Index / NanoClaw · updated Aug 17, 2026
NanoClaw
qwibitai/nanoclaw · healthy · rank 8 of 43 by stars
NanoClaw ditches OpenClaw's half-million-line monolith for a tiny, readable codebase where every agent runs in its own Linux container with real filesystem isolation. It's the security-first, audit-friendly alternative for people who want AI assistants without handing over their whole machine.
Facts
Repository
Runtime
Posture
Community
Security breakdown
Composite 95 / 100 · how these are scored
higher is safer
higher is safer
higher is safer
higher is safer
higher is riskier
Model access
Read from the repository, not written by a model · 23 files examined
1 provider
Only Anthropic was found, with no gateway, local runtime or configurable endpoint alongside it. Switching providers would mean changing code.
Pinned models
None pinned in the repository.
Evidence
Decision
Why choose NanoClaw over OpenClaw?
Why choose this
- True OS-level container isolation vs app-level allowlists
- Codebase small enough to audit (232k tokens vs 500k lines)
- Simpler deployment with single process and Docker
Tradeoffs
- Smaller plugin/skill ecosystem (no 5400+ skills registry)
- Fewer supported channels out-of-box compared to OpenClaw's 30+
- Requires Docker and container management overhead
Best fit
- Self-hosters wanting OS-level isolation for AI agents
- Developers who want to read and modify the whole codebase
- Messaging-centric personal assistants across WhatsApp/Telegram/Discord
Avoid if
- Teams needing massive plugin ecosystem like OpenClaw's 5400+ skills
- Users uncomfortable with Docker/container setup
- Those wanting a non-Anthropic model backend (currently Anthropic SDK)
Evidence from README and recent commits shows active development and clear security focus, but community sentiment is inferred from limited Reddit/Brave matches. Some deployment details like exact boot time are estimated per naming convention.
AI layer reviewed Aug 2, 2026 · how this is written
Star activity
30,523 stars today
Overview
NanoClaw is a lightweight alternative to OpenClaw designed for security-conscious users who want an AI assistant they can actually understand. Instead of OpenClaw's near-half-million-line monolith running in a single Node process with application-level permissions, NanoClaw uses a compact TypeScript codebase (around 232k tokens) where each agent executes inside its own Linux container with filesystem isolation. This provides true OS-level sandboxing rather than relying solely on allowlists and pairing codes.
The project connects to popular messaging platforms including WhatsApp, Telegram, Slack, Discord, and Gmail, and leverages Anthropic's Agents SDK for agent execution, memory, and scheduled jobs. Recent development activity (version 2.1.46 in progress, release v2.1.17) shows rapid iteration on channel adapter defaults, WhatsApp number-ownership steering, and migration tooling from v1. The nanoclaw.sh bootstrap script automates installation of Node, pnpm, and Docker, then builds the agent container and pairs the first channel, even invoking Claude Code to self-heal on failures.
Compared to OpenClaw, NanoClaw trades breadth of plugins and channel support for auditability and isolation. It is best suited for self-hosters who prioritize containment of AI workloads, while those needing a vast skill registry or model-agnostic backends may find it limiting. Its MIT license and active Discord community indicate a welcoming, open development model.