nanocoai/nanoclaw-telegram

An AI assistant that runs agents securely in their own containers. Lightweight, built to be easily understood and completely customized for your needs.

nanoclaw.dev  •   docs  •   中文  •   日本語  •     •  

---

Why I Built NanoClaw

OpenClaw is an impressive project, but I wouldn’t have been able to sleep if I had given complex software I didn’t understand full access to my life. OpenClaw has nearly half a million lines of code, 53 config files, and 70+ dependencies. Its security is at the application level (allowlists, pairing codes) rather than true OS-level isolation. Everything runs in one Node process with shared memory.

NanoClaw provides that same core functionality, but in a codebase small enough to understand: one process and a handful of files. Claude agents run in their own Linux containers with filesystem isolation, not merely behind permission checks.

Quick Start

gh repo fork qwibitai/nanoclaw --clone
cd nanoclaw
claude

Then run /setup. Claude Code handles everything: dependencies, authentication, container setup and service configuration.

Note: Commands prefixed with / (like /setup, /add-whatsapp) are Claude Code skills. Type them inside the claude CLI prompt, not in your regular terminal. If you don’t have Claude Code installed, get it at claude.com/product/claude-code.

Philosophy

Small enough to understand. One process, a few source files and no microservices. If you want to understand the full NanoClaw codebase, just ask Claude Code to walk you through it.

Secure by isolation. Agents run in Linux containers (Apple Container on macOS, or Docker) and they can only see what’s explicitly mounted. Bash access is safe because commands run inside the container, not on your host.