Hacker ApprovedDepartments

NanoClaw

Ranked 5 of 26 AI agents by recommenders

Recommended as a small, auditable alternative to OpenClaw that runs the agent in a container; the main caveat is that it is beta-stage with fewer built-in features.

Recommended as a small, auditable alternative to OpenClaw that runs the agent in a container; the main caveat is that it is beta-stage with fewer built-in features.

103 people gave an opinion

recommend it
58
criticize it
45
approval share
56%
Each figure is one person. RecommendsCriticizes

Recommended in 6 of 13 months

  1. November 2025: not recommended
  2. December 2025: not recommended
  3. January 2026: not recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: not recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: not recommended
  12. October 2026: not recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 58 people recommend itNeeds 10 or more, met.
  • 1.2 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 6 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Runs agent in containerized sandbox

    “It's really smart to run something like this in a sandbox, especially in the current beta/experimentation phase.”

    Comment from 3 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”

    “Nanoclaw is excellent. Natively uses Apple containers and easy to use with oauth Claude code subscription.”

    Comment from 11 Feb 2026 in “NanoClaw solves one of OpenClaw's biggest security issues”

    “dockerized by default, a fraction of the amount of lines of code so you can actually peer review the code”

    Comment from 19 Mar 2026 in “Nvidia NemoClaw”
  • Chat-based personal assistant use

    “I've given my openclaw/nanoclaw a personality whose sole job is to tend to my server and enjoy it”

    Comment from 16 Apr 2026 in “Is anyone actually using OpenClaw?”

    “It's a mess in terms of code/filesystem organization, but it's nice to be able to text somebody”

    Comment from 24 Mar 2026 in “NanoClaw Adopts OneCLI Agent Vault”

    “Now my partner (and i) have a chat-interface to independently manage movies”

    Comment from 25 Feb 2026 in “Ask HN: Share your productive usage of OpenClaw”
  • Scheduled LLM tasks and reminders

    “I find some things useful about my nanoclaw setup - convenience and easy scheduling of LLM related tasks”

    Comment from 23 Feb 2026 in “NanoClaw Moved from Apple Containers to Docker”

    “get daily briefings on sales pipeline status, get reminders on tasks, give it updates after calls”

    Comment from 17 Feb 2026 in “Running NanoClaw in a Docker Shell Sandbox”

    “It can schedule stuff and run in a loop, so it's like claude combined with cron.”

    Comment from 22 Feb 2026 in “NanoClaw Moved from Apple Containers to Docker”
    • Comment from 2 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”
  • Small codebase that is auditable

    “dockerized by default, a fraction of the amount of lines of code so you can actually peer review the code”

    Comment from 19 Mar 2026 in “Nvidia NemoClaw”

    “Karpathy's point about NanoClaw's ~4000 lines being auditable is a solid trust argument”

    Comment from 22 Feb 2026 in “Andrej Karpathy talks about "Claws"”

    “def appreciate this more compact approach; everything is an experiment rn.”

    Comment from 2 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”

What people warn about

Each mark is one comment

  • Security and trust concerns

    “I don't see how self-modifying code that uses a RNG to generate changes is going to be better for security than a proper plugin system.”

    Comment from 28 Feb 2026 in “Don't trust AI agents”

    “that assumption isn't safe, remember that the only thing namespaces away is that which supports namespaces”

    Comment from 7 Apr 2026 in “NanoClaw's Architecture Is a Masterclass in Doing Less”

    “I wanna say for something which is 100% a security product I prefer explicit versus implicit / magically”

    Comment from 17 Feb 2026 in “Running NanoClaw in a Docker Shell Sandbox”
  • Fewer built-in features than OpenClaw

    “nanoclaw has a lot fewer capabilities than openclaw, with the expectation that you'll essentially build your own features on top of it”

    Comment from 7 Apr 2026 in “NanoClaw's Architecture Is a Masterclass in Doing Less”

    “This isn’t production code but a reference or starting point they can use to build functional custom software”

    Comment from 11 Feb 2026 in “NanoClaw solves one of OpenClaw's biggest security issues”

