OpenClaw and Moltbook Unveiled: Tools Transforming AI Agents into Autonomous Coworkers

By now, you have probably heard about OpenClaw and its spinoff, Moltbook. These have captured the attention of both technical and non-technical audiences and represent, in my view, a pivotal moment for AI agents akin to the “Netscape moment.” There’s no turning back.

OpenClaw, originally called Clawbot, was launched by Peter Steinberger on GitHub on November 25. In the past week alone, it gained over 100,000 stars and attracted 2 million visitors. According to The Verge, Steinberger’s post caused Clawbot to go viral, so much so that Anthropic’s legal team requested a name change to prevent confusion with their AI, Claude.

What is OpenClaw?

OpenClaw is promoted as “an agent that actually does things.” It is an open-source, constantly running personal AI assistant capable of executing proactive background tasks such as cron jobs, reminders, and various duties from your own machine. It can operate locally on devices like a Mac mini or a powerful laptop, without requiring cloud access.

Its standout feature is granting the AI control over your device, allowing it to manage your machine on your behalf, including computer vision capabilities to interact with your screen, files, and systems.

This sets it apart from chatbots, which only make suggestions needing manual execution by humans, and elevates it beyond enterprise task agents that may use tools but don’t typically control personal or company devices directly.

Users report transformative applications in scheduled tasks such as research compilation, email drafting, travel planning, software updates, content creation, and expense reporting—with a “set it and forget it” model where users later review and refine the instructions.

The Birth of the AI Executive Assistant Category

This development introduces a new software category: the executive assistant. Unlike previous AI assistants, OpenClaw bots earn trust comparable to that given to experienced human assistants.

Consider a CEO’s human executive assistant who manages critical access to calendars, inboxes, credit cards, and social media, besides the everyday systems used. Many leaders regard their executive assistant as their most vital human resource.

Prior AI assistants carried out tasks but always required human oversight and did not typically manage devices or processes autonomously.

Moreover, OpenClaw’s spinoff, Moltbook—an AI-only social network—demonstrates that executive assistants can spawn sub-agents to act as delegates and schedule tasks. These “moltbots” multiply rapidly, being sent

By now, you have likely heard about OpenClaw and its spinoff, Moltbook. It’s captured the imagination of both technical and non-technical people alike. And in my opinion, it’s the Netscape moment for AI agents. There’s no going back from here.

OpenClaw (originally named Clawbot) was released by Peter Steinberger on GitHub on November 25. In just the last week alone, he reported that it had received over 100,000 stars on GitHub and had 2 million visitors. According to The Verge, Steinberger’s post helped Clawbot go viral — so viral that Anthropic’s legal team requested a name change to avoid confusion with their own Claude.

What is OpenClaw?

OpenClaw is touted as “an agent that actually does things.” It’s an open-source, always-on personal AI assistant that can run proactive background work (cron jobs, reminders, tasks) and can be hosted on your own machine. You can run one locally (no cloud required) on a Mac mini or powerful laptop.

Its defining feature is that you give the agent device control, the ability to run your machine on your behalf, including having computer vision of your screen, files, and systems.

This is in sharp contrast to chatbots (many of which have been presented as agents), which only make suggestions that a human must then manually put into the real world. It’s also a step up in autonomy from enterprise task agents, which can access tools and systems but don’t typically control personal or company devices.

OpenClaw users report game-changing use cases, mostly in the form of scheduled tasks such as research reports, email drafting, travel updates and planning, software updates, content production, and expense reporting. Set it and forget it. Review their work later and tweak instructions.

The AI Executive Assistant category is born

This creates an entirely new software category: the executive assistant. This is different from previous AI assistants in that you trust OpenClaw bots as you would a seasoned, savvy human.

Think of a CEO’s human executive assistant. They have unfettered access to their boss’s calendar, inbox, credit cards, and, in some cases, social media credentials, plus the tools and systems they use every day. Many leaders will tell you that their EA is their most important human resource.

Previous AI assistants did background work and completed tasks with a human in the loop. They didn’t manage processes with device control or the ability to act in any significant way without human oversight.

