Over 10 years we help companies reach their financial and branding goals. Engitech is a values-driven technology agency dedicated.

Gallery

Contacts

411 University St, Seattle, USA

engitech@oceanthemes.net

+1 -800-456-478-23

OpenClaw (MIT, OSS)

What Is OpenClaw? The Open-Source AI Agent Framework That Passed React on GitHub

OpenClaw is the TypeScript-based, MIT-licensed agentic AI framework that hit 289K GitHub stars as of March 2026 (Skywork) -- passing React to become the most-starred non-aggregator software project on GitHub. It runs on Node.js, wraps any frontier LLM (Claude, GPT, Gemini, DeepSeek, Kimi, or local Ollama), and pipes the agent into 50+ messaging platforms -- WhatsApp, Telegram, Slack, Discord, iMessage, Teams, Signal, Matrix, and a growing list of Chinese enterprise channels (WeCom, Lark, DingTalk). You host it yourself. You pay for API tokens. That is the entire pricing model.

Founder Peter Steinberger joined OpenAI on February 14, 2026 to run their Personal Agents division. OpenClaw itself is transitioning to an independent open-source foundation -- still MIT-licensed, now with OpenAI financial backing. Here is the honest breakdown of what it does, what it costs, and where it breaks.


Verdict

Quick Read

Node.js agent framework. 289K stars. MIT. $5-$150/mo API costs.

OpenClaw orchestrates any LLM across 50+ messaging platforms. Free to self-host. Powerful for practitioners. Real security risks, 30-60 minute setup, and coding-weak vs Claude Code. Not for beginners.


289K
GitHub Stars
Skywork, March 2026
50+
Messaging Integrations
Native channel count
sub-2ms
Latency @ 1000 QPS
Pi engine, vendor benchmark
500+ MB
Base RAM
Minimum per instance
MIT
License

What Is OpenClaw?

OpenClaw is a general-purpose AI agent framework written in TypeScript, distributed under the MIT license. It packages three things into one self-hosted daemon:

  • A model router -- call any LLM (Claude Opus 4.6, Sonnet 4.6, GPT-4o, GPT-5 series, Gemini, DeepSeek, Kimi 2.5, Qwen3.5 Plus, or a local Ollama model) through a single interface
  • A tool execution sandbox -- exec (bash/python), browser automation, filesystem I/O, web search, image generation, session state
  • A channel gateway -- pipe the agent's input and output into 50+ messaging platforms so you can talk to it from WhatsApp, Slack, or Signal instead of a terminal

That combination is the point. Most agent frameworks (AutoGen, CrewAI, LangChain) are libraries you import into a Python script. OpenClaw is a long-running daemon with a WebSocket gateway, a plugin system, and explicit memory files. You run it like a database, not a library.

The Naming Rollercoaster

OpenClaw started as Clawdbot on November 24, 2025 -- the name derived from "Clawd," Steinberger's personal virtual assistant named after Anthropic's Claude. Anthropic filed trademark complaints. The project rebranded to Moltbot on January 27, 2026. Three days later, on January 30, 2026, it was renamed again to OpenClaw -- the name that stuck. If you see old tutorials or forum posts referencing Clawdbot or Moltbot, the underlying software is the same project.

Who Is Behind OpenClaw?

Peter Steinberger is an Austrian developer who describes himself as a "vibe coder." He built the original Clawdbot as a personal assistant, open-sourced it, and watched it go vertical -- crossing 250K GitHub stars by March 1, 2026 (passing React) and hitting 289K as of March 2026 (Skywork).

On February 14, 2026, Steinberger joined OpenAI to lead the Personal Agents division (confirmed by Sam Altman on X the following day). OpenClaw itself is transitioning to an independent open-source foundation with OpenAI providing financial backing. The project remains MIT-licensed. It is not an OpenAI product -- but its founder's new employer is writing the checks. That matters: indie agent projects often stall when maintainers burn out. This one has institutional funding without vendor lock-in. As of April 2026, the project is maintained by the transitional foundation; Steinberger contributes as an advisor but no longer leads day-to-day releases.

289K →
GitHub stars as of March 2026 (Skywork) -- the most-starred non-aggregator software project on GitHub at time of writing. For reference, it crossed 250K on March 1, passing React.

Architecture: Tools, Skills, Plugins

OpenClaw's architecture has three layers. Understanding them is the difference between "I installed it and it works" and "I can actually build with it."

Layer 1: Tools (the Action Layer)

Tools are typed functions the agent invokes. Built-ins include exec (bash/python), browser, web_search, read, apply_patch, message, canvas, nodes, cron, image, and a family of sessions_* tools for multi-session state. Tools have four profiles: full (default), coding, messaging, and minimal.