    “nanoclaw requires agents to code extensions on the fly to get to feature parity with openclaw”

    Comment from 28 Feb 2026 in “Don't trust AI agents”
  • Reliability and maintenance problems

    “the solution is creating uncompatibile branch and forcing users to use cladue for resolving merge conflits”

    Comment from 22 Feb 2026 in “NanoClaw Moved from Apple Containers to Docker”

    “it worked fine until the next day some update decided to revert the power management settings”

    Comment from 2 Mar 2026 in “Zclaw – The 888 KiB Assistant”

    “after multiple cases of NanoClaw "forgetting" to do it or accidentally running multiple times”

    Comment from 16 Apr 2026 in “Is anyone actually using OpenClaw?”

Other AI agents people recommend

The four most recommended other AI agents, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

NanoClaw compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
OpenClaw77697544%101 mo49 owners—
Muse by Meta14723239%61 mo4 owners—
Hermes Agent by Nous Research842875%91 mo8 ownersApproved
Clawdbot699941%31 mo7 owners—
NanoClawThis page584556%6——
See all 26 AI agents, ranked

What people said

40 of the 120 comments that mention it, newest first. Each links to the original comment.

“I'm thankful to things like nanoclaw and then Hermes for exposing me to the core ideas.”

RecommendsComment from 31 Jul 2026 in “qm”

“after multiple cases of NanoClaw "forgetting" to do it or accidentally running multiple times”

CriticizesComment from 16 Apr 2026 in “Is anyone actually using OpenClaw?”

“I've given my openclaw/nanoclaw a personality whose sole job is to tend to my server and enjoy it”

RecommendsComment from 16 Apr 2026 in “Is anyone actually using OpenClaw?”

“The great things about NanoClaw is that its actually Claude running in an Apple Container on my Mac.”

RecommendsComment from 15 Apr 2026 in “Is anyone actually using OpenClaw?”

“need something to pay with paperclip, gastown, nanoclaw and the next 100k stars FOMO hype”

MixedComment from 15 Apr 2026 in “Is anyone actually using OpenClaw?”

“It's freed up my home life to spend more time with my children and my Mrs.”

RecommendsComment from 15 Apr 2026 in “Is anyone actually using OpenClaw?”

“nanoclaw has a lot fewer capabilities than openclaw, with the expectation that you'll essentially build your own features on top of it”

CriticizesComment from 7 Apr 2026 in “NanoClaw's Architecture Is a Masterclass in Doing Less”

“that assumption isn't safe, remember that the only thing namespaces away is that which supports namespaces”

CriticizesComment from 7 Apr 2026 in “NanoClaw's Architecture Is a Masterclass in Doing Less”

“It's a mess in terms of code/filesystem organization, but it's nice to be able to text somebody”

MixedComment from 24 Mar 2026 in “NanoClaw Adopts OneCLI Agent Vault”

“I love how NanoClaw is aggregating the effort of making personal assistants more secure.”

RecommendsComment from 24 Mar 2026 in “NanoClaw Adopts OneCLI Agent Vault”

“nanoclaw is a slightly more secure version - containerized filesystem basically - and very popular”

MixedComment from 23 Mar 2026 in “OpenClaw Is a Security Nightmare Dressed Up as a Daydream”

“What these 'channels' do is essentially why I was running a nanoclaw at work”

RecommendsComment from 20 Mar 2026 in “Claude Code: Channels”

“dockerized by default, a fraction of the amount of lines of code so you can actually peer review the code”

RecommendsComment from 19 Mar 2026 in “Nvidia NemoClaw”

“I simply can't bring myself to give Israeli software like this access to any of my systems.”

