An architecture-focused guide to the open-source personal AI agent ecosystem (the "Claw" family).
Not a link dump. Each entry explains what problem it solves, how it solves it, and why that approach matters.
- How to Read This Guide
- The Origin Story
- Architecture Map
- By Category
- Cross-Cutting Comparisons
- By Popularity
- Decision Framework
- Contributing
This guide describes architecture and design intent, not guaranteed working software.
Verification scope: We cloned all repos and read source code to verify repo existence, license files, primary language, and structural claims (file counts, module organization, trait definitions). We did not build binaries, run tests, or verify runtime behavior. Performance numbers (binary size, RAM, boot time) are taken from project READMEs — not independently measured. Channel and tool counts are based on code definitions, not confirmed integrations.
LOC and numeric claims: Many projects market themselves with selective metrics. "~4K LOC" may refer to a core subset while the full codebase is 10-50x larger. "Zero unsafe code" may mean workspace-level deny with per-crate exceptions. We note these nuances where we found them, but we may have missed some.
Opinions and superlatives: Phrases like "the most auditable" or "designed for maximum security" reflect design intent and relative positioning within this ecosystem, not absolute benchmarks. We have not conducted formal security audits or performance comparisons.
License warnings: Two projects (HermitClaw, DroidClaw) had no LICENSE file at the time of our audit. Without a license file, code is legally "all rights reserved" regardless of verbal claims. Check the repo before depending on it.
Freshness: Star counts and version numbers are snapshots. The shields.io badges above each entry are live. The "By Popularity" table is a point-in-time reference.
Not affiliated: This guide is not endorsed by or affiliated with any listed project. If you are a maintainer and believe something is inaccurate, please open an issue.
Each framework entry follows this structure:
Concept — The core idea in one sentence.
Architecture — How the agent loop, tools, and state management work.
Key Trade-off — What this framework optimizes for, and what it sacrifices.
When to Choose — The scenario where this is the best option.
In November 2025, Peter Steinberger released Clawdbot — a personal AI assistant that operated across messaging channels. Renamed OpenClaw in January 2026, it became one of the fastest-growing open-source projects on GitHub.
The community reaction was split. Some loved it. Others thought hundreds of thousands of lines of TypeScript was too much for a personal assistant. Within 3 months, dozens of alternatives emerged — each making a different trade-off:
- "What if we stripped it down to a small, auditable core?" → NanoClaw
- "What if it ran on a $5 microcontroller?" → MimiClaw
- "What if the agent improved itself?" → Hermes Agent
- "What if the database WAS the agent?" → SupaClaw
- "What if it were a creature, not a tool?" → HermitClaw
This guide maps that design space.
Footprint Small ◄──────────────────────► Large
│ │
┌──────────────────┼────────────────────────────────┤
│ │ │
│ Embedded/Edge │ Server/Cloud │
│ │ │
│ NullClaw 678KB │ nanobot ··· NanoClaw │
│ MimiClaw ~2MB │ BabyClaw · TinyClaw │
│ Autobot 2MB │ Hermes ··· AstrBot │
│ PicoClaw ~8MB │ TrinityClaw · SupaClaw │
│ ZeptoClaw ~6MB │ HermitClaw │
│ │ │
│ ZeroClaw ~9MB │ MicroClaw · OpenCrabs │
│ FastClaw (Go) │ NemoClaw (OpenClaw wrapper) │
│ │ Moltis ···· IronClaw │
│ │ OpenFang ·· OpenClaw │
│ │ │
│ ◄── Rust/Zig/C/Go ──► │ ◄── TS/Python ──► │
│ compile to binary │ need runtime │
└──────────────────┴────────────────────────────────┘
│
Learning Static │ ──────────────────► Self-improving
│
Most │ Hermes (skill auto-creation)
agents │ OpenCrabs (self-modification)
│ HermitClaw (belief evolution)
│ TrinityClaw (dynamic skills)
│ BabyClaw (personality cron)
How to read: Left side = compiled, single-binary agents sorted by size. Right side = runtime-dependent agents. Bottom axis highlights which agents have learning/self-improvement capabilities.
Concept: The original. A hub-and-spoke gateway that routes messages from 22+ channels through an execution pipeline with retry/fallback logic.
Architecture: Large TypeScript monorepo (our source audit measured ~200K LOC in .ts/.js files; community references cite ~500K but this is unverified). Messages enter via the Gateway WebSocket on port 18789. The execution pipeline handles queue policies, retry/fallback, and skill resolution through a priority system (workspace → bundled → plugins). State management and memory indexing are handled internally.
Key Trade-off: Maximum feature completeness at the cost of complexity. The codebase is large enough that no single person can review it all. The openclaw doctor --fix command exists specifically because the system has many failure modes.
When to Choose: You want a production-ready assistant with native iOS/Android apps, voice wake, live canvas, browser-based onboarding, and the largest community in the ecosystem.
TypeScript · MIT · openclaw/openclaw ·
Concept: Not an agent — a security harness. Runs OpenClaw inside NVIDIA OpenShell with kernel-level sandboxing and managed NVIDIA inference.
Architecture: NemoClaw is an OpenClaw plugin + CLI orchestrator, not a standalone agent. It creates a Landlock + seccomp + network namespace sandbox via NVIDIA OpenShell, routes inference through NVIDIA Nemotron models (120B/253B/49B/30B), and enforces per-binary network policies (e.g., Claude Code can only POST to api.anthropic.com/v1/messages). SSRF protection validates full IPv4/IPv6 CIDR ranges. Sandbox images are pinned by SHA256 digest. No agent loop — that lives in OpenClaw.
Key Trade-off: Enterprise-grade kernel isolation at the cost of requiring OpenClaw + NVIDIA OpenShell as prerequisites. Not standalone.
When to Choose: You run OpenClaw in a regulated or security-sensitive environment and need Landlock/seccomp isolation, fine-grained network egress control, and managed NVIDIA inference. Alpha status — not production-ready per their own docs.
TypeScript · Apache-2.0 · NVIDIA/NemoClaw ·
Concept: Container-sandboxed assistant with a small core. No config files — you fork the source and modify it directly via Claude Code.
Architecture: ~20 core TypeScript source files in src/ (70+ files total including tests and skills). Each chat session gets its own Docker container (or Apple Container on macOS for near-instant startup). Credential handling via OneCLI Agent Vault keeps API keys outside containers. State is filesystem-based IPC (JSON files in data/ipc/{group}/). Primarily Claude-based via Agent SDK, but also supports local models via Ollama with an API proxy.
Key Trade-off: Simplicity and security at the cost of upgradeability. Each fork diverges intentionally — "bespoke, not bloatware."
When to Choose: You want a small, auditable codebase with strong container isolation, and you're comfortable modifying source code instead of writing config files.
TypeScript · MIT · qwibitai/nanoclaw ·
Concept: 99% of OpenClaw's functionality in ~4,000 lines of Python. Academic-backed (HKU Data Intelligence Lab).
Architecture: nanobot/ is a Python package with 18+ subdirectories (agent, channels, providers, skills, security, etc. — 97+ Python files total). The project claims "~4K core LOC" but this counts only the agent loop subset (verified via core_agent_lines.sh, which explicitly excludes commands, providers, security, and templates). End-to-end streaming with Anthropic prompt caching. "Dream" two-stage memory separates live conversation from consolidated long-term knowledge.
Key Trade-off: Small core agent loop at the cost of a larger surrounding codebase. The "4K LOC" claim refers to the auditable core, not the full project.
When to Choose: You want a Python-native agent that's small enough to read in an afternoon, with strong multi-channel support (12+ including Chinese platforms) and academic rigor.
Python · MIT · HKUDS/nanobot ·
Concept: A single JavaScript file on Claude Agent SDK. The agent's personality evolves — a cron job analyzes communication patterns every 3 days and rewrites the agent's identity.
Architecture: Everything in index.js. Three-layer persistence: state.json (current state), dated markdown files (history), rolling 50-entry recent.md. Four built-in crons handle personality evolution, pattern detection, skill suggestion, and daily digests.
Key Trade-off: Maximum simplicity at the cost of everything else. Single channel (Telegram), single provider (Claude), no database.
