OpenClaw & Local Agents

Personal AI agent built on Anthropic's Claude Agent SDK that stuffs every agent into its own Docker container. Designed as a deliberate response to OpenClaw's "security mess" — same UX (you message it on WhatsApp / Telegram / Slack), but each agent runs with real OS-level isolation rather than application-level permission checks.

• Tiny codebase: approximately 500 lines of auditable TypeScript per nanoclaw.dev — small enough to read end-to-end in an afternoon
• Funding: $12M seed (oversubscribed at $62M valuation; strategic investors include Docker, Vercel, monday.com)
• Container isolation: Docker on macOS/Linux/WSL2, optional Docker Sandboxes micro-VM, or Apple Container as macOS-native opt-in
• Channels: WhatsApp, Telegram, Discord, Slack, Microsoft Teams, iMessage, Matrix, Google Chat, Webex, Linear, GitHub, WeChat, plus email via Resend
• Memory: SQLite for messages and sessions, per-group CLAUDE.md files that persist across restarts
• Agent swarms: First personal AI agent project to support multi-agent collaboration on a single task
• Process model: Single Node.js process — no daemons, no orchestrator, no message broker required
• Skills installed on demand: Channels and integrations are pulled in only when you opt into them

Limitations: Smaller ecosystem than OpenClaw (younger project, smaller skill catalog). Tied tightly to Claude Agent SDK — great if you're already on Anthropic, less ideal if you want vendor flexibility. Container isolation requires Docker, which adds dependencies on lower-end hardware. No first-party Windows-native install (WSL2 only).

NVIDIA's open-source security stack that wraps OpenClaw with kernel-level sandboxing, on-prem Nemotron models, and a Privacy Router that decides whether each request goes to a local or cloud model. The bet: OpenClaw's usefulness is real, but its trust model is wrong — rules need to be enforced outside the agent process so a compromised agent still can't escape.

• OpenShell runtime: Kernel-level sandbox (Linux 5.15+, cgroup v2, user namespaces) that enforces policy structurally, not behaviorally
• Nemotron models: Nemotron 3 Super 120B (~48 GB VRAM, full privacy) or Nemotron 3 Nano 4B (~8 GB VRAM, edge)
• Privacy Router: Routes simple/sensitive queries to local Nemotron, harder queries to Claude/GPT — you set the policy
• Cloud fallback: Compatible with OpenAI, Anthropic, and any OpenAI-format endpoint
• Hardware: NIM-capable GPU for full local; Ollama path needs ~87 GB disk for Nemotron 3 Super 120B, NVIDIA drivers 550+, NVIDIA Container Toolkit
• Reference HW: NVIDIA DGX Spark is the showcase platform for always-on local agents
• Enterprise adoption: Adobe, Salesforce, SAP, Dell, Cisco, and LangChain are building on the stack
• Status: Early-alpha as of March 2026 — usable but evolving

Limitations: Linux-only and effectively NVIDIA-only for the local inference path — cgroup v2 + user namespaces + NVIDIA Container Toolkit eliminate macOS, Windows, and AMD/Intel GPU users from the full stack. RAM and disk requirements rule out small VPS targets. Still alpha; configuration surface is large.

A middleware Worker plus adapter scripts that lets you run OpenClaw / Moltbot inside Cloudflare Workers and Sandbox containers, deployed across 300+ Cloudflare data centers. The agent's orchestration layer runs at the edge milliseconds from the user; LLM calls still go to the provider, but routing, tool calls, and response assembly happen locally.

• Architecture: Entrypoint Worker handles routing/admin; OpenClaw runtime + integrations run in Cloudflare Sandbox containers
• AI Gateway: All LLM calls routed through Cloudflare AI Gateway for observability, caching, and multi-provider fallback
• Browser automation: Cloudflare Browser Rendering provides headless Chromium for navigation, form filling, content capture
• Pricing model: Pay per request, no idle cost — an agent handling 10 requests/day costs effectively nothing
• Auto-scaling: Same agent code handles a viral spike to 10M requests with no infrastructure change
• Hardware: Zero — no Pi, no NAS, no VPS to maintain. Pure cloud.
• Repo: github.com/cloudflare/moltworker (open source)

Limitations: Officially a proof-of-concept, not a Cloudflare product — no SLA, no support contract. Cloudflare Sandbox container limits cap what tools can run inside (heavy local-model inference is out of scope). Edge deployment means your agent's state is distributed; persistent memory needs explicit Durable Objects / D1 / R2 wiring. Loses the "pure local, nothing leaves your hardware" story that drives a lot of OpenClaw adoption.

Originally the older sibling of the OpenClaw family — a Python CLI that let any LLM write and run code on your machine. It has since been rewritten from scratch in Rust as a fork of OpenAI's Codex and repositioned as a coding agent tuned for low-cost models. The original Python project now lives on as a community fork at endolith/open-interpreter. No messaging UI; the interface is your terminal.

• License: Apache 2.0 — Rust codebase, free and open source
• Built for cheap models: emulates provider-specific harnesses so smaller, low-cost models (GLM, DeepSeek, Kimi) punch above their weight
• Harness switching: /harness swaps between claude-code, kimi-code, deepseek-tui, swe-agent and others
• Native sandboxing on macOS, Linux, and Windows — no longer bare shell access by default
• ACP agent mode: interpreter acp plugs it into Agent Client Protocol-compatible editors
• LLM-agnostic: any OpenAI-compatible endpoint, including local servers (LM Studio, Jan, Ollama)
• ~68K GitHub stars — one of the most-starred terminal coding agents

Limitations: No built-in messaging integrations — you have to be at the terminal to use it. The Rust rewrite is a different product from the Python tool most tutorials describe, so older guides, plugins, and the 01 Light hardware ecosystem no longer map cleanly onto it. Its niche is squeezing usable agent behavior out of cheap models rather than matching frontier-model agents on hard tasks.

The most popular open-source autonomous AI coding agent — writes code, runs terminal commands, browses the web, and opens pull requests, all inside a sandboxed Docker environment. Started as OpenDevin in early 2024 in response to Cognition's Devin, renamed OpenHands under the All-Hands-AI org. Different category from the OpenClaw family: this is a software engineer, not a personal assistant.

• ~74.4K GitHub stars (May 2026); topped open-source coding agent rankings throughout 2025–2026
• Performance: 72.8% SWE-bench Verified (OpenHands V1 SDK + Claude Sonnet 4.5); 77.6% on the V0 harness with Claude 3.5 Sonnet Thinking
• Sandboxed: All code execution happens inside Docker containers by default
• v1.7.0 (May 2026): Kubernetes support and Planning Mode (beta)
• $18.8M Series A — project has commercial backing without losing the open-source license
• Setup: Docker run + browser UI; ~15 min to a working agent on a clean machine
• Cloud option: openhands.dev offers a hosted version; the open-source self-hosted path is fully supported

Limitations: Built for engineering tasks, not personal-assistant tasks — no Telegram/WhatsApp/Signal channels, no calendar or email integrations out of the box. Heavier resource footprint than NanoClaw or Open Interpreter (Docker + agent + browser tooling). Requires meaningful LLM credit budget to be useful since it runs many iterations per task.