Lesson 01 · OpenClaw, Safely Free ~9 min Updated June 2026

OpenClaw explained: a personal AI agent that lives on your computer.

250,000+ stars on GitHub, a lobster for a mascot, and a habit of showing up in your group chats. OpenClaw turned "AI assistant" from an app you open into an agent that messages you. Here's what it actually is, in plain English — including the parts the hype skips.

The short version

ChatGPT is a place you visit. OpenClaw is a colleague who texts.

OpenClaw is a free, open-source program that runs on your own computer — not in a company's cloud. It wires an AI model you choose (Claude, GPT, others) into your real life: it reads and sends messages on WhatsApp, Telegram, Discord, Signal and a dozen more, browses the web, manages files, runs scheduled tasks, and acts on your behalf around the clock.

☁️ A cloud assistant

You open an app and start a conversation. It waits for you, in someone else's data center.

🦞 OpenClaw

Lives on your machine, reachable from the chat apps you already use, working on your schedule whether you're at a keyboard or not.

The trade in one line

OpenClaw gives you more power and more privacy than any cloud assistant — in exchange for making you the IT department. That trade is the whole story, and it's why the very next lesson is entirely about safety.

Do it · tell the pieces apart

Three names, three very different things.

People blur these together and get burned. Match each description to its name.

Name the piece0 / 3
Where it came from

Why the name keeps changing.

Late 2025
ClawdBot. Developer Peter Steinberger wires Claude into his Mac, talking to him over WhatsApp. It goes viral.
The rename
Moltbot. The community leans into the lobster joke — lobsters molt.
Jan 2026
OpenClaw. The name settles for good.
Feb 2026
Steinberger joins OpenAI. The project doesn't die — it's community-run, still shipping releases weekly.
Apr 2026
250,000+ GitHub stars — one of the fastest-growing open-source projects ever.
What it can actually do

It acts, it doesn't just answer.

💬
Meets you in your chat apps
WhatsApp, Telegram, Slack, Discord, Signal, iMessage, Teams — no new app, just another contact.
⚙️
Acts, not just answers
Browses the web, reads/writes files, runs shell commands, schedules jobs, responds to webhooks.
🧩
Learns via skills
Add-on instruction packs from ClawHub. Powerful and uncurated — a flea market, not an app store.
🧠
Brings your own brain
OpenClaw is the body; you plug in the model (Claude, GPT…) via your own API key. Swap anytime.
What it costs

Free software, real running costs.

🔑Model usage — it burns API tokens every time it thinks. You control it with model choice + limits.$ few → $20–100+/mo
🖥️An always-on machine — old laptop, Mac mini, Raspberry Pi, or a small cloud server.$0 → ~$10/mo
⏱️Your time — 15–30 min to set up, but ownership is ongoing; updates ship weekly.the honest line
Do it · is it for you?

Power and privacy, or none of the upkeep?

Mark each as you or not-you. The read updates as you go.

🦞 Fit check
Mark the statements above to see your read.
Hard stops

Two situations are flat "not yet," whatever your score: you planned to run it on your main work laptop next to client files and saved passwords (the single most common mistake), or your employer restricts unapproved software — several major companies have banned OpenClaw on work devices outright.

The part the hype skips

"Open source" does not mean "safe."

It means the code is public — including for attackers, who in early 2026 found tens of thousands of badly-configured OpenClaw instances exposed on the open internet. The difference between a private assistant and a public liability is entirely in how you set it up. That's not a footnote to this track; it is this track.

Where this is going

Microsoft's new always-on agent for Microsoft 365 — Scout, announced June 2026 — is built on the OpenClaw framework, wrapped in enterprise governance. The open-source lobster you can run tonight is the same foundation Microsoft chose for its enterprise autopilot. Learning OpenClaw is an early look at the architecture your workplace tools are adopting.

Before you install anything

Read the next lesson first. It's free, it's honest, and it covers what the hype videos don't: the exposed-instance scans, the malicious-skill problem, and a clear framework for whether you should run OpenClaw at all. Ten minutes there saves real grief later.

What you can do now

  • Explain what OpenClaw is: an open-source AI agent on your own machine, reachable via your chat apps
  • Tell the pieces apart: OpenClaw (the agent), ClawHub (the skills marketplace), Moltbook (an unaffiliated agent social network)
  • Name what it does: messaging, browsing, files, shell, schedules, webhooks, and add-on skills
  • Estimate the real costs: API usage, an always-on machine, and your maintenance time
  • Make the fit call: power + privacy + responsibility, or a cloud assistant with none of the upkeep
Free
Up next in OpenClaw, Safely

Lesson 02 · Is OpenClaw safe? The honest risk briefing

Tens of thousands of exposed instances. A poisoned skills marketplace. Corporate bans. What the security research actually found, and a clear framework for deciding whether to run it. Read it free →

🎓
AI Coach
Ask anything about this lesson
Hey! I'm your AI Coach for this lesson. Ask me anything about what you just read — what OpenClaw is, what it costs, whether it's a fit for you. What's on your mind?
Free lesson coaching is limited to 3 questions. Upgrade to Pro for unlimited coaching on every lesson.