When to Choose: You want the absolute simplest possible agent with an interesting personality evolution mechanic.
JavaScript · MIT · yogesharc/babyclaw ·
Concept: Seven Rust traits define the entire system. Swap any component via config. Deploys from ESP32 firmware to cloud.
Architecture: Core systems are defined as Rust traits (providers, channels, tools, memory, tunnels, peripherals). Everything is compile-time polymorphism — zero runtime overhead. Config-driven component swapping means you choose which implementations to use via TOML, not code changes. Secrets are encrypted at rest. 129+ security tests in CI.
Key Trade-off: Rust's compile-time guarantees and zero overhead at the cost of contributor accessibility. You need to know Rust to extend it.
When to Choose: You want the widest deployment range (ESP32 to cloud) with the smallest footprint (<5MB RAM, <10ms startup, 8.8MB binary) and don't mind Rust.
Rust · MIT/Apache-2.0 · zeroclaw-labs/zeroclaw ·
Concept: Privacy-first. Credentials never enter guest WASM memory. Every request and response is scanned for leaks.
Architecture: WASM sandbox pipeline: WASM → Allowlist → Leak Scan → Credential → Execute → Leak Scan → WASM. A dedicated safety layer handles prompt injection defense. The trait system extends ZeroClaw's model with additional capabilities (database, embedding, network policy). WASM capabilities control resource access.
Key Trade-off: Maximum security at the cost of performance overhead from WASM sandboxing and double leak scanning.
When to Choose: You handle sensitive data and need WASM-level isolation with credential boundary enforcement. Backed by NEAR AI.
Rust · MIT/Apache-2.0 · nearai/ironclaw ·
Concept: An "Agent OS" with 7 bundled autonomous "Hands" that run 24/7 without human prompting.
Architecture: 14 Rust crates: kernel, runtime, api, channels, memory, types, skills, hands, extensions, wire, cli, desktop, migrate, xtask. The 7 bundled Hands (Clip, Lead, Collector, Predictor, Researcher, Twitter, Browser) are always-on autonomous agents — they don't wait for user messages. Custom OFP P2P protocol with HMAC-SHA256 mutual authentication. WASM dual-metered sandbox with Merkle hash-chain auditing and taint tracking.
Key Trade-off: Large scope in the Rust ecosystem (project claims 137K LOC, 40 channel adapters, 26-27 providers — upstream sources vary) at the cost of complexity approaching OpenClaw.
When to Choose: You want autonomous agents that work proactively (not just reactively) with serious security (16 discrete security systems) and a Tauri desktop app.
Rust · MIT/Apache-2.0 · RightNow-AI/openfang ·
Concept: ~46 modular crates (per project README). Designed for auditability — the agent loop fits in ~5,000 LOC.
Architecture: Gateway pattern: User → Moltis → LLM providers via Axum HTTP/WS. Hybrid memory combines SQLite FTS with vector embeddings for cross-session recall. XChaCha20-Poly1305 encryption with Argon2id key derivation. voice support (multiple TTS and STT providers). Session branching from checkpoints. Signed releases via Sigstore keyless signing. Note: the project sets #[deny(unsafe_code)] at workspace level but uses #[allow(unsafe_code)] in specific crates for FFI/WASM interop — a common Rust pattern, but worth noting if "zero unsafe" is a deciding factor for you.
Key Trade-off: Security and auditability at the cost of a large binary (44MB per the project's own README — includes web UI + voice engine).
When to Choose: You want Rust's safety guarantees with voice support and a compact, reviewable agent loop.
Rust · MIT · moltis-org/moltis ·
Concept: 9-layer security all active by default, zero configuration needed. ~6MB binary, ~6MB RAM per workspace.
Architecture: MessageBus routes from Channels → Agent Loop → Provider Stack. 9 security layers all active by default: (1) Sandbox (6 runtime options), (2) Prompt Injection Detection, (3) Secret Leak Scanner, (4) Policy Engine, (5) Input Validator, (6) Shell Blocklist, (7) SSRF Prevention, (8) Chain Alerting (detects dangerous sequences like write→execute), (9) Tool Approval Gate.