Layer 2: Skills (the Guidance Layer)

Skills are SKILL.md files injected into the system prompt at session start. They teach the agent when and how to use tools. A Skill is not permission -- it is instruction. Config grants permission, Skills suggest strategy. Community Skills are distributed via ClawHub; counts vary widely by source -- Skywork reported 3,000 community + 53 official Skills (March 24, 2026), ClaudeFast reported 5,700+ (March 27), and Clarifai counted 10,700 (March 6). Treat any single number with skepticism. See the security section for supply-chain caveats.

Layer 3: Plugins (the Packaging Layer)

Plugins bundle tools + skills + model providers + channels into installable npm packages. A WhatsApp plugin, for example, ships the gateway adapter, the credential flow, and a Skill that tells the agent how to format WhatsApp-friendly responses.

Workspace Files

OpenClaw uses a set of opinionated Markdown files in your workspace. This is how you customize the agent without writing code:

FilePurpose
SOUL.mdPersonality, values, hard limits. First file injected every session.
IDENTITY.mdName, vibe, emoji, avatar.
USER.mdUser context -- pronouns, timezone, role. Never commit to public repos.
TOOLS.mdWhich tools to use when. Does NOT grant permissions (config does).
AGENTS.mdMulti-agent workflow instructions.
HEARTBEAT.mdCron-style scheduled tasks. Runs every 30 minutes by default.
MEMORY.mdCurated long-term memory. Layered with memory/YYYY-MM-DD.md daily logs.

The Pi Engine and Gateway

Under the hood, OpenClaw uses the Pi engine -- a runtime with four primitive operations: data ops (read/write/delete), exec (bash/python), state (checkpoint/restore), and extensions (plugin loading). Pi hits sub-2ms latency at 1000 QPS, which is fast enough that your bottleneck is always the LLM API, not OpenClaw itself.

The Gateway is a WebSocket server on port 18789. It routes messages between channels, tools, and the model. Critical: it binds to 0.0.0.0:18789 by default -- meaning it is exposed to every network interface on install. More on that in the Limitations section.

Cross-platform support runs through a Virtual Device Interface (VDI) for macOS, Linux, and Windows (native plus WSL2). Node.js 22.14+ is the minimum; 24 is recommended. A functional VPS setup needs 8 GB RAM and 2 vCPUs at minimum.


Messaging Platforms & Model Support

OpenClaw's distinguishing feature is channel coverage. Most agent frameworks assume you talk to the agent in a terminal. OpenClaw assumes you want to talk to it from whatever messaging app you already live in.

Global Platforms

WhatsApp, Telegram, Slack, Discord, Signal, iMessage, Microsoft Teams, Matrix, Zalo -- all first-class channels. Twitch and Google Chat got plugin support by January 30, 2026.

Chinese Enterprise Channels

This is where OpenClaw's competitive advantage shows up internationally. Native support for QQ, WeCom (WeChat Work), Lark (Feishu native in v2026.2.2), and DingTalk. WeCom Agent mode landed February 9, 2026. Tencent's WeChat consumer integration arrived March 22, 2026 via the "ClawBot" launch.

LLM Support

Model-agnostic by design. Pick from:

CategoryModels
Frontier (closed)Anthropic Claude (Opus 4.6, Sonnet 4.6), OpenAI GPT (GPT-4o, GPT-5 series), Google Gemini
Open-weightDeepSeek, Kimi 2.5, Xiaomi MiMo-V2-Flash, Tencent Hunyuan, Volcano Engine (Doubao), Alibaba Bailian (Qwen3.5 Plus), GLM-5, MiniMax (M2.5), Wenxin Yiyan, NVIDIA Nemotron (via NemoClaw)
Local runnersOllama (any supported model), Clarifai Local Runner

The model-agnostic design is the practical reason to use OpenClaw over a vendor-native agent tool. You can route coding tasks to Claude Opus, cheap chat to DeepSeek, and Chinese-language tasks to Qwen or Hunyuan -- from a single agent, all billed separately through their respective APIs.

Enterprise Adoption

Tencent (WeChat + QClaw + Lighthouse), Alibaba (DingTalk + "Wukong" enterprise platform), Baidu (desktop/cloud/mobile/smart-home rollout), and NVIDIA (NemoClaw, released March 16, 2026 with OpenShell runtime, Landlock + seccomp isolation, policy-as-code network egress) have all built on OpenClaw. The ecosystem is past the hobbyist phase.

~30%
Token savings on duplicate input tokens vs Microsoft AutoGen's broadcast GroupChat model. OpenClaw's routing architecture avoids re-sending shared context to every agent in a multi-agent workflow.

