryption of them in the config code. Developer API keys and the panel password are stored as PBKDF2 hashes | | Memory | Conversation history and platform message history in SQLite (`data/data_v4.db`), a knowledge base on FAISS, and context compression. No built-in long-term memory of the owner was found. `/reset` clears a conversation's context, `/del` deletes it, and the panel and API delete conversations and sessions | | Model providers | OpenAI-compatible services, Anthropic, Google Gemini, DeepSeek, Moonshot, Zhipu and others, Ollama or LM Studio for local models, or a Dify, Coze, Bailian or DeerFlow agent in place of the built-in one. The chosen provider receives the conversation | | HTTP API | `/api/v1` on port 6185 since v4.18.0, with `abk_` keys, 11 scopes and two sensitive sub-scopes. OpenAPI file with 170 paths and 240 operations at https://github.com/AstrBotDevs/AstrBot/blob/master/docs/public/openapi.json and on the running server at `/api/v1/openapi.json` | | MCP client | stdio, SSE and Streamable HTTP, with custom headers for remote servers and a launcher allowlist for stdio | | Telemetry | On by default to tickstats.soulter.top. `ASTRBOT_DISABLE_METRICS=1` or `disable_metrics` in the config turns it off | | Cost | Free under AGPL-3.0. The owner pays the model provider and any search or sandbox service, or nothing with a local model. The EULA says the team sells nothing | | Releases in 90 days | About 15 tags from v4.26.6 (14 July 2026) to v4.29.0-beta.2 (11 October 2026). Latest stable v4.28.2 of 27 September 2026 | | Capabilities | assistant.proactive, assistant.messaging, assistant.self-hosted, agent.mcp-client | | Tags | open-source, self-hosted, free, no-card, python, docker, openapi, agpl, telemetry-default-on | | JSON | https://www.anchorterminal.com/api/v1/tools/astrbot.json | ## Score breakdown (methodology v0.4, October 2026 research run) Assessed 2026-10-12 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 81 | 16.2 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 62 | 10.1 | | Agent ergonomics | 13% | 16.2 | 54 | 8.8 | | Security & auth | 14% | 17.5 | 44 | 7.7 | | Payments & pricing | 10% | 12.5 | 60 | 7.5 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 81 | 7.1 | | Transparency & trust (editorial 56, provenance 23) | 7% | 8.8 | 40 | 3.5 | | Negative events | up to −15 | up to −15 | 2025-11-14. GHSA-4m32-cjv7-f425 (CVE-2025-55449, critical, 9.8), a hard-coded JWT signing key that let an unauthenticated attacker install a plugin and run commands on any reachable instance at 3.5.17 or earlier. Patched in 3.5.18 on 21 June 2025 and published five months later, inside the last 12 months. Fixed and documented, so the deduction decays to -2. https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-4m32-cjv7-f425 | -2 | | **Total** | | | | **58.8 → C** | ### Why each score - Reliability 81: Read with the local-software lines, as software the owner runs. The README installs `astrbot` with uv on Python 3.12 or later, and a Docker image, a desktop app and Kubernetes files are documented. We read the package name from the README and pyproject.toml and did not open the registry page (20). The unit test workflow runs pytest on Ubuntu, macOS and Windows, with the Windows lane marked best-effort, and the master runs we saw on 12 October 2026 passed, one cancelled (23). 794 open issues and 268 open pull requests on 12 October, with bug reports filed that day on knowledge-base data loss (#10529, #10531) still unanswered and most reports from the previous week showing one or two comments. A stale workflow marks idle bug reports after 60 days and closes them 30 days later (14 of 25). Semantic version tags with betas, and a dated changelog file per release in English and Chinese. No breaking-change section was found in the 4.26 to 4.29 files, though notes name moved settings and the command docs carry an upgrade note (9 of 15). 4.28.2 is a stable 4.x release (15). - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 62: Graded on what an outside agent reads, the HTTP API and the built-in tool definitions. The repository publishes an OpenAPI file for `/api/v1` with 170 paths, 240 operations and 60 schemas, and a running server gives it at `/api/v1/openapi.json`. Configuration payloads are open JSON objects by design (22 of 25). No llms.txt on docs.astrbot.app (404) (0). Every operation has a summary and its required scope and no other description. The usage docs say what scheduling does not do and when each MCP transport applies (10 of 20). Built-in tools such as `future_task` have typed parameters with an enum for the action, while `send_message_to_user` names its component types only in prose (9 of 15). One curl example and a