OpenClaw Review 2026
Short answer: OpenClaw is worth it if you're comfortable in a terminal and want an assistant that actually does things. It reads your files, runs commands, browses the web and answers you on WhatsApp, Telegram or Slack. The software is free (MIT license, no paid tier), but you pay for the AI model behind it, on every message and every background task.
If the command line scares you, skip it for now: setup, security and upkeep are all on you. Our score: 3.9/5. Below is what it really costs, what changed with Claude subscriptions, and how to run it without leaving your machine wide open.
Our OpenClaw review in summary

OpenClaw is a self-hosted gateway. You run it on your laptop, a small server or a VM, and it connects an AI agent to the chat apps you already use. That agent has real access to the machine: files, shell, browser, scheduled jobs. You text it on Telegram "file this month's invoices in the right folder" and it does. That's what made the project go viral (it started as Clawdbot, then Moltbot), and it's also what makes it risky.
The upside is freedom. The code is MIT-licensed and run by a nonprofit foundation, and you pick the model: Claude, OpenAI models, or something local. The downside is that everything is on you. Bills climb fast if the priciest model handles every background task, security depends entirely on your config, and user reports keep describing an agent that breaks, or says it fixed something it didn't.
Our verdict: 3.9/5. Pick OpenClaw if you're technical, want an agent that works from your chat apps, and are ready to babysit it. If you mostly code, Claude Code is more reliable. If you want predictable automations, n8n is safer.
The numbers speak. Want to try OpenClaw?
OpenClaw is free. The model isn't.
OpenClaw has no paid tier and no official hosted version; its docs say so plainly. What you pay for is the AI model doing the thinking, billed per million tokens (the chunks of text a model reads and writes). These cards show Anthropic's official API prices, the default pick for a lot of OpenClaw users.
The catch is context. On every message, the agent rereads its instructions, its memory and the chat history. The longer that gets, the more each exchange costs, even for a one-line question.
Model prices per million tokens, from Anthropic's official pricing page
OpenClaw itself
What you download
No paid tier, no official hosted service
- Open source, run by the OpenClaw Foundation
- Apps for macOS, iOS, Android, Windows and Linux
- Eleven built-in chat channels, more via plugins
- Any model: Claude, OpenAI or local
- Hosting is on you (your computer or a server)
Claude Sonnet 5.5
The sensible default for a daily agent
$10 per million output tokens
- Half the price of Opus 5.5
- Cache reads at roughly a tenth of the input price
- Good enough for triage, summaries and simple jobs
- Paid via API key, no longer via a Claude subscription
Claude Opus 5.5
The most capable, and the priciest
$20 per million output tokens
- Save it for long, multi-step tasks
- Cache reads: $0.20 per million tokens
- Opus 4.5 to 4.8 cost more: $5 and $25
- The line item that blows up bills when it runs in the background
A local model (through Ollama, for example) costs nothing in API fees, but it needs a decent GPU and a model that can call tools; on multi-step tasks it still trails the frontier models.
What users really say about OpenClaw
- 5★5
- 4★0
- 3★0
- 2★0
- 1★0
The handful of public reviews are unanimously positive (5/5, all five would recommend), but five reviews is too small a sample to call a trend, and it reads far rosier than the forums. Reviewers single out the local-first design: the gateway and your files stay on your machine (though messages go to the model provider if you use Claude or OpenAI). The skills and plugin architecture comes up repeatedly, with one user praising the soul.md and skill.md file structure and self-learning loops. People who wire it into their chat apps are the happiest: the WhatsApp integration is called genuinely elegant and the Slack interface a joy to use. The recurring caveat is effort: it takes time to set up before it pays off, which forum threads confirm.
Most loved
- +The gateway and your files stay on your machine
- +Skills and plugin architecture (soul.md / skill.md, self-learning loops)
- +Elegant WhatsApp integration
- +Pleasant to use once wired into Slack
- +Strong automation once configured
Watch-outs
- !Time-consuming to implement before it pays off
- !Setup rewards technical users only
- !Value really lands once a messaging app is connected
- !Small public review sample so far
- !Best results need a deliberate skills setup
- Christoph Richter via Product Hunt
Best automatic agent so far - what makes it special? its soul.md and skill.md file structure and self learning loops.
- Felix Velarde via Product Hunt
Absolutely revolutionary. While time consuming to implement once done it's a joy to use (I interface using Slack)
- Naumaan Zahid via Product Hunt
It runs on your own machine and keeps everything local.
- BourneS via Product Hunt
The WhatsApp integration is genuinely elegant.