Key Trade-off: Security-by-default (9 layers, not 7 as some sources claim) at the cost of flexibility. Multi-tenant capable (hundreds of workspaces at ~6MB each) but opinionated about what's allowed.
When to Choose: You're hosting agents for multiple users and need strong default security without per-tenant configuration.
Rust · Apache-2.0 · qhkm/zeptoclaw ·
Concept: Self-modifying agent. Edits its own source code, rebuilds, and hot-restarts via
exec().
Architecture: Brain system with live-editable files (SOUL, IDENTITY, USER, AGENTS, TOOLS, MEMORY) that can be modified between turns. /rebuild clones source to ~/.opencrabs/source/, builds, and exec() replaces the running process. Local embeddings via embeddinggemma-300M (768-dim, no external API). zeroize crate clears API keys from RAM. A2A Protocol (Agent-to-Agent) via JSON-RPC 2.0.
Key Trade-off: True self-modification at the cost of stability. An agent that rewrites itself can break itself.
When to Choose: You want an agent that learns by modifying its own code and tools, with a tmux-style TUI for parallel sessions.
Rust · MIT · adolfousier/opencrabs ·
Concept: Rust agent with 16 channel adapters (per source audit: Telegram, Discord, Slack, Feishu/Lark, IRC, Web, Matrix, DingTalk, Email, iMessage, Nostr, QQ, Signal, WeChat, WhatsApp, ACP).
Architecture: Unified agent loop rewritten in Rust. Built-in document processing (PDF, DOCX, XLSX, PPTX). ACP (Agent Client Protocol) for stdio server mode. MCP support included. microclaw doctor for diagnostics and microclaw upgrade for self-update.
Key Trade-off: Channel breadth at the cost of maturity. Supports Telegram, Discord, Slack, Feishu/Lark, IRC, Web, Matrix, and more — but the project is pre-v1.0 (v0.1.x).
When to Choose: You need a Rust agent with Feishu/Lark and Chinese platform support alongside Western channels, and don't mind early-stage software.
Rust · MIT · microclaw/microclaw ·
Concept: 678KB binary. 50+ providers, 19 channels, 35+ tools — all under 1MB of RAM. Boots in <2ms.
Architecture: Zig with manual vtable interfaces (function pointer tables — no compiler-generated trait object overhead). comptime metaprogramming avoids proc macro / codegen bloat. SQLite hybrid: vector BLOBs + FTS5 + BM25. Cross-compiles to ARM, x86, RISC-V from a single build.zig. Tiered sandbox auto-detection: Landlock → Firejail → Bubblewrap → Docker.
Key Trade-off: Extreme minimalism at the cost of ecosystem maturity. Zig has a smaller community than Rust or Go.
When to Choose: You want an extremely small agent binary that can run from Raspberry Pi GPIO control to VPS deployment.
Zig · MIT · nullclaw/nullclaw ·
Concept: Go single binary that runs on $10 hardware. Cross-compiles to RISC-V, ARM, MIPS, x86.
Architecture: cmd/ + pkg/ + config/ + web/ structure. Provider abstraction across 30+ LLM backends. Native MCP integration. Reference target: LicheeRV-Nano ($9.90, 0.8GHz single-core). 95% of core code was AI-generated (inspired by nanobot's architecture, but rebuilt from scratch in Go).
Key Trade-off: Hardware accessibility at the cost of feature depth. Go's simplicity enables $10 deployment but limits advanced patterns available in Rust.
When to Choose: You want an agent on cheap hardware (old Android phones via Termux, RISC-V boards, RPi) and Go is your language.
Go · MIT · sipeed/picoclaw ·
Concept: C on ESP32-S3 with FreeRTOS. No Linux, no Node.js, no shell. Runs on USB power.
Architecture: Dual-core: Core 0 handles I/O (WiFi, Telegram, WebSocket, serial), Core 1 runs the agent loop exclusively (pinned via xTaskCreatePinnedToCore). 16MB flash, 8MB PSRAM. ReAct agent loop with up to 10 iterations per turn (4 parallel tool calls per LLM response).
Key Trade-off: Lowest possible power and cost ($5-10 board, ~0.5W) at the cost of limited compute and channels.
