
ironclaw
IronClaw is an Agent OS focused on privacy, security and extensibility
The Lens
By Erik Loyd, SaaS CEO and former COO/CFO of an AWS Premier Partner.
Updated Jul 2026
IronClaw is a personal AI assistant that runs entirely on your own machine. Built by NEAR AI, it's what you reach for when you want an always-on agent that reads your email, runs scheduled jobs, and answers from Telegram or Slack, but you don't want any of that data leaving your control. Everything is stored locally and encrypted. It's dual-licensed Apache 2.0 and MIT, completely free and open source.
It ships as a single Rust binary, which is the whole pitch: native speed, memory safety, nothing extra to babysit. Install is a shell script or Homebrew, then `ironclaw onboard` wires up your LLM provider. It leans on Postgres for persistence rather than SQLite, and runs untrusted tools inside a WASM sandbox or Docker, so the security story is built in, not bolted on. You bring your own model API keys, and you'll want Postgres running somewhere.
This is a young project, a Rust reimplementation inspired by OpenClaw, so treat it as early but serious. Solo devs and privacy-minded tinkerers: this is the fun one, a local agent you actually control. Small teams: usable for internal automation if someone's comfortable with Rust and Postgres. Large teams: watch it, don't bet a production workflow on it yet.
The catch is that "Agent OS" is carrying a lot of weight in the description. You're running an early-stage framework, not a finished product, and the work of wiring up providers, keys, and a database is on you. The privacy guarantee is only as good as the setup you build around it.
Free vs Self-Hosted vs Paid
fully freeFree
Dual-licensed Apache 2.0 and MIT. Fully free and open source, every feature included. No paid tier from the project.
Self-hosted
This is the only way to run it, and it's the point. A single Rust binary installed via script or Homebrew, backed by Postgres for persistence. You supply your own LLM provider API keys, so model costs are separate. Untrusted tools run in a WASM sandbox or Docker.
Paid
No paid or hosted tier. Your only ongoing cost is whatever your LLM provider charges for the calls the agent makes.
Free and open source (Apache 2.0 / MIT). You pay only your LLM provider, plus the effort of running Postgres and managing your own keys.
Get tools like this every Wednesday
One featured tool, three on the radar. No fluff.
A low score is not a verdict on quality. Young and niche tools start low by design. How we calculate scores
Trust Signals
License: Apache License 2.0
Use freely. Patent grant included.
Commercial use: ✓ Yes
About
- Owner
- NEAR AI (Organization)
- Stars
- 12,572
- Forks
- 1,488