NanoClaw
Aplicación Docker from BitCryptic's 2nd Repository
Visión general
NanoClaw is a lightweight, secure personal AI agent that runs on your own server.
It connects to Telegram and/or Matrix (E2EE) and runs every agent session
inside an isolated Docker container — so the AI only sees what you explicitly give it access to.
Built as a minimal alternative to OpenClaw/Clawdbot, NanoClaw has ~15 source files
you can actually read and understand. No complex config files — customise by
telling Claude Code what you want changed.
Features:
- Telegram and Matrix (E2EE) support
- Per-group isolated agent containers
- Scheduled tasks (morning briefings, weekly reviews, etc.)
- Web search and fetch
- Agent Swarms (teams of specialised agents)
- Memory via per-group CLAUDE.md files
Requirements:
- Anthropic API key (console.anthropic.com)
- Telegram bot token from @BotFather (for Telegram channel)
- Matrix homeserver account, e.g. self-hosted Synapse (for Matrix channel)
- Docker socket access (required for agent container isolation)
Messaging Channels:
At least one of Telegram or Matrix must be configured. Both can run simultaneously.
Telegram: Set TELEGRAM_BOT_TOKEN from @BotFather. After starting the container,
send /chatid to your bot and run the registration command — see the project README.
Matrix (E2EE): Set MATRIX_HOMESERVER_URL, MATRIX_BOT_USER_ID, and MATRIX_ACCESS_TOKEN.
MATRIX_BOT_PASSWORD is only needed once to bootstrap cross-signing keys and can
be removed after first successful start.
Optional Integrations:
- Tailscale — join your tailnet for secure private access
- Home Assistant — smart home control and automation
- Vikunja — task and project management
- Ollama / LiteLLM — local model inference
- Paperclip — AI agent orchestration
- UnraidClaw — manage your Unraid servers directly from chat
Project: https://github.com/qwibitai/nanoclaw
Unraid template: https://github.com/bitcryptic-gw/Unraid-nanoclaw
Support: https://forums.Unraid.net/topic/197773-support-nanoclaw-lightweight-secure-ai-agent-for-Unraid/
Argumentos en tiempo de ejecución
- Red
bridge- Concha
sh- Privilegiado
- false
Configuración de plantillas
Required. Gives NanoClaw access to the host Docker daemon so it can spin up isolated agent containers for each conversation.
- Objetivo
- /var/run/docker.sock
- Por defecto
- /var/run/docker.sock
Persistent data: SQLite database, sessions, IPC, env copy.
- Objetivo
- /app/data
- Por defecto
- /mnt/cache/appdata/nanoclaw/data
Persistent store: registered groups, messages, scheduled tasks.
- Objetivo
- /app/store
- Por defecto
- /mnt/cache/appdata/nanoclaw/store
Per-group CLAUDE.md memory files and agent runner source.
- Objetivo
- /app/groups
- Por defecto
- /mnt/cache/appdata/nanoclaw/groups
NanoClaw service logs.
- Objetivo
- /app/logs
- Por defecto
- /mnt/cache/appdata/nanoclaw/logs
Required. Host path to the NanoClaw appdata directory. Must match the host-side path of the AppData volume mount so agent containers can resolve volume paths correctly.
- Por defecto
- /mnt/cache/appdata/nanoclaw
Optional. Telegram bot token from @BotFather. Only required if using Telegram as a messaging channel — Matrix is the recommended primary channel.
URL of your Matrix homeserver, e.g. https://matrix.yourdomain.com. Required for Matrix channel support.
- Objetivo
- MATRIX_HOMESERVER_URL
Full Matrix user ID for the bot account, e.g. @Andy:yourdomain.com. Required for Matrix channel support.
- Objetivo
- MATRIX_BOT_USER_ID
Matrix access token for the bot account. Obtain via the Matrix login API or your client. Required for Matrix channel support.
- Objetivo
- MATRIX_ACCESS_TOKEN
k2 Matrix account password — used once to bootstrap cross-signing keys. Can be removed after first successful bootstrap.
- Objetivo
- MATRIX_BOT_PASSWORD
Anthropic API key from console.anthropic.com. Use this OR CLAUDE_CODE_OAUTH_TOKEN.
Claude Pro/Max subscription OAuth token. Use this OR ANTHROPIC_API_KEY. Obtain by running 'claude setup-token' with Claude Code installed.
Optional. URL of your OneCLI gateway instance. OneCLI is the upstream default credential provider for agent containers. Leave blank if using the native credential proxy skill instead (self-hosted alternative).