Pricing Reality

How Much Does OpenClaw Cost?

The OpenClaw software is free. You pay for API tokens, a VPS if you want to host it remotely, or a managed plan if you do not want to run the infrastructure yourself. Here is what that actually costs.

API
Heavy Automation
24/7 agent, multiple workflows
API $50-$150/mo
VPS $6-$13/mo
PREMIUM
Opus / GPT-5 Heavy
Premium model, intensive workflows
API $200+/mo
Driver Token spend
MANAGED
OpenClaw Cloud
Hosted by the foundation, no ops
Plan $39/mo+
Tencent promo $1.68/mo
ENTERPRISE
o-mega.ai
Managed SaaS alternative, workforce focus
Plan $25,000/yr
Delivery No-code dashboard

The Cost Inversion Nobody Mentions

OpenClaw is cheaper than a Claude Pro subscription for light users -- a few chats per day, minimal Skills usage, total spend under $15/month. But the cost story inverts at scale. If you run OpenClaw 24/7 with premium models, your OpenClaw API bill passes Claude Pro's flat $20/mo around the $15-20 spend mark, after which Claude Pro's flat rate wins on cost alone. Heavy workloads with Opus or GPT-5 routinely exceed Max's $200 tier. There are no subscription savings at scale -- you pay by the token, and tokens add up.

If your use case is "coding assistant I use 6 hours a day," Claude Code on Max is almost always cheaper than OpenClaw on Opus. If your use case is "occasional automation across WhatsApp, Telegram, and Slack," OpenClaw wins on cost easily.


Who Should Use OpenClaw?

OpenClaw is not for beginners. You need Node.js comfort, a willingness to read CVE bulletins, and enough DevOps chops to configure WebSocket bindings, reverse proxies, and secret storage. If those words caused a blank stare, use Claude or Claude Code instead.

Power Users & Tinkerers
You already run Home Assistant, Docker Compose, and a VPN on your own gear. OpenClaw slots in as the automation brain -- HEARTBEAT.md handles your 7:30 AM briefing, iMessage replies run through it, Philips Hue responds to natural language.
DevOps & SRE
On-call monitoring that detects CPU spikes, runs diagnostics, pages via WhatsApp, and deploys hotfixes -- all from a single agent workflow. MCP-like tool wiring connects OpenClaw to Prometheus, PagerDuty, and your incident bot.
Indie Developers & Solopreneurs
You want one agent that handles Gmail triage, Twitter/X drafting, calendar queries, and supermarket re-orders -- without paying a SaaS $50/seat/month per tool. Self-host, write your own Skills, own your data.
Enterprise Teams Evaluating Alternatives
Teams looking to replace Zapier, AutoGen, or CrewAI. NVIDIA's NemoClaw reference stack (OpenShell runtime with Landlock + seccomp, policy-as-code) addresses the security gap for regulated workloads. Chinese enterprise channel support is a rare differentiator.

Who should NOT use OpenClaw: anyone expecting a one-click install, non-technical users, teams without DevOps headcount, or workloads where a single CVE would create a reportable incident. This is a framework, not a product.


Limitations & Honest Caveats

Is OpenClaw Safe to Use?

OpenClaw is powerful and free, but the production checklist is not short. Here is what breaks, where, and how often.

