Index / Moltis · updated Oct 24, 2026
Moltis
moltis-org/moltis · healthy · rank 23 of 50 by stars
A security-first personal agent server written in Rust, shipping as a single sandboxed binary with multi-provider LLMs, voice, memory, and chat integrations. It positions itself as the hardened, auditable alternative to OpenClaw's TypeScript stack.
Facts
Repository
Runtime
Posture
Community
Security breakdown
Composite 92 / 100 · how these are scored
higher is safer
higher is safer
higher is safer
higher is safer
higher is riskier
Model access
Read from the repository, not written by a model · 177 files examined
6 providers · runs locally · custom endpoint
Pinned models
gpt-4o released 2024-05-13 — 2 years old (from the public model catalogue)
Pin last edited 2 months ago
Evidence
Decision
Why choose Moltis over OpenClaw?
Why choose this
- Single Rust binary with no Node.js runtime dependency
- Sandboxed container execution for every command by default
- Smaller auditable core (~7.5K lines for agent runner and model interface)
Tradeoffs
- Smaller community and ecosystem than OpenClaw
- No official mobile companion apps
- Fewer third-party skills and integrations
Best fit
- Security-conscious users wanting sandboxed agent execution
- Self-hosters on low-power hardware like Raspberry Pi
- Rust developers who want an auditable agent codebase
Avoid if
- You need a mature plugin marketplace or large skill ecosystem
- You want mobile companion apps out of the box
- You prefer a larger, more established community
Strong evidence from the README and recent commits shows active development and a clear security-first architecture. Community sentiment is uncertain: Reddit matches are irrelevant Italian-language false positives, and web mentions are mostly automated ecosystem digests with mixed maturity assessments.
AI layer reviewed Oct 5, 2026 · how this is written
Star activity
2,906 stars today
Overview
Moltis is a secure, persistent personal agent server written entirely in Rust, distributed as a single self-contained binary with no Node.js or npm runtime dependencies. Its core differentiator is a security-first architecture: every command executes inside a sandboxed container rather than on the host, API keys never leave the local machine, and unsafe code is isolated to FFI and precompiled runtime boundaries. The workspace spans ~270K lines across 59 modular crates, but the agent runner and model interface fit in roughly 7.5K auditable lines, with 470+ test files.
Feature-wise it is surprisingly complete: multi-provider LLM support, voice, cross-session memory and recall, automatic edit checkpoints, scheduling, Telegram/Signal/Discord/WhatsApp/Teams integrations, browser automation, MCP server support, SSH or node-backed remote execution, and managed deploy keys with host pinning. It deliberately avoids a plugin marketplace, framing that as a supply-chain security win rather than a limitation.
Compared to OpenClaw's TypeScript stack with Swift/Kotlin companion apps, Moltis trades ecosystem breadth for auditability, a minimal footprint, and hardened defaults. It runs comfortably on a Mac Mini or Raspberry Pi, installs via a one-liner, Homebrew, Docker, or cargo, and recently hit the Hacker News front page. Recent commits show active release engineering, including macOS notarization hardening and frequent dated releases.