Vibe coding tool
OpenClaw
The viral cross-app autonomous agent — powerful, handle with care.
Local daemon across your messaging appsOpen-source · bring your own LLMPersonal automation across Signal, Telegram, WhatsApp
What it is
OpenClaw (by Peter Steinberger; formerly Warelay then Moltbot) hit 247k+ stars in months. It is a local daemon that acts across your messaging apps, driven by any LLM.
It is genuinely capable — and it asks for broad access to your accounts (email, calendar, chats), so it deserves real caution. Lock it down before you trust it with anything sensitive.
Handle with care. This tool asks for broad access to your accounts. Grant the least it needs, review the permissions, and never point it at sensitive data you have not secured.
Install & set up
1. Install
Global npm (or pnpm).
npm install -g openclaw@latest2. Onboard
The wizard sets up your model, key, and the gateway daemon in about two minutes.
openclaw onboard --install-daemon3. Check it is running
The gateway listens on port 18789.
openclaw gateway status4. Open the dashboard
Manage channels and tasks from the UI.
openclaw dashboardFrom install to your first verified proof
The tool drafts; you stay accountable. Here is the path from a fresh install to a proof you can defend.
1Automate one real personal workflow — for example a daily summary to your own Telegram.
2Before you trust it, review exactly what access you granted and remove anything it does not need.
3Record a short screen capture plus the config/repo.
4Log a proof at /proof with an Explain that covers what you granted, why, and how you contained it.
The proof tie: Security IS the work here. Your Explain should cover what you granted, why, and how you contained it — that is the accountable-building difference.
Strengths & gotchas
Strengths
- Acts across all your messaging apps
- Persistent daemon with scheduling and memory
- Model-agnostic
- Huge momentum and ecosystem
Gotchas
- Broad permissions (email, calendar, chats) are a real security and privacy risk if misconfigured
- Not a focused coding tool
- Lock down access before trusting it