Tools for
Conviviality

Home / Personal agents / NanoClaw

NanoClaw

A small assistant that runs each agent in its own Linux container and keeps credentials outside it.

Instead of Hosted AI assistants and agents

S · ToolOpen sourceFreeContainers
github.com/qwibitai/nanoclaw
Screenshot of the NanoClaw website

Screenshot from github.com/qwibitai/nanoclaw, taken 2026-10-30, shown to help you recognise the tool. It belongs to its maker. Ask us to remove it.

Giving an assistant your logins has the energy of handing a stranger your house keys, and NanoClaw answers by putting each agent in a container that can only see what you mount. The README says credentials stay outside the container, with a gateway injecting them into outbound requests, and it contrasts that with OpenClaw's application-level allowlists in a single Node process.

NanoClaw scores a 4 on lock-in and delivery and a 3 on footprint, self-direction, power and longevity.

The code is MIT licensed under the nanocoai organization, and the README is written in the first person without naming an author. By default it uses Claude Code through Anthropic's Agent SDK, and other providers, including local models through Ollama, are add-on skills. Setup needs Docker and Node, and fetching the prebuilt image needs a free account, so the maintainers see your email address and when you ask for an image. It also reports anonymous setup diagnostics, and NANOCLAW_NO_DIAGNOSTICS=1 turns them off.

    What stands out

  • Runs each agent in a Linux container with credentials kept outside it
  • MIT licensed, with Claude Code as the default and local models as an add-on
  • Anonymous setup diagnostics, and a free account for the prebuilt image
Do you make NanoClaw? Get the badge for your site

This badge reports a dated review. It is not a certification and it costs nothing. Link it to this page and leave the numbers alone: the image always shows the current score.

For dark backgrounds, use nanoclaw-dark.svg in place of nanoclaw-light.svg.