- Travis Bogard via Product Hunt
Easy setup and plugin architecture
We compared OpenClaw on five criteria.
One score per criterion, against Claude Code, ChatGPT, n8n and Lindy, with the wins and the catches.
Is OpenClaw easy to install and use?
Not unless you live in a terminal. On paper it's one line: curl -fsSL https://openclaw.ai/install.sh | bash on macOS, Linux or Windows with WSL2, or a PowerShell one-liner on Windows. The docs say about five minutes. The script installs the gateway, then an onboarding wizard helps you connect a model and your first chat app.
Real-world reports talk about hours, sometimes a full day, for anyone who isn't a developer. You need a recent Node (24.22.1 or later, Node 26 recommended; the "Node 22" line still floating around in tutorials is out of date), an API key, then per-channel config. One Hacker News user summed it up: "in practice it kept breaking", adding that the agent tried to reconfigure itself and then crashed.
Once it runs, daily use is easy: you message your agent like a coworker, from your phone. That's where OpenClaw wins people over. But every update, every new skill and every extra channel puts you back in config files.
One command to install, hours to get right. Built for people who are at home on the command line.
How much does OpenClaw really cost?
Zero for the software, everything else for the model. OpenClaw is MIT-licensed, with no paid tier and no official hosted plan; the "hosted OpenClaw" offers you'll see come from third-party hosts. Your real expense is the model, billed per million tokens by its provider. With Anthropic, Claude Sonnet 5.5 runs $2 per million input tokens and $10 per million output; Opus 5.5 is double that ($4 and $20).
Two changes pushed bills up. First, Anthropic no longer lets you use a Claude subscription inside OpenClaw: you now need an API key or paid extra usage. Plenty of people were running it on their Pro or Max plan and had to switch to metered billing. Second, the heartbeat (a periodic job that wakes the agent to check whether there's work to do) burns tokens even when you ask for nothing. A bug, since fixed, even forced it onto the expensive primary model no matter what you configured.
The good news: every knob is yours. A cheap model for background jobs, a slower heartbeat, a ChatGPT subscription with Codex access (supported by OpenClaw) or a local model all cut the bill. Still, one Hacker News user admits spending "unbelievable amounts of money on Opus tokens". Great value if you tune it, poor value if you let it run.
Free to install, unpredictable to run. Pick the model job by job.
What can OpenClaw actually do?
Far more than a chatbot. OpenClaw runs commands on your machine, reads and writes files, drives a browser, keeps memory across conversations and runs scheduled jobs. Ask it for a morning email digest in Telegram, or have it watch a folder and sort whatever lands there. The tagline, "The AI that really does things", is earned.
Skills (files that describe a task and the tools to use) come from ClawHub, the community catalog, or you write your own. The agent's personality and rules live in plain text files such as soul.md, easy to review and version. Models are swappable plugins, so you can change providers without rebuilding everything.
The weak spot is reliability. One Hacker News user puts it plainly: "I used OpenClaw a while back, I did find it useful, but it wasn't as reliable." A generally upbeat ten-day write-up still lands on "still early. Really early." The more power the agent has, the more a mistake costs: that's the direct trade-off of its depth.
The most capable agent in its class, as long as you check its work.
Sold on the details? Start a OpenClaw trial.
Who helps you when OpenClaw breaks?
The community, and nobody else. OpenClaw has no commercial support: no chat, no contract, no guaranteed response time. You get the official docs, GitHub issues and other users. With several hundred thousand developers following the repo, odds are someone has already hit your problem.
The project has grown up, though. It's run by the OpenClaw Foundation, a US 501(c)(3) nonprofit that employs the core team and signs releases, backed by sponsors including Amazon, OpenAI, Red Hat and the University of Michigan. Releases ship at a fast clip, with a stable channel and frequent security fixes: allowlists, secrets redacted from logs, tighter handling of untrusted input.
The flip side: that pace sometimes breaks setups, and reading the release notes is your job. If the agent runs part of your business, make sure someone can debug it, or get help setting it up.
A huge community and fast fixes, but no one accountable.
Which chat apps and models does OpenClaw work with?
Nearly all the ones you use. The docs list eleven built-in channels: Discord, Google Chat, iMessage, Matrix, Microsoft Teams, Signal, Slack, Telegram, WhatsApp, Zalo and a built-in web chat. Plugins add more. Ignore the "50+ messaging apps" claim you'll still see around: no official source backs it.
On the model side, OpenClaw is open: Claude, OpenAI models (including via a ChatGPT plan with Codex access) or a local model. That's a real edge over closed assistants that lock you into one vendor.