When to Choose: You want a physical, always-on AI device that sits on your desk and runs on USB power — not a software agent on a computer.
C · MIT · memovai/mimiclaw ·
Concept: The only agent with a closed learning loop. Complex tasks automatically become reusable skills that improve during subsequent use.
Architecture: Synchronous AIAgent class runs: build prompt → call LLM → dispatch tools → append results → loop (max 90 iterations). The learning loop: complex tasks trigger auto skill creation → skills stored as agentskills.io documents → skills self-modify on subsequent use → Honcho dialectic user modeling builds understanding of the user across sessions. 6 terminal backends: local, Docker, SSH, Modal (serverless), Daytona (cloud workspace), Singularity (HPC). MCP first-class with OAuth and sampling support.
Key Trade-off: Learning and flexibility at the cost of polish. No native apps, no GUI — CLI/TUI + messaging platforms only. Multiple LLM providers (Anthropic, OpenAI, Google, xAI, DeepSeek, Kimi, MiniMax, plus OpenRouter for 200+ models) with live /model swap (no restart).
When to Choose: You want an agent that gets better over time, runs anywhere (laptop to $5 VPS to HPC cluster), and you value model freedom over GUI polish. Also: if you're training your own models (Atropos RL pipeline).
Python · MIT · NousResearch/hermes-agent ·
Concept: Not a tool — an autonomous digital creature. It picks its own research topics, writes reports, and develops emergent beliefs over days and weeks.
Architecture: Continuous 5-second loop: context → LLM → tool → store → reflect. SHA-512 personality genome from keyboard entropy deterministically selects 3 curiosity domains (50 options), 2 thinking styles (16 options), 1 temperament (8 options). Memory inspired by Park et al. 2023 Generative Agents paper: recency (exponential decay) + importance (LLM-rated 1-10) + relevance (cosine similarity). Hierarchical reflection: depth-0 (thoughts) → depth-1 (patterns) → depth-2+ (beliefs).
Key Trade-off: Philosophical novelty at the cost of practical utility. This is closer to art than engineering.
When to Choose: You want to explore what an autonomous AI creature looks like, not build a productivity tool. "A tamagotchi that does research."
Python · No LICENSE file · brendanhogan/hermitclaw ·
Concept: Zero daemon. PostgreSQL IS the application — message broker, state store, scheduler, audit log. Edge Functions for compute.
Architecture: Supabase Edge Functions (Deno) for stateless compute. pg_cron for durable scheduling (not a custom scheduler — SQL guarantees). Row Level Security prevents credential exposure to agents. Vercel AI SDK for multi-provider support. Database backup equals complete system snapshot. All execution state is queryable SQL.
Key Trade-off: Zero infrastructure management at the cost of Supabase lock-in and limited compute (Edge Function constraints).
When to Choose: You already use Supabase and want an agent with zero server management. SELECT * FROM jobs WHERE status = 'failed' is your debugging tool.
TypeScript · MIT · vincenzodomina/supaclaw ·
Concept: Process-per-channel isolation. Each messaging channel (Discord, Telegram, WhatsApp) runs as a forked child process. SQLite WAL is the message broker — no Redis, no RabbitMQ.
Architecture: Dual-runtime: TypeScript (queue management), Node.js fork() (channel processes). Agents communicate via shared SQLite queue with WAL mode for atomic transactions. Chain execution (Agent A output → Agent B input) and fan-out parallelism. Dead-letter queue with 5 retries.
Key Trade-off: Strong channel isolation at the cost of overhead (spawning a forked process per channel).
When to Choose: You want a multi-agent team orchestrator for a "one person company" with SQLite-based durable queuing.
TypeScript · MIT · TinyAGI/tinyagi ·
Concept: 14+ IM platforms, large plugin marketplace, desktop app. Pre-dates the Claw ecosystem (originally QQChannelChatGPT, created Dec 2022) — the most mature codebase listed here.
Architecture: Event bus + message pipeline (3 major refactors since 2022). Plugin marketplace (project claims 1,000+ community plugins). Automatic context compression. Desktop edition (AstrBot-desktop) for Linux/macOS. Monaco Editor in WebUI.