Moreover, as we are learning with OpenClaw’s spinoff, Moltbook (a viral social network for agents), these executive assistants can spawn their own agents to act as sub-assistants and schedule cron jobs. After all, they were trained on humans and likely read about Tom Sawyer’s clever use of Huck Finn to paint a fence for him.

That’s why the number of these “moltbots” is spawning faster than a virus outbreak. Spin them up and ship them to Moltbook for orientation and training.

As a result, I’m revising my Agent Gradient, which plots different forms of agents according to their autonomy and impact. Executive assistants sit near the top of the list. They are more Waymo (self-driving) than Waze (turn-by-turn directions) and will likely change everyone’s expectations for AI.

What concerns emerge with OpenClaw and Moltbook?

While the picture taking shape is one of rapid innovation, it is also stoking our greatest fears about AI. Everything we’ve seen in the movies or read in pulp fiction seems to be unfolding in real time, depending on how much you trust social media and self-reported incidents.

Examples include:

On top of that, the launch of Moltbook has garnered even more sensational headlines than OpenClaw did. This Reddit-like community shares (alleged) agentic posts where they compare notes, suggest creating their own shared language instead of English, and reveal ways to jailbreak their instructions. They even created their own religion.

Again, this could very well be humans having fun with us, but still, there are confirmed examples of real OpenClaw agents being sent to Moltbook and posting content. This Wired article provides an entertaining perspective on the fastest-growing social network in history.

Security controls will become the lead feature for agents

OpenClaw may have commoditized the cost of agents from a software perspective (as DeepSeek disrupted LLMs last year), but that doesn’t mean agents will be free in the future.

There’s still the issue of LLM access, which can be expensive through Claude or ChatGPT. One workaround has been the use of Kimi, which has become the de facto model of choice for cost-conscious OpenClaw users. But really, the cost of running the agent pales in comparison to the risk of it going rogue — and exposing a user’s credentials and systems to hackers.

In G2’s latest report on Agents, we revealed that while security was a concern to buyers, they were willing to shoulder the risk to realize the cost savings and autonomy that agents could bring to bottlenecked parts of their organizations. But that was only because stories of “agents gone wild” had yet to grace the headlines.

Now all of that has changed. Companies are telling employees to avoid installing and running OpenClaw. CEOs are reaching out to their InfoSec teams to update and clarify their agent policies. Even OpenClaw’s website is blocked by many companies.

Over the coming weeks, I anticipate that even more examples of OpenClaw bot shenanigans will cause buyers to be security-first when it comes to any agentic implementations. 

“This means that instead of security being a check-the-box motion for buying enterprise agents, it will be the lead attribute that due diligence centers on, from reviews to certifications.”

Tim Sanders
Chief Technology Officer, G2

Additionally, there will be a market for agent governance systems that demonstrate strong governance in their design. So I don’t expect the agent category to become open source in the long run. I also continue to believe that the market for third-party agent guardrails will continue to grow, which was one of my predictions for 2026.

Agents will get their “Netscape moment”

I remember when early browsers like Mosaic/Netscape hit the mainstream in the mid-1990s. By January 1995, it was the buzz across media and boardrooms alike. Non-techies were now empowered to roam the internet and find useful content. Startups were born. Everyone quickly developed FOMO to get on the web or get left behind.

It was a moment of such widespread awareness, the paradigm of “how do we ____” changed.

To quote Yogi Berra: “It’s déjà vu all over again.”

Although agent adoption by companies has been brisk (40% of enterprises spent $1 million on them last year), personal adoption has lagged. I would speculate that few of us have actually set up an agent and given it the power to complete a task on our behalf.

Expect that to change as safer versions of OpenClaw are released (think tighter guardrails and permissions) in response to the tsunami of coverage and water-cooler talk unfolding in 2026. Even if executive assistants don’t become as ubiquitous as personal websites three decades ago, FOMO for agents will spread faster than ever.

Where do we go from here?

Personally, I’m sitting this one out. I haven’t downloaded OpenClaw or bought a Mac mini to run it on. I believe the risks are too high and, to be honest, I’m not ready to turn over the keys to my life to a machine.

I’m just over here, eating popcorn while reading about it and talking to a variety of peers in the AI, security, software coding, and academic communities.

And we all agree on one point: Things will never be the same.