table of message segment types. The OpenAPI file documents only 200 responses, and the docs name one error, 403 for a missing scope (6 of 15). Routes carry a `/api/v1` prefix and every release has a dated changelog (15). - Agent ergonomics 54: Harness reading, scored on what an agent or pipeline driving it has to supply. Personas choose tools per MCP server or per tool, a two-stage mode sends tool names before full schemas, and context compression is built in (19 of 25). List routes take page and page size, agent runs stop at 128 steps by default and tool calls have a timeout setting (14 of 20). Responses use one envelope and the scope error is named, with no list of error codes (8 of 20). No idempotency keys or retry guidance, and a one-off scheduled task is deleted after its run even when the run fails (5 of 20). Three commands install and start it, and a chat call needs only `message` and `username`, but there is no client SDK for the HTTP API (8 of 15). - Security & auth 44: Harness reading of the framework checklist, as the Goose dossier uses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Usage statistics are on by default and go to tickstats.soulter.top with the hostname, an installation UUID, version, model name, adapter name, a hashed sender ID and installed plugin repository URLs. No message text is sent and one variable turns it off (14). No tool call asks for approval, so replies, proactive messages, scheduling and MCP tools run unasked. Shell, Python and file tools are off by default and administrator-only, with a role permission matrix and bubblewrap or Seatbelt isolation on master, and stdio MCP launchers are checked against an allowlist (11). No prompt-injection guidance found. Safe Mode is a content rule in the system prompt (2). Logs, a trace view that is off by default, stored conversations and token statistics (9). No SECURITY.md and no security.txt. GitHub private reporting is on, two advisories are published, one with a CVE, and the repository has a CodeQL workflow. No bounty (8). API keys are scoped and hashed and the panel has TOTP, while the panel binds 0.0.0.0 by default and we found no encryption of stored platform and provider tokens. - Payments & pricing 60: Read with the self-hosted rule. No payment protocol (0). Free under AGPL-3.0, and the EULA says the team sells no service, so 20, 20 and 20 on the last three lines. It runs with a local model through Ollama or LM Studio and needs no sign-up. - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 81: v4.28.2, the latest stable release, is dated 27 September 2026, and v4.29.0-beta.2 followed on 11 October (30). About 15 tags in the 90 days to 12 October 2026 (20). Commits land on master daily and most issues from the past week show a comment, against 794 open issues and 268 open pull requests (15 of 25). Not an MCP server. The PyPI package, Docker image and desktop app are built from the same tags by the release workflow, and we did not open the registry pages (9 of 15). CI passes on master and a CodeQL workflow is present, while Dependabot is configured for GitHub Actions only and dependencies are given as lower bounds (7 of 10). - Transparency & trust 40: AGPL-3.0-or-later with the whole source public. The EULA adds conditions on top, among them content restrictions and a grant it calls non-transferable and non-sublicensable, which sits oddly beside the AGPL (26 of 30). The only data statement is section 8 of the EULA. It names no recipient, retention period or field list, and says nothing personally identifiable is collected while the code sends the machine's hostname and an installation ID. There is no privacy policy (8 of 30). Deprecated settings are marked with the version in the config docs and 4.27.0 added runtime warnings for deprecated APIs. No deprecation policy (10 of 20). Telemetry is disclosed in the EULA with an opt-out variable and a config key, is on by default, and its fields are not listed anywhere but the source (12 of 20). Fix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (24 items): https://www.anchorterminal.com/fixes/astrbot.md (JSON https://www.anchorterminal.com/fixes/astrbot.json) ### What we couldn't check - Kind. Recorded as `harness`, the closest kind the briefs define for a self-hosted agent program, with `metrics.kind` local. Schema is read on the HTTP API and tool definitions, and Ergonomics and Security with the harness reading the Goose dossier uses - Category fit. AstrBot is a multi-platform chatbot and agent platform more than a personal assistant. It has scheduled tasks and messaging but no built-in mail, calendar or file-account connectors and no long-term memory of the owner, so `assistant.accounts` and `assistant.memory` are