Two caveats. WhatsApp runs through an unofficial library that mimics WhatsApp Web, so Meta can ban the number; use a dedicated one. And iMessage needs a Mac. For business apps (CRMs, spreadsheets), OpenClaw goes through the browser or skills, not ready-made connectors like n8n offers.
The widest chat coverage among AI agents, with a WhatsApp link to handle carefully.
OpenClaw without nasty surprises
OpenClaw's own docs are blunt: treat inbound messages as untrusted input, and know that tools run on your host unless you set up sandboxing. Here are six settings to handle before you trust your agent with anything.
The settings
Run the built-in security audit on day one
Must doopenclaw security audit reviews your config and flags what exposes your gateway. Run it again after every update and every new channel.
The docs also warn that OpenClaw is not a hostile multi-tenant security boundary: one gateway per trust level, never one shared gateway.
- Command
- openclaw security audit
- When
- Install and every update
Keep the gateway on loopback and lock it with a token
TrapA standard install binds to loopback by default. Container images are exposed by default, so if you use Docker, set up auth first. Researchers have found many gateways open on the internet, almost always with no token.
Unknown senders get a pairing code, and groups go through an allowlist: keep both on.
- Default
- Loopback, except containers
- Turn on
- Token and pairing
Isolate the agent in a VM with its own accounts
Big winThe calmest users run OpenClaw in a dedicated VM and tightly control which files it can reach. Some give it its own Gmail address and phone number.
If a malicious email or web page tricks the agent, it can't touch your real documents or accounts.
- Isolation
- Virtual machine
- Accounts
- Own email and number
Use a dedicated number for WhatsApp
RiskOpenClaw connects to WhatsApp through an unofficial library that mimics WhatsApp Web. Meta can ban a number that behaves like a bot.
Give your agent its own number, never your business line. Telegram offers an official bot API if you'd rather avoid the risk.
- Connection
- Unofficial
- Safer option
- Telegram
Read every ClawHub skill before installing it
TrapAlmost anyone can publish to ClawHub (a GitHub account at least a week old is enough). An independent audit dubbed ClawHavoc found 341 malicious skills out of 2,857 reviewed, 335 of them dropping an infostealer (malware that steals passwords and data) on macOS. Later counts put the total in the hundreds more.
A skill is a readable file: open it, check which commands it runs, and stick to authors you know.
- ClawHavoc audit
- 341 of 2,857
- Habit
- Read before installing
Put a cheap model on background jobs
Saves moneyThe heartbeat wakes your agent on a schedule, and every wake-up costs tokens. Give it a cheaper model than your main one, space it out and trim the context it rereads.
Check your version: a bug, since fixed, ran these jobs on the primary model regardless of config.
- Sonnet 5.5
- $2 / $10 per million
- Opus 5.5
- $4 / $20 per million
Six tools worth a look
OpenClaw isn't the right call for everyone. Each of these does one thing better, and each card spells out its limit too. Scores come from our full reviews.
Alternatives
Claude Code: the coding agent, and more reliable
4.4/5If your OpenClaw use is mostly about code, Claude Code does the job with far less setup. You need at least Pro at $20 a month ($17 billed annually), Max 5x at $100 or Max 20x at $200. A research preview called Channels lets you message it from a chat app.
The limit: you stay inside Anthropic, and it doesn't run your wider digital life.
- Price
- From $20/mo
- Best for
- Developers
- Limit
- Single vendor
Claude Cowork: an agent for your files, no terminal
4.2/5Cowork works through your documents, spreadsheets and research and hands back a finished deliverable, with nothing to self-host. It needs a paid Claude plan, from $20 a month ($17 billed annually).
The limit: it drains your quota faster than chat, and your files are processed on Anthropic's servers.
- Price
- From $20/mo
- Best for
- File-heavy work
- Limit
- Burns quota fast
ChatGPT: the ready-to-go assistant
4.2/5If you want a capable assistant with nothing to install or secure, ChatGPT is still the most versatile. Plus is $20 a month, and the free plan is plenty for many people.
The limit: it doesn't act on your machine or live in your chat apps the way OpenClaw does.
- Price
- Plus at $20/mo
- Best for
- Zero setup
- Limit
- No access to your machine
n8n: automations you can predict
4.2/5When you know exactly what you want automated, an n8n workflow does the same thing every time, with hundreds of connectors. The self-hosted Community edition is free; the cloud Starter plan is €20 a month billed annually.
The limit: you build every scenario yourself, and the agent never takes initiative.
