If you've been on X (Twitter) in the past week, you've seen Clawdbot everywhere. Andrej Karpathy praised it. David Sacks tweeted about it. MacStories called it "the future of personal AI assistants."
This open-source AI assistant went from zero to 100,000+ GitHub stars in just over a week, attracting 2 million visitors and 1,374 commits in a single day. That makes it one of the fastest-growing projects in GitHub history.
But what exactly is Clawdbot? Why has it been renamed twice — first to Moltbot, then to OpenClaw? And is it actually safe to use?
Here's everything you need to know.
What is Clawdbot?
Clawdbot — renamed to Moltbot on January 27, then to OpenClaw on January 30, 2026 — is a free, open-source personal AI assistant created by Austrian engineer Peter Steinberger.
Steinberger isn't a random developer. He founded PSPDFKit (now Nutrient), a document-processing SDK company he sold to Insight Partners. After his exit, he came out of retirement to build AI tools — and OpenClaw is the result.
Official Repository: github.com/openclaw/openclaw (100,000+ stars, 10,900+ forks, 321+ contributors)
How It's Different from ChatGPT or Claude
Unlike cloud-based AI assistants, OpenClaw runs on your own hardware — a Mac Mini, VPS, or any computer with Node.js 22+.
Your data stays local. You maintain full control. And most importantly: it can actually do things, not just talk about them.
What OpenClaw Can Actually Do
The OpenClaw documentation lists these capabilities:
- Messaging: Connect to WhatsApp, Telegram, Slack, Discord, Signal, iMessage, Microsoft Teams, Google Chat
- Email & Calendar: Manage your inbox, schedule meetings, send responses
- Travel: Check you in for flights automatically
- Smart Home: Control IoT devices
- Research: Browse the web, summarize articles, gather information
- Files: Organize and manage your documents
- Terminal: Run shell commands directly
- Autonomous Tasks: Execute multi-step workflows without supervision
Think of it as "Claude with hands" — an AI that doesn't just suggest actions but actually executes them on your behalf.
How Clawdbot Works
The architecture consists of three main components:
1. Gateway Server
Runs on your hardware (Mac Mini, VPS, or local machine) and handles all incoming requests.
2. Messaging Integration
Connects to WhatsApp, Telegram, Slack, and other chat platforms you already use.
3. LLM Backend
Routes conversations to Claude, GPT-4, or local models like Ollama.
You interact with it through familiar chat apps. Send a message like "Check my email for flight confirmations" and it executes the task automatically.
Setup Options
| Option | Pros | Cons |
|---|---|---|
| Local Machine | Easy setup | Security concerns with full system access |
| Dedicated Hardware | Isolated, secure | Requires extra hardware |
| Cloud VPS | Always-on, accessible anywhere | Monthly hosting costs |
| NAS Device | Use existing hardware | Limited performance |
The onboarding wizard (openclaw onboard) handles initial configuration - setting up your LLM provider, workspace, chat channels, and background service.
Why Did Clawdbot Become Moltbot, Then OpenClaw?
First Rebrand: Clawdbot → Moltbot (January 27, 2026)
On January 27, 2026, Anthropic reached out about potential trademark confusion. The name "Clawdbot" was too similar to their AI assistant "Claude."
Steinberger agreed to rename the project immediately to Moltbot.
The Crypto Scam Disaster
During the rename, Steinberger tried to change both the GitHub organization and X/Twitter handle simultaneously.
In the 10-second gap between releasing the old name and claiming the new one, crypto scammers snatched both accounts.
This led to:
- Fake "ClawdBot" crypto tokens hitting $16M market cap before crashing 90%
- Steinberger publicly stating "Crypto folks, stop harassing me"
- Widespread confusion between the real project and scam tokens
Second Rebrand: Moltbot → OpenClaw (January 30, 2026)
Just three days later, the project was renamed again to OpenClaw. Steinberger announced that "the lobster has molted into its final form."
The bottom line: The legitimate software is now called OpenClaw. All official channels use OpenClaw branding, though the clawdbot and moltbot commands still work as compatibility aliases.
The Viral Growth Story
Clawdbot/OpenClaw's rise was unprecedented:
| Timeline | Milestone |
|---|---|
| Late 2025 | Launched as a "hobby project" |
| First 24 hours | Hit 9,000 GitHub stars |
| First week | Crossed 82,000 stars |
| January 28, 2026 | 8,900+ Discord members |
| January 30, 2026 | 100,000+ stars, 2M visitors in one week |
This makes it one of the fastest-growing open-source projects in GitHub history.
Why It Went Viral
The project hit a nerve because it solves a real problem - AI that actually takes action rather than just providing suggestions.
Other factors contributing to its success:
- Completely free and open-source (MIT license)
- Works with messaging apps people already use
- Created by a respected developer with a proven track record
- Easy onboarding wizard accessible to non-technical users
How Much Does Clawdbot/OpenClaw Cost?
The software is free and open-source under the MIT license.