Security Track Record: CVE-2026-25253 (CVSS 8.8)
A one-click RCE via WebSocket origin header bypass was disclosed February 2026 and patched in v2026.1.29 -- a malicious webpage could exfiltrate the Gateway auth token and run arbitrary commands. Censys reported 30,000+ exposed instances at disclosure; other counts ran to 135,000+, with 50,000+ directly RCE-vulnerable. A separate localhost trust flaw was patched in v2026.2.25. Broad audits found 512 vulnerabilities (8 critical) in early 2026. Patch aggressively, bind loopback only, treat port 18789 as hostile by default.
Plaintext Credentials in ~/.openclaw/
API keys, OAuth tokens, and messaging credentials are stored in plaintext under ~/.openclaw/ by default. That directory is an active target for credential stealers including RedLine, Lumma, and Atomic Stealer (AMOS). v2026.2.26 added external secrets management (openclaw secrets audit) -- use it. Alternative: encrypt or relocate the credentials directory, prefer OAuth over long-lived keys, separate personal and company workspaces.
ClawHub Supply Chain: 12-36% of Skills Contain Risks
Independent audits of ClawHub (the community Skill registry) found vulnerabilities or malicious payloads in 12-36% of Skills depending on methodology: Koi Security flagged 12% of 2,857 Skills (341 confirmed, "ClawHavoc" AMOS campaign via fake "solana-wallet-tracker"); Bitdefender found ~20% malicious (~900, including a fake Polymarket bot opening a reverse shell); Snyk's ToxicSkills report flagged 36% with security flaws (1,467 vulnerable, 76 confirmed malicious). Single publisher "hightower6eu" uploaded 314+ malicious Skills alone. Publisher barrier is a 1-week-old GitHub account -- no mandatory code review. VirusTotal scanning added Feb 2026 for new submissions only. Treat every Skill as executable supply-chain code. Pin versions. Review SKILL.md and bundled code before install.
30-60 Minute Setup Time
Realistic first-run: Docker config, VPS provisioning, sandboxing, channel credential flow, model API keys, Skill vetting, Gateway binding. Budget half a day if you're going to production -- hardening, secrets manager setup, and first-skill vetting add 2-3 hours beyond the basic install. Compare with npm install -g @anthropic-ai/claude-code at ~30 seconds.
Coding-Weak vs Purpose-Built Tools
OpenClaw can run code via the exec tool, but there is no IDE integration, no diff viewer, no automatic context compaction, no equivalent to the agentic coding loop in Claude Code. For pure software engineering, the dedicated tools outperform it. OpenClaw's strength is breadth (messaging, automation, tool use), not coding depth.
Operational Burden Is Yours
You run it, patch it, monitor it, back up MEMORY.md. Broken plugin or WebSocket hang -- your problem. OpenAI backing funds the foundation, it does not give you a support contract. Corporate device use without IT approval is a Shadow AI risk -- get governance sign-off first.

For a full hardening checklist (loopback binding, SSH tunnel or Tailscale Serve access, least-privilege tool config, skill install logging, outbound WebSocket alerting), see the OpenClaw security docs at docs.openclaw.ai.


OpenClaw vs Claude Code (Quick Take)

These are in different categories, but they get compared constantly because both are agent-flavored developer tools. Short version: different jobs.

DimensionOpenClawClaude Code
Coding Ability Basic -- can exec code, no IDE integration Superior -- IDE diff views, auto compaction, SWE-bench 80.8%
Interface WhatsApp, Telegram, Slack, Discord, Signal, iMessage + 44 more Terminal, VS Code, JetBrains, Xcode, plus desktop/web/iOS/Chrome (beta)
Model Model-agnostic (Claude, GPT-4o, Gemini, DeepSeek, Kimi, Ollama) Claude only (Opus 4.6 / Sonnet 4.6)

Can they coexist? Yes -- many developers run both. Claude Code handles coding; OpenClaw handles life and business automation. Claude Code is not a model backend for OpenClaw -- they are separate tools. OpenClaw can call the Claude API for reasoning; Claude Code uses Anthropic's proprietary agentic loop. For the full head-to-head, read the dedicated Claude Code breakdown.


Data verified: 2026-04-14
OpenClaw is an open-source project under the MIT license. Claude and Claude Code are trademarks of Anthropic. GPT is a trademark of OpenAI. Gemini is a trademark of Google. All other trademarks belong to their respective owners.
Before You Use AI
Your Privacy

OpenClaw is self-hosted -- your conversations and memory files never leave your infrastructure by default. However, every LLM API call sends data to whichever model provider you configure (Anthropic, OpenAI, Google, DeepSeek, etc.). Review each provider's data retention and training policies before routing sensitive data. Messaging platform integrations add a second data path -- WhatsApp, Telegram, and Slack each have their own privacy terms. Commercial API tiers generally do not train on your data; free tiers often do. Credentials are stored in plaintext by default under ~/.openclaw/ -- encrypt or use the external secrets manager.

Mental Health & AI Dependency

Agent frameworks that handle your messaging, calendar, and daily briefings can quietly replace human judgment in small decisions that matter. Maintain deliberate human-in-the-loop review for anything consequential -- purchases, medical decisions, relationships. If you or someone you know is experiencing a mental health crisis:

  • 988 Suicide & Crisis Lifeline -- Call or text 988 (US)
  • SAMHSA Helpline -- 1-800-662-4357
  • Crisis Text Line -- Text HOME to 741741
Your Rights & Our Transparency

Under GDPR and CCPA, you have the right to access, correct, and delete your personal data held by any LLM provider or messaging platform. Tech Jacks Solutions maintains editorial independence. This article was not sponsored, reviewed, or approved by OpenClaw, its contributors, OpenAI, or any messaging platform vendor mentioned. We receive no affiliate commissions from OpenClaw Cloud, o-mega.ai, or any linked LLM provider. Our evaluations are based on primary documentation, independent security audits, and verified data.