What is OpenClaw?
OpenClaw is a free, open-source personal AI agent that runs on your own machine and acts on instructions sent through chat apps. It was created by Peter Steinberger and is now stewarded by the non-profit OpenClaw Foundation.
It works as a gateway between a chat channel and an AI model you choose. You message it from WhatsApp, Telegram, Slack or another app, and it can read email, manage a calendar, browse the web, edit files and run shell commands. It keeps memory across conversations.
Key Features
OpenClaw’s key features are control through 29 chat channels, access to your files, browser and shell, persistent memory, installable skills, a free choice of AI model and built-in security tooling.
- Chat-first control: Takes instructions through 29 supported chat channels, including WhatsApp, Telegram, Discord, Slack, Signal and iMessage. One gateway serves every configured channel at the same time.
- System access: Browses the web, fills in forms, reads and writes files and runs shell commands on your machine. A sandboxed mode is available if you do not want full access.
- Persistent memory: Remembers preferences, projects and people between conversations, so you do not have to repeat background details in every message.
- Skills and plugins: Adds abilities through community skills or ones you write yourself. The plugin system also accepts custom channels, model providers and tools.
- Model choice: Works with Claude and GPT models and lets you bring hosted, subscription-backed, gateway or local models. The choice affects cost, speed and safety.
- Scheduled automation: Runs work in the background through cron jobs, hooks and webhooks, so routine tasks can happen without a message from you.
- Companion apps: Native iOS and Android apps offer chat, remote approval of actions and a voice Talk mode, alongside desktop apps for macOS, Windows and Linux.
- Security tooling: The gateway binds to localhost by default, unknown senders receive a pairing code, and the ‘openclaw security audit’ command checks your setup.
Pros
OpenClaw’s main advantages are that it is free under the MIT licence, keeps its state on your own hardware, ships with cautious network defaults and can be extended with skills and plugins.
- Free and open source: Released under the MIT licence. Its site says there is no subscription, hosted tier, paid version or enterprise edition, so the software itself costs nothing.
- Runs locally: State lives on your machine, not in a vendor’s cloud. The site says telemetry is limited to a daily version check, which you can configure.
- Cautious defaults: The gateway listens on localhost only, most channels answer an unknown sender with a pairing code, and group chats need allowlisting before the agent responds.
- Highly extensible: Skills, plugins and your own code add new abilities, and because the source is open you can inspect or change how the agent behaves.
- Large community: Its site cites more than 346,000 GitHub stars. The project is stewarded by the OpenClaw Foundation, a United States non-profit whose donors do not control it.
- Wide platform support: Runs on macOS 15 or later, Windows 10 and 11 and Linux, and installs by script, npm, source or a desktop app.
Cons
OpenClaw’s main drawbacks are security and effort: an agent with file, shell and account access can be misused, reported incidents are serious, and you install, secure and pay for models yourself.
- Real security risk: An agent that can read files, run shell commands and act in your accounts can cause real damage if misused. The project’s own documentation warns about prompt injection from untrusted content.
- Reported incidents: Third-party security reports describe a remote code execution flaw, CVE-2026-25253, fixed in version 2026.1.29, and more than 30,000 installations exposed to the internet.
- Untrusted skills: Security researchers quoted in press reports found hundreds of malicious skills on the ClawHub registry, so install only skills whose source you trust.
- Not multi-tenant: The documentation sets one trust boundary per gateway. It is meant for a single operator or a team whose members trust each other, not for strangers sharing one install.
- Technical setup: Installation uses a terminal and a model key. With no hosted tier, you handle updates, hardening and troubleshooting yourself, using the documentation and community for help.
- Model costs: The software is free, but hosted AI models bill for usage through your provider. Only a local model avoids those fees.
Who is Using OpenClaw?
- Developers: Automate coding and system chores.
- Solo founders: Delegate inbox and calendar work.
- Power users: Control a computer from a phone.
- Tinkerers: Build and share custom skills.
Pricing
OpenClaw is free. Its site says there is no subscription, hosted tier or paid version (checked October 2026).
| Item | Price | What you get |
|---|---|---|
| OpenClaw software | $0 | Full open-source agent under the MIT licence |
| AI model | Paid to your provider | Usage fees for hosted models; local models avoid them |
Expect to pay for model usage, and consider running it on a spare or dedicated machine.
Disclaimer: Costs can change. Check the official OpenClaw website.
What Makes OpenClaw Unique?
OpenClaw stands out because it acts, not just answers, and you own the whole setup. That power is also its main caution. Its own documentation warns about prompt injection, where untrusted content reaches the model, and advises keeping the gateway on localhost and running its security audit command.
Security researchers have reported exposed installations and malicious skills, so treat setup as a serious task.
Compatibilities and Integrations
- Operating systems: macOS, Windows and Linux.
- Channels: WhatsApp, Telegram, Discord, Slack, Signal, iMessage and more.
- Models: Claude, GPT and local models.
- Install: Script, npm, source or desktop app.
OpenClaw Tutorials
You can learn how to use OpenClaw in an evening if you are comfortable with a terminal:
- Install it from openclaw.ai on a machine you control.
- Add a model key and connect one chat channel.
- Run the security audit command and keep the default pairing rules.
- Start with low-risk tasks before granting wider access.
How We Rated It
| Criterion | Score | Why |
|---|---|---|
| Accuracy and Reliability | 3.9/5 | Depends on the model |
| Ease of Use | 3.5/5 | Setup needs technical skill |
| Functionality and Features | 4.8/5 | Full system access |
| Performance and Speed | 4.1/5 | Depends on your hardware |
| Customization and Flexibility | 4.9/5 | Open source and skills |
| Data Privacy and Security | 3.2/5 | Documented risks |
| Support and Resources | 4.2/5 | Docs and community |
| Cost-Efficiency | 4.5/5 | Free software |
| Integration Capabilities | 4.7/5 | 29 chat channels |
| Overall Score | 4.2/5 | Average of the nine criteria |
Summary
OpenClaw is a capable free agent for technical users who accept responsibility for securing it. Keep it updated, install only skills you trust and avoid giving it sensitive accounts at first. People who want a managed assistant should look elsewhere.
Reviews
Write a Review