nanoclaw
OpenClaw-style assistant functionality without OpenClaw's audit burden: security comes from OS-level container isolation rather than application-level allowl…
An AI assistant that runs Claude agents securely in their own Linux containers with filesystem isolation. Connects to WhatsApp, Telegram, Discord, or a local CLI, with memory and scheduled tasks. Built as a deliberately small, auditable alternative to OpenClaw — one process and a handful of source files instead of roughly half a million lines. The guided setup script installs Node, pnpm, and Docker if missing and pairs your first messaging channel.
OpenClaw-style assistant functionality without OpenClaw's audit burden: security comes from OS-level container isolation rather than application-level allowlists, and the codebase is small enough to actually read before trusting it with your accounts and messages.
Security-conscious teams who need messaging platform integrations with a lightweight, container-isolated solution.
https://github.com/nanocoai/nanoclaw
By qwibitai
How to Get It
git clone https://github.com/nanocoai/nanoclaw.git nanoclaw-v2 && cd nanoclaw-v2 && bash nanoclaw.sh
Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.
Trust Signals Reviewed
Community Pulse Active
Discussed on Hacker News, Reddit
- Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation — Hacker News · 533 pts
- NanoClaw moved from Apple Containers to Docker — Hacker News · 169 pts
- Running NanoClaw in a Docker Shell Sandbox — Hacker News · 163 pts
3 mentions across 1 sources
Reviewer notes
Reviewed review. These are observations, not a security certification.
Scored from trust signals (evidence-eval-v1): 27,376 GitHub stars; contributors unknown; last commit 34d ago; license MIT.
2026-05-10: 27K stars with only 3 production mentions is a flag worth noting—this looks like a community darling that hasn't been stress-tested in real production workloads yet. The pitch is a containerized agent that bridges Anthropic's SDK to messaging platforms (WhatsApp, Telegram, Slack, etc.) with memory and scheduled jobs, which is a genuinely useful pattern for security alerting or incident notification pipelines. Tradeoff: you're trading OpenClaw's feature depth and battle-hardening for a smaller footprint, and container ops overhead is real if your team isn't already running that stack. Evaluate carefully before putting it on any path that touches sensitive comms data.
Things to check
- Lightweight implementation may lack the feature breadth and production hardening of full OpenClaw; container-based deployment adds operational complexity for teams without containerization experience.
How to evaluate tools before deploying →
Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.
Evaluation
Scored from trust signals (evidence-eval-v1): 27,376 GitHub stars; contributors unknown; last commit 34d ago; license MIT.