Repolode
Submit
nearai

nearai/ironclaw

A self-hosted personal AI assistant in Rust with WASM-sandboxed tools, encrypted credential storage, and a web UI, inspired by OpenClaw.

Open-source alternative to:ChatGPT

View on GitHubWebsite
Stars
12,665
Forks
1,485
Open issues
1,561
Last commit
2 days ago

What is it?

IronClaw is a personal AI assistant that runs on your own machine. It is written in Rust and positions itself as an "Agent OS" focused on privacy, security and extensibility. Setup is handled by an `ironclaw onboard` command that selects an LLM provider, stores the API key in an encrypted local secret store, and on macOS and Linux installs a background service with a WebUI login link.

The project emphasizes containment. Untrusted tools run inside WebAssembly sandboxes with capability-based permissions, HTTP requests are limited to approved hosts and paths, and secrets are injected at the host boundary so tools never see them. Prompt injection defenses, leak detection and a full audit log of tool executions are included. Optional Docker sandboxing with per-job tokens is also supported.

Beyond chat over a REPL, HTTP, Telegram or Slack channels, IronClaw offers cron and event-driven routines, a heartbeat for background monitoring, parallel jobs, hybrid full-text and vector memory, and MCP server integration. It is a Rust reimplementation inspired by the TypeScript project OpenClaw.

Key features

  • 01Untrusted tools run in WebAssembly sandboxes with capability-based permissions.
  • 02API keys and secrets are injected at the host boundary and never exposed to tools.
  • 03HTTP access is limited to explicitly approved hosts and paths.
  • 04Chat over REPL, HTTP webhooks, Telegram, Slack and a browser UI with live streaming.
  • 05Cron, event and webhook routines run background automation.
  • 06Hybrid full-text and vector search over persistent memory.
  • 07Connects to Model Context Protocol (MCP) servers for extra tools.

Use cases

  • Running a private AI assistant that keeps personal notes and credentials on your own machine.
  • Automating scheduled checks or reactions to webhooks with an LLM agent.
  • Chatting with an AI assistant through Telegram or Slack while keeping tool access restricted.
  • Experimenting with sandboxed, self-built WASM tools for an agent.

Topics

#ai-agent#rust#wasm#sandbox#llm#security#self-hosted#mcp#codeact#openclaw

FAQ

What is ironclaw?
A self-hosted personal AI assistant in Rust with WASM-sandboxed tools, encrypted credential storage, and a web UI, inspired by OpenClaw. IronClaw is a personal AI assistant that runs on your own machine. It is written in Rust and positions itself as an "Agent OS" focused on privacy, security and extensibility. Setup is handled by an `ironclaw onboard` command that selects an LLM provider, stores the API key in an encrypted local secret store, and on macOS and Linux installs a background service with a WebUI login link.
Is ironclaw free to use? What license does it have?
ironclaw is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is ironclaw still maintained?
Actively maintained. The last commit to ironclaw was on Oct 20, 2026.
What can I use ironclaw for?
Running a private AI assistant that keeps personal notes and credentials on your own machine. Automating scheduled checks or reactions to webhooks with an LLM agent. Chatting with an AI assistant through Telegram or Slack while keeping tool access restricted. Experimenting with sandboxed, self-built WASM tools for an agent.
Where can I get ironclaw?
The source code and installation instructions are on GitHub: https://github.com/nearai/ironclaw

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects