# IronClaw (slim)

> IronClaw is an open-source personal AI assistant written in Rust by NEAR AI. The owner runs it as a local service with a web interface, Slack and Telegram channels, Google and GitHub extensions, scheduled automations and persistent memory.

- Full: https://www.anchorterminal.com/tools/ironclaw.md (~8,750 tokens) · this version ~2,130 tokens · JSON https://www.anchorterminal.com/tools/ironclaw.json · canonical https://www.anchorterminal.com/tools/ironclaw
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-12

**B · 66.7/100 · rank #288 of 986 · #5 in Personal assistants · not agent-ready · confidence medium**


Assessment: Credentials stay in an encrypted store and are injected at the host boundary, and extensions declare per-tool permissions, network targets and OAuth scopes. The global auto-approve setting defaults to on in the 1.4.1 source, so tools marked ask, such as `gmail.send_message`, run unprompted until the owner turns it off.

## Facts

- Kind: Agent harness · vendor: NEAR AI · category: Personal assistants · legal entity: Jasnah, Inc. d/b/a NEAR AI · provenance 71/100
- Local only (HTTP)
- Auth: OAuth or key · pricing: Freemium · x402: no · licence: MIT OR Apache-2.0
- Probe metrics: not measured yet (probes haven't run)
- Version: 1.4.1 of 29 September 2026 (tag `ironclaw-v1.4.1`). 1.0.0 of 27 July 2026 was a ground-up rebuild with no migration from 0.29 (https://github.com/nearai/ironclaw/releases)
- Where it runs: A single binary on macOS, Linux and Windows, as a launchd or systemd user service, bound to 127.0.0.1:3000 by default. State sits under `~/.ironclaw/reborn` in embedded libSQL files, or PostgreSQL 15 or later for served deployments. NEAR AI also sells hosted instances at agent.near.ai, which we did not grade
- Approval controls: Each tool has a default permission of allow, ask or deny. Owners can set a tool to disabled, ask each time or always allow. Global auto-approve defaults to on and covers tools marked ask. Financial, approval-changing and budget-changing effects always ask (https://github.com/nearai/ironclaw/blob/ironclaw-v1.4.1/crates/kernel/ironclaw_approvals/src/profile_gate.rs)
- Accounts and scopes: Gmail (`gmail.readonly`, `gmail.send`, `gmail.modify`), Google Calendar (`calendar.readonly`, `calendar.events`), Drive (`drive`, `drive.readonly`), Docs, Sheets, Slides, GitHub (49 tools), Slack user OAuth (14 scopes including `chat:write` and `search:read`), Telegram bot and linked personal account, Notion over MCP. The owner supplies their own Google OAuth client
- Credential storage: An encrypted secret store (AES-256-GCM per the README) with the master key in the OS keychain, or `IRONCLAW_REBORN_SECRET_MASTER_KEY` on a headless host. Tools never receive the secret. The host adds it to requests bound for declared hosts
- Memory: Workspace documents under paths such as `daily/` and `MEMORY.md`, with tools `ironclaw.memory.read`, `write`, `search`, `tree` and `profile_set`, all allowed by default. A mem0 backend is optional. No delete tool is declared, and the docs describe no deletion procedure beyond the local files
- Channels: Web interface, terminal (`ironclaw repl`, `ironclaw run`), Slack and Telegram, both by webhook over public HTTPS. Discord, Signal, WeChat and WeCom were in 0.x and are not in 1.x
- Model providers: More than twenty per the docs, among them NEAR AI (the default), Anthropic, OpenAI, Gemini, Bedrock, OpenRouter, Groq, Mistral and Ollama for local inference. Message content goes to whichever provider the owner selects
- Proactive work: Scheduled and triggered automations with a validated execution contract, a run-now action, background subagents and a per-user notification inbox for parked approvals
- API: OpenAI-compatible `POST /api/v1/responses` and `GET /api/v1/responses/{id}`, plus a raw `/v1/chat/completions` proxy. Bearer token, 30 requests per 60 seconds per user. No OpenAPI file in the repository
- MCP client: HTTP(S) JSON-RPC only, packaged as extensions. stdio is rejected. Registry entries for Asana, Cloudflare, Intercom, Linear, NEAR AI, Notion, Sentry and Stripe
- Sandbox: WASM extensions run in Wasmtime 48.0.3 with declared network targets and egress limits. A Docker sandbox with a per-user egress proxy is available on the local-Docker profile
- Telemetry: The README states no telemetry or analytics, and we found no analytics library in the source. Trace Commons uploads redacted traces only after opt-in to an endpoint the owner names
- Hosted plans: ironclaw.com lists Starter (shown as $5 beside $0 a month, 1 agent, $5 credits), Basic at $20 a month (2 agents) and Pro+ at $200 a month (5 agents) on NEAR AI Cloud
- Activity: 12,648 stars, 1,363 open issues and 183 open pull requests on 12 October 2026. Last commit on `main` 10 September 2026, last release 29 September 2026
- Prices: Hosted Basic plan (2 agents, $20 credits) $20 per month (plan); Hosted Pro+ plan (5 agents, $200 credits) $200 per month (plan)