MixedComment from 13 Mar 2026 in “Run NanoClaw in Docker Sandboxes”

“It knows my goals, keeps me on track, does meal planning for me”

RecommendsComment from 13 Mar 2026 in “Run NanoClaw in Docker Sandboxes”

“a couple novel design decisions are going to prove to be widely adopted and revolutionary”

RecommendsComment from 13 Mar 2026 in “Run NanoClaw in Docker Sandboxes”

“it worked fine until the next day some update decided to revert the power management settings”

MixedComment from 2 Mar 2026 in “Zclaw – The 888 KiB Assistant”

“it should be small enough to understand, modify and extend itself”

RecommendsComment from 28 Feb 2026 in “Don't trust AI agents”

“So the skills model means that you only "generate code" that _you_ specifically ask for.”

RecommendsComment from 28 Feb 2026 in “Don't trust AI agents”

“I tried NanoClaw and love the skill (and container by default) model.”

RecommendsComment from 28 Feb 2026 in “Don't trust AI agents”

“nanoclaw requires agents to code extensions on the fly to get to feature parity with openclaw”

CriticizesComment from 28 Feb 2026 in “Don't trust AI agents”

“It is designed as a sort of framework that gives a solid foundation for you to build your own custom version.”

RecommendsComment from 28 Feb 2026 in “Don't trust AI agents”

“I don't see how self-modifying code that uses a RNG to generate changes is going to be better for security than a proper plugin system.”

CriticizesComment from 28 Feb 2026 in “Don't trust AI agents”

“Now my partner (and i) have a chat-interface to independently manage movies”

RecommendsComment from 25 Feb 2026 in “Ask HN: Share your productive usage of OpenClaw”

“It's novel, exciting, and might inspire some real practical products in the future”

MixedComment from 23 Feb 2026 in “NanoClaw Moved from Apple Containers to Docker”

“I find some things useful about my nanoclaw setup - convenience and easy scheduling of LLM related tasks”

MixedComment from 23 Feb 2026 in “NanoClaw Moved from Apple Containers to Docker”

“It can schedule stuff and run in a loop, so it's like claude combined with cron.”

RecommendsComment from 22 Feb 2026 in “NanoClaw Moved from Apple Containers to Docker”

“the solution is creating uncompatibile branch and forcing users to use cladue for resolving merge conflits”

CriticizesComment from 22 Feb 2026 in “NanoClaw Moved from Apple Containers to Docker”

“Karpathy's point about NanoClaw's ~4000 lines being auditable is a solid trust argument”

RecommendsComment from 22 Feb 2026 in “Andrej Karpathy talks about "Claws"”

“We're already running two of them in production (PR reviews and ticket triaging)”

RecommendsComment from 21 Feb 2026 in “Andrej Karpathy talks about "Claws"”

“get daily briefings on sales pipeline status, get reminders on tasks, give it updates after calls”

RecommendsComment from 17 Feb 2026 in “Running NanoClaw in a Docker Shell Sandbox”

“I wanna say for something which is 100% a security product I prefer explicit versus implicit / magically”

CriticizesComment from 17 Feb 2026 in “Running NanoClaw in a Docker Shell Sandbox”

“I run this instead of openclaw, mostly because Claude Code itself is sufficient as a harness.”

RecommendsComment from 13 Feb 2026 in “I ditched OpenClaw and built a more secure AI agent (Blink and Mac Mini)”

“This isn’t production code but a reference or starting point they can use to build functional custom software”

CriticizesComment from 11 Feb 2026 in “NanoClaw solves one of OpenClaw's biggest security issues”

“Nanoclaw is excellent. Natively uses Apple containers and easy to use with oauth Claude code subscription.”

RecommendsComment from 11 Feb 2026 in “NanoClaw solves one of OpenClaw's biggest security issues”

“It's really smart to run something like this in a sandbox, especially in the current beta/experimentation phase.”

RecommendsComment from 3 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”

“def appreciate this more compact approach; everything is an experiment rn.”

MixedComment from 2 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”

“The scheduled tasks seem like the major functional difference. Pretty cool.”

RecommendsComment from 2 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”

“I can fork it as a starting point or just give it to Claude for inspiration”

RecommendsComment from 2 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”

“The smell of LLM from the docs of any project puts me off even when I like the idea of the project itself”

MixedComment from 1 Feb 2026 in “Show HN: NanoClaw – "Clawdbot" in 500 lines of TS with Apple container isolation”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.