Index / Moltis · updated Aug 17, 2026
Moltis
moltis-org/moltis · healthy · rank 19 of 43 by stars
A secure, auditable Rust-native personal agent server that positions itself as a hardened alternative to OpenClaw. Ships as one binary with sandboxed execution, multi-channel messaging, and built-in voice/MCP tooling.
Facts
Repository
Runtime
Posture
Community
Security breakdown
Composite 95 / 100 · how these are scored
higher is safer
higher is safer
higher is safer
higher is safer
higher is riskier
Model access
Read from the repository, not written by a model · 175 files examined
6 providers · runs locally · custom endpoint
Pinned models
gpt-4o released 2024-05-13 — 2 years old (from the public model catalogue)
Pin last edited 16 days ago
Evidence
Decision
Why choose Moltis over OpenClaw?
Why choose this
- Single Rust binary with no Node.js/runtime dependencies
- Sandboxed container execution for every command by default
- Auditable small core (~7.5K lines) with isolated unsafe code
Tradeoffs
- Lacks OpenClaw's companion mobile apps (Swift/Kotlin)
- No plugin marketplace, smaller ecosystem than OpenClaw skills
- Younger project with less community traction than OpenClaw's 100k+ stars
Best fit
- Privacy-focused users wanting local agent with no cloud dependency
- Developers who prefer auditing Rust code over TypeScript/Python
- Self-hosters on Raspberry Pi or Mac Mini needing multi-channel bots
Avoid if
- Users needing a large plugin marketplace (Moltis avoids that by design)
- Those requiring companion mobile apps like OpenClaw's Swift/Kotlin
- Teams wanting managed cloud hosting without self-hosting
Evidence from README and recent commits shows active development and clear positioning as OpenClaw alternative; Reddit matches are false positives (Italian 'molti'), so community sentiment relies on limited web snippets.
AI layer reviewed Aug 2, 2026 · how this is written
Star activity
2,821 stars today
Overview
Moltis is a secure persistent personal agent server written entirely in Rust, distributed as a single binary that runs on user-owned hardware such as Mac Mini, Raspberry Pi, or any server. Its architecture splits the agent runner and model interface into a ~7.5K-line core with providers adding ~19K more, organized as a 59-crate workspace of ~270K lines, making it independently auditable. Unsafe code is confined to FFI and precompiled runtime boundaries, not the core agent loop, and every command executes inside a sandboxed container rather than on the host.
Unique features include built-in voice I/O, cross-session memory with automatic edit checkpoints, scheduling, and multi-channel connectivity (Telegram, WhatsApp, Discord, Teams, Signal) plus MCP servers and browser automation. The web UI provides managed deploy keys with host pinning, a live Tools inventory, and context-file threat scanning to prevent supply-chain risks. Unlike OpenClaw’s TypeScript + Swift/Kotlin companion app stack, Moltis deliberately avoids a plugin marketplace and Node.js runtime, emphasizing a minimal, hardened footprint.
Recent commits show active maintenance with fixes for Telegram streaming, WhatsApp LID-native addressing, and continuous documentation improvements. The project explicitly compares itself to OpenClaw and Hermes Agent, positioning as a Rust-native, security-first alternative for self-hosters who value auditability and local-first operation.