Tools for
Conviviality

Home / Personal agents / IronClaw

IronClaw

A Rust assistant that runs untrusted tools in WebAssembly sandboxes and says it collects no telemetry.

Instead of Hosted AI assistants and agents

M · ToolOpen sourceFreeNo telemetry
github.com/nearai/ironclaw
Screenshot of the IronClaw website

Screenshot from github.com/nearai/ironclaw, taken 2026-10-30, shown to help you recognise the tool. It belongs to its maker. Ask us to remove it.

Security people like to say an agent should be treated as an intern with root, and IronClaw is built by people who took that seriously. The README describes a Rust reimplementation inspired by OpenClaw, where untrusted tools run in WebAssembly sandboxes with capability-based permissions, secrets are injected at the host boundary and never exposed to the tools, and every tool execution lands in an audit log.

IronClaw scores a 5 on lock-in, a 4 on footprint, self-direction, power and delivery and a 3 on longevity.

It is dual licensed, Apache-2.0 or MIT at your option, and the page states no telemetry, analytics or data sharing, with all data stored locally under your home folder. The maker is the nearai organization on GitHub, and the page describes no company service you depend on. Onboarding asks you to choose a model provider and enter its API key, and the page does not mention local models.

    What stands out

  • Runs untrusted tools in WebAssembly sandboxes, with secrets kept away from them
  • Apache-2.0 or MIT, and the page states no telemetry
  • Onboarding uses a provider API key, and local models are not mentioned
Visit IronClaw
Do you make IronClaw? Get the badge for your site

This badge reports a dated review. It is not a certification and it costs nothing. Link it to this page and leave the numbers alone: the image always shows the current score.

For dark backgrounds, use ironclaw-dark.svg in place of ironclaw-light.svg.

Other tools for “get an assistant that works for me”