not claimed - When the hostname field was added to the usage statistics. It is present at v4.28.2 and on master. With no date established we took no deduction and scored it under Transparency and Security - Whether stored platform tokens and provider keys are encrypted at rest. We found no encryption in the config code and did not run the software - The advisory for CVE-2025-55449 cites monitoring from AstrBot Cloud of which versions instances run. What AstrBot Cloud is and what it receives was not established beyond the usage statistics and the plugin market at cloud.astrbot.app - unchecked: the astrbot.app home page, which is script-drawn. Nothing on the listing rests on it - unchecked: the PyPI and Docker Hub pages. Package names come from the README, pyproject.toml and compose.yml, and release dates from git tags - unchecked: reply times on individual issues. Only comment counts on the first page of open issues were read - unchecked: the domain registration date and who operates tickstats.soulter.top - The docs on master describe 4.29 beta behaviour. The role permission matrix for computer use is not in the 4.28.2 defaults, which have only the runtime switch and the administrator-only flag - The EULA forbids processing content that involves personal privacy or sensitive personal information, which a personal assistant reading its owner's messages would do. Recorded as a fact, no deduction ### Sources - repository README: (seen 2026-10-12) - docs overview (source): (seen 2026-10-12) - EULA, last updated 12 January 2026: (seen 2026-10-12) - proactive capabilities docs (source): (seen 2026-10-12) - agent sandbox and computer use docs (source): (seen 2026-10-12) - MCP docs (source): (seen 2026-10-12) - WebUI docs (source): (seen 2026-10-12) - HTTP API docs (source): (seen 2026-10-12) - API scope reference (source): (seen 2026-10-12) - OpenAPI file, read as the description file and not the rendered viewer: (seen 2026-10-12) - default configuration: (seen 2026-10-12) - telemetry code: (seen 2026-10-12) - scheduling tool definition: (seen 2026-10-12) - message tool definition: (seen 2026-10-12) - MCP client: (seen 2026-10-12) - dashboard server bind address: (seen 2026-10-12) - API key service: (seen 2026-10-12) - built-in commands docs (source): (seen 2026-10-12) - pyproject.toml: (seen 2026-10-12) - Compose file: (seen 2026-10-12) - unit test workflow: (seen 2026-10-12) - unit test runs on master: (seen 2026-10-12) - releases: (seen 2026-10-12) - changelog for 4.28.2: (seen 2026-10-12) - open issues: (seen 2026-10-12) - security advisories: (seen 2026-10-12) - GHSA-4m32-cjv7-f425: (seen 2026-10-12) - security policy page (none set up): (seen 2026-10-12) - docs site robots.txt (comments only, no rules): (seen 2026-10-12) - docs site llms.txt (404): (seen 2026-10-12) - astrbot.app security.txt (script-drawn page, no file): (seen 2026-10-12) ## Who's behind it (provenance 23/100, checked 2026-10-12) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | not found | 0/20 | | Domain age | astrbot.app, no registry record we could read | 0/15 | | Endpoint on the vendor's domain | no hosted endpoint | n/a | | Terms of service | read, states 4 of the 7 things a reader expects | 7.4/10 | | Privacy policy | nothing hosted, not scored | n/a | | Status page | not found | 0/10 | | Changelog | published | 10/10 | | security.txt | not found | 0/10 | No legal entity was found. The docs call AstrBot a non-profit project under the AstrBotDevs organisation, and the EULA speaks for the AstrBot Team. The EULA in the repository (last updated 12 January 2026) is the only terms document found. Its section 8 is the only privacy statement, so no privacy link is given. astrbot.app answers every path, robots.txt and `/.well-known/security.txt` included, with the same script-drawn page, so the site has no robots rules and no security.txt. docs.astrbot.app answers 404 for security.txt and llms.txt. GitHub says the project has not set up a SECURITY.md. A Report a vulnerability button is shown and two advisories are published. Usage statistics go to tickstats.soulter.top, a host outside the project's domain. The domain's registration date was not looked up. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service** (https://github.com/AstrBotDevs/AstrBot/blob/master/EULA.md), read 2026-10-12, dated 2026-01-12, states 4 of the 7 things a reader expects. - Gives the date it was last updated. Last updated 2026-01-12. - States a limit on its liability. Rules out indirect and consequential losses, with no cap named in this sentence. - Not found in the text. Says how the agreement or account can be ended. - Not found in the text. Says how changes to the terms are announced. - Not found in the text. Refers to a service level or uptime commitment. - Also in the text (2026-10-08). AstrBot is free open-source software released under the GNU Affero General Public License v3. "AstrBot is a **free and open-source software project** released under the **GNU Affero General Public License v3 (AGPLv3)**." - Also in the text (2026-10-08). Anonymous usage statistics may be collected, and an environment variable turns the collection off. "You may manually disable this feature by setting the environment variable `ASTRBOT_DISABLE_METRICS=1` to turn off anonymous metrics collection." **Privacy policy**. Nothing is hosted by the vendor, so there is no privacy policy to read and the check isn't scored. ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Strengths - Official adapters for 14 messaging platforms in the README table, among them QQ, Telegram, Slack, Discord, LINE, Lark, DingTalk and WeCom - Agent shell, Python and file tools are off by default (`computer_use_runtime` is `none`) and limited to administrators when turned on - HTTP API under `/api/v1` with a published OpenAPI file of 170 paths and API keys limited by 11 scopes, stored as PBKDF2 hashes - About 15 tagged releases in the 90 days to 12 October 2026, each with a dated changelog file in English and Chinese - Unit tests run on Linux, macOS and Windows, and the last master runs we saw on 12 October 2026 passed ## Weaknesses - No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking - No built-in mail, calendar or file-account connector and no long-term memory of the owner. Both depend on third-party plugins or MCP servers - Usage statistics are on by default and include the hostname and an installation ID, while the EULA says nothing personally identifiable is collected - The web panel listens on 0.0.0.0 by default, and the repository has no SECURITY.md or security.txt - No prompt-injection guidance found, although group messages, web pages and MCP results all reach the model ## Before you call it (notes for agents) 1. Set `ASTRBOT_DISABLE_METRICS=1` before the first start. Statistics, including the hostname, are sent to tickstats.soulter.top by default 2. Set `dashboard.host` to 127.0.0.1 in `data/cmd_config.json`, or the `DASHBOARD_HOST` variable, unless remote access is intended. The default is 0.0.0.0 3. Create an `abk_` key in Settings, OpenAPI with only the scopes needed, and send it as `Authorization: Bearer` or `X-API-Key` 4. Include `username` in every `POST /api/v1/chat` body. Without the `chat:admin` scope an administrator ID is rejected 5. Check Extensions, Future Tasks after asking for a schedule. One-off tasks are deleted after their run even when the run fails ## Connect Install: ```bash uv tool install astrbot --python 3.12 && astrbot init && astrbot run ``` First request: ```bash curl -N 'http://localhost:6185/api/v1/chat' -H 'Authorization: Bearer abk_xxx' -H 'Content-Type: application/json' -d '{"message":"Hello","username":"alice"}' ``` ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | ZeroClaw | BB | 70.2 | 161 | assistant.proactive, assistant.messaging, assistant.self-hosted, agent.mcp-client | no | https://www.anchorterminal.com/tools/zeroclaw.md | | NanoClaw | B | 68.3 | 229 | assistant.proactive, assistant.messaging, assistant.self-hosted, agent.mcp-client | no | https://www.anchorterminal.com/tools/nanoclaw.md | | Hermes Agent | B | 67.9 | 244 | assistant.proactive, assistant.messaging, assistant.self-hosted, agent.mcp-client | no | https://www.anchorterminal.com/tools/hermes-agent.md | | OpenClaw | B | 67.1 | 270 | assistant.proactive, assistant.messaging, assistant.self-hosted, agent.mcp-client | no | https://www.anchorterminal.com/tools/openclaw.md | | IronClaw | B | 66.7 | 288 | assistant.proactive, assistant.messaging, assistant.self-hosted, agent.mcp-client | no | https://www.anchorterminal.com/tools/ironclaw.md | | nanobot | B | 62.4 | 446 | assistant.proactive, assistant.messaging, assistant.self-hosted, agent.mcp-client | no | https://www.anchorterminal.com/tools/nanobot.