However, you'll pay for LLM API tokens based on your provider:
| Provider | Input Cost | Output Cost |
|---|---|---|
| Claude Sonnet | $3/million tokens | $15/million tokens |
| Claude Opus | $5/million tokens | $25/million tokens |
| GPT-4 | $10/million tokens | $30/million tokens |
Realistic Monthly Estimates
- Light usage (few commands daily): $10-30/month
- Moderate usage (regular tasks): $30-70/month
- Heavy usage (constant automation): $70-150/month
Cost Warning
One user accidentally ran up a $200 API bill in a single day due to a runaway automation loop.
The agentic nature means OpenClaw "thinks" constantly while executing tasks, burning through tokens quickly.
How to Control Costs
- Set hard spending limits in your LLM provider dashboard
- Use Claude Pro/Max subscription instead of raw API access
- Use local models via Ollama for less critical tasks
- Start with simple automations before enabling autonomous features
Security Concerns: Is Clawdbot Safe?
This is where things get serious. Security researchers have raised significant concerns about OpenClaw deployments.
The Core Problem
OpenClaw can access your operating system, files, browser data, and all connected services. This creates a massive attack surface if not properly secured.
Real Security Issues Found
Security firm Bitdefender discovered hundreds of exposed admin panels on the public internet:
- Users deployed without proper authentication
- Attackers could browse configuration data freely
- API keys and conversation histories were exposed
- Compromised agents could send messages and execute commands
The risk extends beyond passive data exposure - attackers could actively control OpenClaw instances to send messages, run tools, and execute commands across Telegram, Slack, Discord, and other connected services.
Security Best Practices
If you decide to use OpenClaw:
- Never expose to public internet without proper authentication
- Use Docker sandboxing to limit what the agent can access
- Run on dedicated hardware separate from your main machine
- Monitor API usage for unusual activity patterns
- Avoid connecting sensitive accounts until the ecosystem matures
How to Get Started with OpenClaw
If you want to try it despite the security considerations:
Requirements
- Node.js 22 or higher
- Mac, Linux, or Windows (with WSL)
- API key from Anthropic, OpenAI, or another LLM provider
Quick Setup
npm install -g openclaw@latest
openclaw onboardThe onboarding wizard guides you through:
- Selecting and configuring your LLM provider
- Setting up your workspace directory
- Connecting your messaging apps
- Installing the background service
Recommended Deployment Options
For the most secure setup, consider:
- DigitalOcean one-click deploy - Simplest cloud option
- Dedicated Mac Mini - Good for home use
- QNAP NAS - If you already have compatible hardware
Clawdbot Alternatives
Not comfortable with self-hosting or the security risks? Here are managed alternatives:
| Tool | Type | Best For | Pricing |
|---|---|---|---|
| Serenities AI | All-in-one platform | App building + automation | View Plans |
| Zapier | Cloud automation | No-code workflows | $20-100/mo |
| Make | Cloud automation | Complex integrations | $10-50/mo |
| n8n | Self-hosted | Technical users | Free/Enterprise |
Why Consider Serenities AI
If you want powerful automation without infrastructure headaches, Serenities AI offers:
- Visual Flow Builder - Create automations without code (Learn more)
- Built-in Database - Store and manage data like Airtable (Learn more)
- App Builder - Create custom apps with AI assistance
- MCP Protocol Support - Integrate with Claude Code seamlessly (Learn more)
- No self-hosting required - We handle the infrastructure
- Enterprise-grade security - SOC 2 compliant
The Bottom Line
Clawdbot/OpenClaw represents an exciting direction for AI - personal assistants that can actually take action on your behalf.
The viral growth demonstrates massive demand for this type of tool.
Pros
- Free and open-source
- Works with apps you already use
- Powerful automation capabilities
- Active community with 8,900+ Discord members
- Backed by a respected developer
Cons
- Significant security risks if misconfigured
- API costs can spiral unexpectedly
- Requires technical knowledge to deploy safely
- Ongoing crypto scam confusion
Our Recommendation
Unless you're technically savvy and comfortable managing security yourself, wait for the ecosystem to mature.
For production-ready automation today, consider managed platforms like Serenities AI that provide similar capabilities without the infrastructure burden.
Frequently Asked Questions
Is Clawdbot the same as Moltbot and OpenClaw?
Yes. Clawdbot was renamed to Moltbot on January 27, 2026 due to trademark concerns with Anthropic's Claude AI. Then it was renamed again to OpenClaw on January 30, 2026. The official repository is now at github.com/openclaw/openclaw.
Is Clawdbot free?
The software is free and open-source under MIT license. However, you'll pay for LLM API usage, typically $10-150/month depending on how much you use it.
Is Clawdbot safe to use?
There are significant security concerns. Hundreds of exposed admin panels have been found online. Always use proper authentication and never expose your instance to the public internet.
What can Clawdbot do?
It can manage emails, calendars, check into flights, control smart home devices, browse the web, run terminal commands, and execute autonomous tasks through messaging apps.
What are the best alternatives to Clawdbot?
Managed platforms like Serenities AI offer similar automation capabilities without self-hosting. Cloud tools like Zapier and Make also provide workflow automation with less technical overhead.
Last updated: January 30, 2026