- Scores: Reliability 67, Performance pending, Schema & documentation 74, Agent ergonomics 69, Security & auth 66, Payments & pricing 60, Task success pending, Maintenance & community 74, Transparency & trust 75 · negative events -2 · total over the 7 assessed categories
- Why: Reliability, Read with the local-software lines, as the Goose and OpenHands dossiers are. · Schema & documentation, Harness reading, as for Goose. · Agent ergonomics, Harness reading, scored on what a caller driving it has to supply. · Security & auth, Harness reading of the framework checklist, as for Goose and OpenHands. · Payments & pricing, Read with the self-hosted rule, scoring the hosted option where one is sold. · Maintenance & community, 1.4.1 was published on 29 September 2026, 13 days before this check (30). · Transparency & trust, MIT or Apache-2.0, with the whole runtime in one public repository (30).
- Sources: 29, open questions: 12, both in the full twin
- Capabilities: assistant.proactive, assistant.messaging, assistant.accounts, assistant.memory, assistant.self-hosted, agent.mcp-client
- JSON: https://www.anchorterminal.com/api/v1/tools/ironclaw.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/ironclaw.svg` or a link to https://www.anchorterminal.com/tools/ironclaw from a page on ironclaw.com or one of its subdomains, or the README of github.com/nearai/ironclaw, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Open Settings and turn off global auto-approve, or set send and delete tools to ask each time, before connecting mail or chat accounts
2. Install with the release installer and run `ironclaw onboard`. 1.x does not migrate 0.29 data, so use a fresh home directory
3. Call `POST /api/v1/responses` with the bearer token from `~/.ironclaw/reborn/webui-token`. Keep under 30 requests in 60 seconds
4. Resolve approval and OAuth gates in the web interface. The Responses API fails the turn instead of surfacing them
5. Connect MCP servers over HTTP only. The stdio transport is rejected

## Connect

```bash
IRONCLAW_RELEASE_TAG=ironclaw-v1.4.1
curl --proto '=https' --tlsv1.2 -LsSf "https://github.com/nearai/ironclaw/releases/download/${IRONCLAW_RELEASE_TAG}/ironclaw-installer.sh" | sh
ironclaw onboard
```

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| ZeroClaw | BB | 70.2 | assistant.proactive, assistant.messaging, assistant.memory, assistant.self-hosted, assistant.accounts, agent.mcp-client | https://www.anchorterminal.com/tools/zeroclaw.min.md |
| NanoClaw | B | 68.3 | assistant.proactive, assistant.messaging, assistant.memory, assistant.self-hosted, agent.mcp-client, assistant.accounts | https://www.anchorterminal.com/tools/nanoclaw.min.md |
| Hermes Agent | B | 67.9 | assistant.proactive, assistant.messaging, assistant.accounts, assistant.memory, assistant.self-hosted, agent.mcp-client | https://www.anchorterminal.com/tools/hermes-agent.min.md |
| OpenClaw | B | 67.1 | assistant.proactive, assistant.messaging, assistant.accounts, assistant.memory, assistant.self-hosted, agent.mcp-client | https://www.anchorterminal.com/tools/openclaw.min.md |
| nanobot | B | 62.4 | assistant.proactive, assistant.messaging, assistant.memory, assistant.self-hosted, assistant.accounts, agent.mcp-client | https://www.anchorterminal.com/tools/nanobot.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)