Tools / OpenClaw

OpenClaw Review

A self-hosted gateway that connects your chat apps to an always-on AI assistant

Last reviewed: October 2026

TL;DR

OpenClaw runs a single Gateway process on your own machine that links messaging apps (WhatsApp, Telegram, Discord, Slack, Signal, iMessage, Teams, and 20+ more) to an AI agent that can act with tools and skills. It is stewarded by an independent foundation and is one of the most-starred projects on GitHub. Its security model is explicit but demanding: tools run on the host by default, so sandboxing and pairing deserve your attention before you connect real accounts.

License

MIT

Self-hosted

Yes

Cloud option

None

GitHub stars

391.8K★

Checked October 2026

Category

AI Assistants & Agents

Pricing

Free under MIT with no paid tier, hosted service, or token; you pay for your own model API usage and any server

What is OpenClaw?

OpenClaw is a local-first gateway and control plane. The Gateway is the single source of truth for sessions, routing, tools, events, and channel connections, and it serves a CLI, a TUI, a web Control UI, a macOS app, and iOS, Android, Windows, and Linux nodes with voice, Canvas, camera, and screen features on supported platforms. Channels include Discord, iMessage, Slack, Teams, Telegram, WhatsApp, Google Chat, Signal, and more, with additional channels (Matrix, Nostr, Twitch, Zalo) available as plugins. Skills teach the agent repeatable procedures, plugins add channels, providers, and tools through a plugin SDK, and ClawHub is the plugin marketplace. Model providers, including Claude, Codex, and local models, are swappable plugins.

Installation & self-hosting

You need Node.js 24.16+ or 26.1+ (Node 26 is recommended), and the install script can provision a supported Node for you. On macOS, Linux, or WSL2 you run a curl script, on Windows a PowerShell script, or install the npm package globally for existing Node users. Then run openclaw onboard --install-daemon, check openclaw gateway status, and open the Control UI with openclaw dashboard. Docker, Nix, pnpm, bun, and source installs are covered on the install page, and for development you must use pnpm, since plain npm install at the repository root is not supported. Telemetry is limited by default to a daily version check, with anonymous feature statistics opt-in, and update.checkOnStart: false disables both.

User experience

After onboarding you message the assistant from the apps you already use, and the Control UI shows sessions and configuration. It can run as a personal assistant or a shared team deployment, with configuration as the main difference. The README is direct about security defaults: treat inbound messages as untrusted, unknown senders on DM-capable channels are paired by default and you approve them with openclaw pairing approve, and channels can be restricted with allowFrom lists and mention rules in groups. This section reflects the README and docs; we did not run the Gateway.

Key features

  • One Gateway that bridges 20+ messaging channels to an agent
  • Control UI, CLI, TUI, and native apps and device nodes with voice, Canvas, camera, and screen features
  • Skills, plugins, and a plugin SDK, with the ClawHub marketplace
  • Swappable model providers, including hosted and local models
  • DM pairing and allowlists for inbound messages
  • Optional sandboxing and a documented exposure runbook for remote Gateways
  • Daemon install so the Gateway runs as a background service

What OpenClaw does well

  • Meets you in the chat apps you already use, with no new interface to adopt
  • Governed by the OpenClaw Foundation (an independent 501(c)(3) per the README) with no paid tier, hosted service, or token
  • Security defaults that assume hostile input, such as pairing for unknown senders
  • Huge community, with about 392,000 stars and a release on the day of review

Where OpenClaw falls short

  • By default, tools run on the host for the main session unless you configure sandboxing, so an agent with your credentials can take real actions on your machine and accounts
  • Connecting email, calendar, and messaging gives it broad reach, and the README itself tells you to read the security guide before exposing the Gateway remotely or adding other users
  • Date-based versions (v2026.10.2) and fast changes mean configuration can drift between releases
  • You supply and pay for model API keys, and the docs recommend the strongest model available for quality and safety
  • No dedicated known-limitations section, so limits live in the Security and Troubleshooting pages

Pricing

OpenClaw is free under the MIT license and the README states there is no paid tier, hosted service, or token. Costs are your model provider usage and any server you run the Gateway on; the VPS offer on the OpenAlternative page is an affiliate promotion, not a requirement.

OpenClaw vs Grok Bot

Grok Bot is a hosted autonomous teammate and Meta Muse is Meta's assistant. Both bring their own models and infrastructure. OpenClaw gives you the same acting-on-your-behalf experience, but you host the Gateway, pick the models, and decide which accounts it can touch. Compared with Hermes Agent, OpenClaw's emphasis is the gateway and channel layer, with agents as plugins, whereas Hermes emphasizes its own memory and skill-learning loop.

See all Grok Bot alternatives

Best for

  • Individuals who want a personal assistant reachable from their phone's chat apps
  • Tinkerers comfortable running and securing a daemon
  • Teams that want a shared deployment with channel allowlists
  • Users who want to switch models without changing their interface

Not ideal for

  • Anyone who cannot manage the risk of an agent with access to mail, calendar, and messaging
  • Organizations that need audit controls and vendor-backed support
  • Users who want a polished consumer product with no setup

Alternatives

Hermes AgentGrok BotMeta Muse
Compare them all

Final verdict

OpenClaw is the most popular open-source assistant gateway, and its documentation is refreshingly upfront about risk. Start with a dedicated account and a sandbox, keep pairing and allowlists on, and read the security guide before you connect anything you cannot afford to lose.

Sources