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - The README describes AstrBot as an open-source all-in-one Agent chatbot platform for individuals, developers and teams, and the docs call it an Agentic assistant for personal and group chats (source: , ) - Proactive capabilities (the `future_task` tool, on by default through `add_cron_tools`) let the agent schedule its own cron or one-off runs and message the result. The docs call the feature experimental and say it is not continuous autonomous monitoring (source: ) - No approval or confirmation step for tool calls was found in the agent code. Controls are per-persona tool selection, an administrator list, a session whitelist and role permissions for computer use (source: ) - Agent Computer Use (shell, Python and file tools) defaults to `none` and to administrators only. Master adds a member and administrator permission matrix with bubblewrap or Seatbelt isolation, and third-party sandboxes are in technical preview (source: ) - Usage statistics are on by default and posted to tickstats.soulter.top with the version, operating system, Python version, hostname, an installation UUID, model name, provider type, adapter name, a hashed sender ID and the repository URL of each installed plugin. `ASTRBOT_DISABLE_METRICS=1` or `disable_metrics` turns them off (source: ) - The EULA of 12 January 2026 says AstrBot collects no conversation content and nothing personally identifiable, says the team sells no service, and forbids processing illegal or harmful content (source: ) - GHSA-4m32-cjv7-f425 (CVE-2025-55449, critical, 9.8), a hard-coded JWT signing key that let an attacker install a plugin and run commands, affected 3.5.17 and earlier. Patched in 3.5.18 on 21 June 2025 and published on 14 November 2025 (source: ) - GHSA-cq37-g2qp-3c2p, a path traversal in `/api/chat/get_file` rated high, was published on 1 June 2025 (source: ) - The web panel binds 0.0.0.0:6185 by default and logs a warning. The first start prints a random initial password, and TOTP and a login rate limit are available (source: , ) - The EULA says the team does not audit or guarantee third-party plugins, and every plugin in the plugin market is third-party. The README counts more than 1,000 plugins (source: ) - MCP servers connect over stdio, SSE or Streamable HTTP. stdio launchers are checked against an allowlist and inline code flags are refused, and the docs say local isolation does not cover an MCP server process (source: , ) - GitHub's description calls the project an AI Agent Assistant and development framework that can be an openclaw alternative (source: ) - #8 of 20 in Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md - All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md ## Compare - [AstrBot vs CowAgent](https://www.anchorterminal.com/compare/astrbot-vs-cowagent.md): C 58.8 vs C 58.5 - [AstrBot vs GAIA](https://www.anchorterminal.com/compare/astrbot-vs-gaia.md): C 58.8 vs D 49.5 - [AstrBot vs Gemini Spark](https://www.anchorterminal.com/compare/astrbot-vs-gemini-spark.md): C 58.8 vs F 24.5 - [AstrBot vs Grok Bot](https://www.anchorterminal.com/compare/astrbot-vs-grok-bot.md): C 58.8 vs E 45.2 - [AstrBot vs Haven](https://www.anchorterminal.com/compare/astrbot-vs-haven.md): C 58.8 vs F 22.2 - [AstrBot vs Hermes Agent](https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.md): C 58.8 vs B 67.9 - [AstrBot vs Instinct](https://www.anchorterminal.com/compare/astrbot-vs-instinct.md): C 58.8 vs F 11.4 - [AstrBot vs IronClaw](https://www.anchorterminal.com/compare/astrbot-vs-ironclaw.md): C 58.8 vs B 66.7 - [AstrBot vs Leon](https://www.anchorterminal.com/compare/astrbot-vs-leon.md): C 58.8 vs E 41 - [AstrBot vs Lindy](https://www.anchorterminal.com/compare/astrbot-vs-lindy.md): C 58.8 vs F 32.3 - [AstrBot vs nanobot](https://www.anchorterminal.com/compare/astrbot-vs-nanobot.md): C 58.8 vs B 62.4 - [AstrBot vs NanoClaw](https://www.anchorterminal.com/compare/astrbot-vs-nanoclaw.md): C 58.8 vs B 68.3 - [AstrBot vs Dots](https://www.anchorterminal.com/compare/astrbot-vs-openai-dots.md): C 58.8 vs F 28.3 - [AstrBot vs OpenClaw](https://www.anchorterminal.com/compare/astrbot-vs-openclaw.md): C 58.8 vs B 67.1 - [AstrBot vs PicoClaw](https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.md): C 58.8 vs D 46.1 - [AstrBot vs Poke](https://www.anchorterminal.com/compare/astrbot-vs-poke.md): C 58.8 vs F 37.6 - [AstrBot vs QwenPaw](https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.md): C 58.8 vs B 62.2 - [AstrBot vs ZeroClaw](https://www.anchorterminal.com/compare/astrbot-vs-zeroclaw.md): C 58.8 vs BB 70.2 - [AstrBot vs Zo Computer](https://www.anchorterminal.com/compare/astrbot-vs-zo-computer.md): C 58.8 vs E 43.1 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on astrbot.app or one of its subdomains, or the README of github.com/AstrBotDevs/AstrBot. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "astrbot", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html AstrBot on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![AstrBot on Anchor Terminal](https://www.anchorterminal.com/badges/astrbot.svg)](https://www.anchorterminal.com/tools/astrbot) ``` Plain link: ```html AstrBot on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say AstrBot is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/astrbot-dark.png - Light: https://www.anchorterminal.com/assets/share/astrbot-light.png