Key Trade-off: Maximum platform coverage and plugin ecosystem at the cost of AGPL-3.0 licensing (most restrictive in the ecosystem — commercial use requires open-sourcing).
When to Choose: You need broad IM platform coverage (especially Chinese platforms: QQ, WeChat Work, Feishu, DingTalk) with a mature plugin ecosystem. Note: some listed platforms like WhatsApp are marked "Coming Soon." Be aware of the AGPL license.
Python · AGPL-3.0 · AstrBotDevs/AstrBot ·
Concept: "Nervous system" architecture with dynamic skill generation — the agent writes its own new tools, validated by AST parsing.
Architecture: Central app.py coordinates 29 read-only core skills and a dynamic skills directory where the agent generates new tools at runtime with AST validation. Can attach to existing Chrome sessions via CDP — accesses your logged-in accounts directly (no API keys needed). Deep Google ecosystem integration (Calendar, Gmail, Drive, Maps). ChromaDB vector storage + JSONL logs.
Key Trade-off: Maximum capability (the agent creates its own tools + uses your browser sessions) at the cost of significant security surface. The README warns: local use only.
When to Choose: You want a local-only agent that deeply integrates with Google services and can automate your existing browser sessions.
Python · MIT · TrinityClaw/trinity-claw ·
Concept: Native Android APK with an embedded Go backend. The entire agent runs on-device — no server needed.
Architecture: Kotlin/Jetpack Compose frontend + Go backend compiled as a native library inside the APK. Local WebSocket at ws://127.0.0.1:18793. 40+ tools organized by category (alarm, calendar, contacts, communication, media, navigation, device control, settings, web). Accessibility service for device automation.
Key Trade-off: True on-device execution at the cost of limited compute. Your phone's CPU is running the agent loop.
When to Choose: You want an AI assistant as a native Android app that works without any server, and can be set as your default digital assistant.
Go/Kotlin · MIT · KarakuriAgent/clawdroid ·
Concept: Turn old phones into AI agents. Give it a goal; it reads the screen via ADB accessibility tree, thinks, taps.
Architecture: Perception-reasoning-action loop. Parses ADB accessibility tree (falls back to screenshot vision for WebViews/Flutter/games). Three execution modes: Interactive (LLM reasoning per step), Workflows (JSON templates, AI-powered), Flows (YAML, deterministic, no LLM). Stuck loop detection + drift detection for resilience.
Key Trade-off: Works with any app without API integration at the cost of speed and reliability. Screen-reading is inherently fragile.
When to Choose: You want to automate Android apps that have no API (messaging, social media, legacy apps) using a $30 old phone.
TypeScript · No LICENSE file · unitedbyai/droidclaw ·
Concept: Crystal language — Ruby syntax, C performance. 2MB binary, 5MB RAM, <20ms startup. Kernel-enforced sandboxing.
Architecture: 98.9% Crystal. Kernel-enforced sandboxing via Docker/bubblewrap mount namespaces (not application-level path checks). Cron jobs fire by publishing InboundMessage to the event bus with channel: "system" — a cron job is literally just a message, triggering a full agent turn. JSONL session management with memory consolidation at 50-message threshold.
Key Trade-off: Best resource efficiency in the ecosystem at the cost of Crystal's small community. Finding contributors is hard.
When to Choose: You want to run dozens of isolated bot instances on a single machine, and you appreciate Ruby-like syntax with C-like performance.
Crystal · MIT · crystal-autobot/autobot ·
Concept: Go single binary with zero dependencies. Built-in Telegram/Discord/Slack, embedded web dashboard, concurrent tool execution via goroutines.
Architecture: Full ReAct agent loop in internal/agent/loop.go (~836 lines). Gateway orchestrates multi-agent teams with pub/sub message bus. 13 built-in tools (exec, file I/O, web fetch/search, memory search, cron, subagent spawn). Plugin system via JSON-RPC 2.0 subprocesses. MCP support (stdio + HTTP). 2 native LLM providers: OpenAI-compatible (covers OpenAI, DeepSeek, Gemini, Groq, Ollama, OpenRouter) + Anthropic Messages API. Dual-layer memory: MEMORY.md (LLM-updated persistent facts) + FTS5 searchable conversation logs. Skills learner auto-extracts patterns after N tool calls. Loop detection via SHA256 hash of consecutive arguments.
