#88th of 12 in Assistants
IronClaw
Rust assistant that sandboxes every untrusted tool in WebAssembly
- Stars
- 12.6k
- License
- Apache-2.0
- Last commit
- Sep 2026
- Last release
- Sep 2026
- Language
- Rust
Overview
IronClaw is a Rust take on the OpenClaw idea that runs untrusted tools in WebAssembly sandboxes with capability permissions, endpoint allowlists, host-side credential injection and leak scans. It exposes a REPL, HTTP webhooks, Telegram and Slack channels and a browser gateway with SSE/WebSocket streaming, runs cron and event routines, connects to MCP servers and keeps hybrid-search memory in PostgreSQL.
Who it is for: Security-minded users who want tools isolated from credentials
Strengths
- WASM sandbox with per-tool rate, memory, CPU and time limits
- Secrets encrypted with AES-256-GCM, never exposed to tool code; full audit log
- Describe a tool in chat and IronClaw builds it as a WASM module
- No telemetry; onboard installs a background service on macOS and Linux
Weaknesses
- Requires PostgreSQL for persistence; SQLite is not an option
- Installer needs a release tag chosen by hand; no latest channel
- Slack and Telegram are configured only through the WebUI Extensions page
- Windows has no background service; WebUI runs in the foreground via ironclaw serve
What it needs
- no GPU
- Docker + Compose
- Needs PostgreSQL
- Models: OpenAI
Also in Assistants
See all 12| Rank | Project | Score |
|---|---|---|
| 1 | nanobotSmall Python agent runtime with bundled WebUI, TUI and chat channels | 84 out of 100 |
| 2 | OpenClawPersonal assistant gateway that answers in Discord, Slack, WhatsApp and Telegram | 79 out of 100 |
| 3 | Hermes AgentTerminal and chat-app agent that writes its own skills and remembers you | 75 out of 100 |
| #4 | ZeroClawSingle Rust binary agent runtime with 30+ channels and hardware access | 75 out of 100 |
| #5 | cowagentPersonal AI agent with memory, skills and chat channels like Telegram and Slack | 66 out of 100 |