- Price
- Free self-hosted
- Best for
- Repeatable processes
- Limit
- You build everything
Lindy: the hosted team assistant
3.4/5Lindy works like a teammate inside Slack and Gmail: inbox triage, drafts, meeting notes. Nothing to host or secure yourself. Pricing starts at $49.99 per user per month for 5,000 credits, with no permanent free plan.
The limit: a usage-based bill, and less freedom than OpenClaw.
- Price
- From $49.99/mo
- Best for
- Slack-first teams
- Limit
- Usage-based bill
Hermes Agent: the other open-source agent
FreeHermes Agent, from Nous Research, is also free and MIT-licensed. One Hacker News user who left OpenClaw finds it more reliable day to day.
The limit: it's younger, with a much smaller community. We don't have a full review of it yet.
- Price
- Free, MIT
- Best for
- Technical users
- Limit
- Small community
Do you make a tool in this category? Email us: hello@hackceleration.com
Is OpenClaw right for you?
Three profiles, three answers. Then the checklist to run before you install.
Yes, if you're technical and curious
Developer, sysadmin or solo operator who's comfortable on the command line: OpenClaw gives you an agent that acts from your chat apps, on the model you choose, with no vendor subscription. You'll know how to tune the heartbeat, isolate the agent and read a skill before installing it.
Yes, with help, if you want an agent for your business
A small team can get a lot out of it (monitoring, request triage, daily reports) as long as one person owns config and security. Otherwise, have it set up and get trained rather than winging it.
No, if you've never opened a terminal
A misconfigured agent with access to your machine can delete files or expose your accounts. If you want an assistant without that risk, go with ChatGPT or Claude Cowork. For repeatable automations, use n8n.
- You can open a terminal and read an error message
- You have Node 24.22.1+ (Node 26 recommended)
- You have an API key and a spending cap at your model provider
- You've planned a VM or a dedicated machine
- You have a spare number if you connect WhatsApp
- You'll run openclaw security audit after every update
What are you actually here for?
The tools we rank above and below OpenClaw, and who each one suits.
You would rather have it set up for youOpenClaw AgencyWhat we build on OpenClaw, how long it takes, and where the budget starts.
You would rather learn to run it yourselfOpenClaw TrainingAn expert opens OpenClaw with you and works on your real case, not a demo.
Frequently asked questions
Is OpenClaw really free?
The software is: MIT license, no paid tier, no official hosted service. The AI model isn't: you pay your provider per million tokens, unless you run a local model. Tip: set a monthly spending cap in your provider's console before you plug in the key, so a looping agent can't drain your account.Can I use my Claude Pro or Max subscription with OpenClaw?
No. Anthropic no longer allows Claude subscriptions inside OpenClaw: you need an API key or paid extra usage. ChatGPT is different: OpenClaw supports signing in with a plan that includes Codex access, though a paid ChatGPT plan alone isn't enough.How much does OpenClaw cost per month?
It depends on the model and on what your agent does. The software is $0; Claude Sonnet 5.5 costs $2 per million input tokens and $10 per million output, and Opus 5.5 is double. The most underestimated cost is the heartbeat, which burns tokens even when you ask for nothing, so give it a cheap model.Is OpenClaw safe to use?
It can be, if you configure it carefully, because the agent runs commands on your machine. The real risks: an email or web page that hijacks the agent through prompt injection, a malicious ClawHub skill, or a gateway exposed to the internet without a token. Run openclaw security audit, isolate the agent in a VM and give it its own accounts.Do I need a Mac mini to run OpenClaw?
No. Lots of people use a Mac mini so it runs around the clock, but a Linux box, a small server or a VM works fine. A Mac is only required for iMessage. On a rented server, keep the gateway on loopback and reach it through an encrypted tunnel instead of opening it to the internet.Can OpenClaw run on a local model?
Yes, through Ollama for example, and API costs drop to zero. Pick a model that supports tool calling, or the agent can't do anything. Expect weaker results than Claude or OpenAI's top models on multi-step tasks; a common compromise is local for background jobs, a frontier model for the hard ones.OpenClaw vs Claude Code: what's the difference?
Claude Code is a coding agent that works inside your codebase. OpenClaw is a general assistant that lives in your chat apps and acts across your whole machine. If you code, Claude Code is more reliable; if you want to run files, email and errands from Telegram, that's OpenClaw.Will WhatsApp ban my number if I use OpenClaw?
It can happen. The link runs through an unofficial library that mimics WhatsApp Web, and Meta can ban numbers that behave like bots. Use a number dedicated to the agent. If you want an official connection, Telegram has a proper bot API.
Get our next reviews in your inbox
One email whenever we publish a new AI tool review or comparison: real prices, real limits, a straight verdict.