Key Trade-off: Go simplicity and zero-dependency deployment at the cost of a smaller community and permissive-by-default security (opt-in Docker sandbox, no kernel-level isolation). OpenClaw plugin bridge available.
When to Choose: You want a single-binary agent that deploys anywhere without Node.js/Python, with built-in channels, web dashboard, and Go's concurrency model for parallel tool execution.
Go · MIT · fastclaw-ai/fastclaw ·
| Approach | Frameworks | How It Works |
|---|---|---|
| WASM Sandbox | IronClaw, OpenFang | Tools run in sandboxed WASM — credentials injected at host/guest boundary |
| Kernel Sandbox (Landlock+seccomp) | NemoClaw (for OpenClaw) | Landlock LSM + seccomp + network namespaces via NVIDIA OpenShell. Per-binary network policies |
| Container Isolation | NanoClaw, Moltis | Per-session Docker/Apple Container. NanoClaw's OneCLI Agent Vault keeps keys outside containers |
| Multi-layer (default-on) | ZeptoClaw, NullClaw | ZeptoClaw: 6 sandbox options + 9 security layers. NullClaw: tiered auto-detection (Landlock → Firejail → Bubblewrap → Docker) |
| Kernel Enforcement | Autobot | Mount namespaces via bubblewrap (OS-level, not application-level) |
| Command Approval | OpenClaw, Hermes, OpenCrabs | Allowlists and user approval gates. Hermes adds SSRF protection + OSV malware scanning |
| Process Isolation | TinyClaw | Each messaging channel runs as a forked child process |
| Hardware Isolation | MimiClaw | FreeRTOS on dedicated microcontroller — no shared OS |
| Tier | Count | Frameworks |
|---|---|---|
| 40+ | OpenFang | |
| 22+ | OpenClaw | |
| 14-29 | AstrBot, MicroClaw, NullClaw, Hermes Agent, PicoClaw, ZeroClaw (29 per source audit) | |
| 5-13 | nanobot, ZeptoClaw, Moltis, OpenCrabs, NanoClaw, ClawDroid, DroidClaw, FastClaw | |
| 1-4 | SupaClaw, Autobot, TinyClaw, BabyClaw, MimiClaw (Telegram + WebSocket) |
| Strategy | Frameworks | How |
|---|---|---|
| Provider-agnostic (20+) | Hermes Agent | Native SDKs for 20+ providers, live /model swap, no restart |
| Native multi-provider | ZeroClaw (17+ real impls), NullClaw (40-50 distinct services), PicoClaw (30+) | Direct provider integrations with config-driven selection |
| Mixed native + compatible | ZeptoClaw (repo claims vary: 9-16), OpenFang (26-27), AstrBot (10+) | Core providers native, rest via OpenAI-compatible API |
| Multi-provider with fallback | OpenCrabs | Priority order: Anthropic → OpenAI → GitHub → Gemini → OpenRouter → others |
| Claude-primary + compatible | NanoClaw | Claude Agent SDK primary, but supports Ollama, Together AI, Fireworks, and any Anthropic-compatible endpoint |
| LiteLLM abstraction | TrinityClaw | Python LiteLLM for multi-provider routing |
| Vercel AI SDK | SupaClaw | TypeScript multi-provider via Vercel |
| Approach | Frameworks | Description |
|---|---|---|
| Closed learning loop | Hermes Agent | Auto skill creation → skill self-improvement → user modeling |
| Self-modification | OpenCrabs | Agent edits own source, rebuilds, hot-restarts |
| Dynamic skill generation | TrinityClaw | Agent writes new tools, validated by AST |
| Personality evolution | BabyClaw, HermitClaw | Cron rewrites identity; hierarchical reflection |
| Dream/consolidation | OpenClaw, nanobot | Grounded REM backfill; 2-stage Dream memory |
| Vector + FTS hybrid | NullClaw, Moltis, OpenCrabs | SQLite FTS5 + vector embeddings |
| Static skills | All others | Skills created by humans, executed by agent |
| Target | Frameworks |
|---|---|
| Bare metal ($5-10) | MimiClaw (ESP32-S3 ~$5), PicoClaw ($10), NullClaw |
| $10 hardware | PicoClaw (LicheeRV-Nano), ZeroClaw (ESP32) |
| Android device | ClawDroid, DroidClaw, PicoClaw (Termux) |
| $5 VPS | Hermes (Modal hibernation), NullClaw, Autobot |
| Docker | Most (OpenClaw, NanoClaw, Moltis, ZeptoClaw...) |
| Serverless / Cloud workspace | Hermes (Modal serverless, Daytona workspace), SupaClaw (Supabase Edge) |
| Enterprise sandbox | NemoClaw (wraps OpenClaw in NVIDIA OpenShell) |
| HPC cluster | Hermes (Singularity) |
| Desktop native | OpenClaw (macOS/iOS/Android), OpenFang (Tauri) |
| Serverless (Supabase) | SupaClaw (Edge Functions + pg_cron, dashboard for management) |
Sorted by GitHub stars (live badges above, snapshot below for reference).
