Index / Moltis · updated Sep 3, 2026
Moltis
moltis-org/moltis · healthy · rank 19 of 43 by stars
A security-first Rust reimplementation of the OpenClaw personal agent concept, shipping as a single auditable binary with sandboxed execution. It trades plugin-marketplace breadth for a hardened, batteries-included core with voice, memory, and multi-channel messaging built in.
Facts
Repository
Runtime
Posture
Community
Security breakdown
Composite 92 / 100 · how these are scored
higher is safer
higher is safer
higher is safer
higher is safer
higher is riskier
Model access
Read from the repository, not written by a model · 175 files examined
6 providers · runs locally · custom endpoint
Pinned models
gpt-4o released 2024-05-13 — 2 years old (from the public model catalogue)
Pin last edited 10 days ago
Evidence
Decision
Why choose Moltis over OpenClaw?
Why choose this
- Sandboxed container execution by default, not on the host
- Single Rust binary with no Node/npm runtime or supply-chain surface
- Auditable core (~7.5K lines for agent runner) with unsafe isolated to FFI
Tradeoffs
- No plugin marketplace; far smaller extension ecosystem
- Smaller community and mindshare than OpenClaw
- Younger project with less battle-tested production history
Best fit
- Security-conscious users wanting a hardened OpenClaw alternative
- Self-hosters running agents on a Mac Mini, Raspberry Pi, or home server
- Users who want voice, memory, and chat integrations without plugin risk
Avoid if
- You depend on OpenClaw's large skills/plugin ecosystem
- You want a mature multi-user or team deployment model
- You prefer TypeScript/Python stacks you can hack on quickly
Strong evidence from a detailed README, active recent commits, and third-party listings confirming it as an OpenClaw alternative. Reddit mentions are irrelevant noise (Italian word matches), so community sentiment is based mainly on web search footprint.
AI layer reviewed Aug 24, 2026 · how this is written
Star activity
2,844 stars today
Overview
Moltis is a security-first personal agent server written in Rust, positioned explicitly as a hardened alternative to OpenClaw. It ships as a single self-contained binary — no Node.js, no npm, no external runtime — and is designed to run on hardware you own, from a Mac Mini to a Raspberry Pi. The core value proposition is 'secure by design': API keys never leave your machine, and every command the agent executes runs inside a sandboxed container rather than directly on the host.
Feature-wise it is batteries-included rather than plugin-driven: voice, persistent memory with cross-session recall, automatic edit checkpoints, scheduling/cron, browser automation (with stealth mode), MCP server support, SSH or node-backed remote execution, and integrations for Telegram, Signal, WhatsApp, Discord, and Teams are all built into the core. The author deliberately avoids a plugin marketplace to eliminate supply-chain attack surface, which is the sharpest architectural divergence from OpenClaw's skills ecosystem.
The codebase emphasizes auditability: the agent runner and model interface fit in roughly 7.5K lines, with ~270K lines across 59 modular crates and 470+ test files, and unsafe code is confined to FFI boundaries. Recent commits show active maintenance across WhatsApp media handling, cron delivery, browser container support, and i18n. Compared to OpenClaw, Moltis trades ecosystem breadth and community size for a smaller, auditable, memory-safe core with stronger default isolation.