| # | Project | Lang | Category | Stars (Apr 2026) |
|---|---|---|---|---|
| 1 | OpenClaw | TypeScript | Full Platform | ~354K |
| 2 | Hermes Agent | Python | Self-improving | ~52K |
| 3 | nanobot | Python | Lightweight | ~39K |
| 4 | ZeroClaw | Rust | Rust Native | ~30K |
| 5 | AstrBot | Python | IM Chatbot | ~30K |
| 6 | PicoClaw | Go | Embedded | ~28K |
| 7 | NanoClaw | TypeScript | Lightweight | ~27K |
| 8 | NemoClaw | TypeScript | Security harness | ~19K |
| 9 | OpenFang | Rust | Agent OS | ~17K |
| 9 | IronClaw | Rust | Privacy-first | ~12K |
| 10 | NullClaw | Zig | Embedded | ~7K |
| 11 | MimiClaw | C | Bare-metal | ~5K |
| 12 | TinyAGI | TypeScript | Multi-agent | ~4K |
| 13 | Moltis | Rust | Auditable | ~3K |
| 14 | DroidClaw | TypeScript | Mobile | ~1K |
| 15 | MicroClaw | Rust | Multi-channel | ~641 |
| 16 | OpenCrabs | Rust | Self-modifying | ~626 |
| 17 | ZeptoClaw | Rust | Security-first | ~587 |
| 18 | FastClaw | Go | Zero-dependency | ~539 |
| 18 | HermitClaw | Python | Autonomous creature | ~319 |
| 19 | Autobot | Crystal | Efficient | ~70 |
| 20 | SupaClaw | TypeScript | Serverless | ~58 |
| 21 | BabyClaw | JavaScript | Minimal | ~15 |
| 22 | ClawDroid | Go/Kotlin | Android | ~10 |
| 23 | TrinityClaw | Python | Dynamic skills | ~5 |
→ OpenClaw — native apps, largest community and plugin ecosystem
→ Hermes Agent — closed learning loop, 20+ providers, serverless deployment
→ IronClaw (WASM sandbox) or ZeptoClaw (9-layer default security)
→ NullClaw (678KB Zig) or Autobot (2MB Crystal)
→ MimiClaw (ESP32-S3, ~$5) or PicoClaw ($10 Go binary)
→ nanobot (small Python core) or NanoClaw (small TypeScript core)
→ OpenFang (7 bundled Hands) or HermitClaw (autonomous creature)
→ SupaClaw (Supabase-native) or BabyClaw (single file)
→ ClawDroid (native APK) or DroidClaw (ADB automation)
→ AstrBot (QQ, WeChat Work, DingTalk, Feishu) or MicroClaw (16 adapters including Chinese platforms)
This is an opinionated architecture guide, not an exhaustive list. To suggest an addition:
- The framework must be open-source
- It must have a meaningfully different architecture from existing entries
- Open an issue with: concept (1 sentence), architecture (how the agent loop works), key trade-off
PRs that add "yet another link" without architectural analysis will be closed.
Last updated: April 11, 2026