- Objetivo
- ONECLI_URL
Optional. API key for your OneCLI gateway. Required only if ONECLI_URL is set. Leave blank if using the native credential proxy skill.
- Objetivo
- ONECLI_API_KEY
Trigger word the assistant responds to. Default is @Andy. The assistant name is automatically derived from this — e.g. @Andy makes the assistant named Andy.
- Por defecto
- @Andy
Whether the assistant requires the trigger word to respond. Set to false to respond to all messages without needing the trigger.
- Por defecto
- true
Default model for agent containers. Per-group override via settings.json. Use model name with optional [1m] suffix for 1M context (Sonnet only). Examples: haiku, sonnet[1m], claude-opus-4-6
- Objetivo
- NANOCLAW_AGENT_MODEL
- Por defecto
- haiku
Default reasoning effort for agent containers. Per-group override via settings.json. Valid values: low, medium, high, max.
- Objetivo
- NANOCLAW_AGENT_EFFORT
- Por defecto
- medium
Additional volume mounts passed to agent containers. Format: hostpath:containerpath:ro,hostpath2:containerpath2:rw — e.g. /mnt/cache/logs:/central-logs:ro
Docker network for agent containers. Leave blank for default bridge. Set to a custom network name (e.g. ai-local) to isolate agent containers. The NanoClaw container itself must also be on this network.
- Por defecto
- ai-local
UnraidClaw server config as JSON array. Example: [{"name":"unraid-syd","url":"https://unraid-syd:9876","apiKey":"YOUR_KEY"}]. Supports multiple servers.
OAuth client ID from login.tailscale.com/admin/settings/oauth. Used by the assistant to query the Tailscale API for device discovery, monitoring and ACL auditing.
- Objetivo
- TS_API_CLIENT_ID
OAuth client secret from login.tailscale.com/admin/settings/oauth. Keep this masked — treated as a credential.
- Objetivo
- TS_API_CLIENT_SECRET
Your Tailscale tailnet name. Found in the Tailscale admin console.
- Objetivo
- TS_API_TAILNET
- Por defecto
- your-tailnet.ts.net
URL of your Home Assistant instance. Use http://YOUR-UNRAID-IP:8123 if HA is on the same Unraid server.
- Objetivo
- HA_URL
- Por defecto
- http://homeassistant:8123
Long-lived access token from Home Assistant. Create at Profile → Long-Lived Access Tokens in HA.
- Objetivo
- HA_TOKEN
URL of your Vikunja instance. Use http://vikunja:3456 if Vikunja is on the same Docker network as NanoClaw.
- Objetivo
- VIKUNJA_URL
- Por defecto
- http://vikunja:3456
Vikunja API token. Create at Settings → API Tokens in the Vikunja UI. Needs Projects (read), Tasks (read/write/update/delete), Task comments (read/write), Task assignees (read/write/delete), and User (read) permissions.
- Objetivo
- VIKUNJA_TOKEN
Persistent Tailscale state directory. Prevents new node identity being created on each restart.
- Objetivo
- /mnt/cache/appdata/nanoclaw/tailscale
- Por defecto
- /mnt/cache/appdata/nanoclaw/tailscale
URL of your Ollama instance. Use http://ollama:11434 if Ollama is on the same Docker network as NanoClaw.
- Objetivo
- OLLAMA_URL
- Por defecto
- http://ollama:11434
Base URL for LiteLLM API. If set, enables the LiteLLM MCP skill for model discovery and Ollama sync.
- Objetivo
- LITELLM_URL
- Por defecto
- http://litellm:4000
Master key for LiteLLM model management API. Required for Ollama auto-sync into LiteLLM.
- Objetivo
- LITELLM_MASTER_KEY
URL of your Paperclip instance. Use http://paperclip:3100 if on the same Docker network.
- Objetivo
- PAPERCLIP_URL
- Por defecto
- http://paperclip:3100
JWT secret from Paperclip for agent API auth. Found in Paperclip appdata at instances/default/.env
- Objetivo
- PAPERCLIP_AGENT_JWT_SECRET
UUID of the NanoClaw agent in Paperclip. Found in Paperclip UI under Agents.
- Objetivo
- PAPERCLIP_AGENT_ID
UUID of your Paperclip company. Found in Paperclip UI under Company settings or the URL.
- Objetivo
- PAPERCLIP_COMPANY_ID
Bearer token Paperclip uses to authenticate heartbeat calls to NanoClaw.
- Objetivo
- PAPERCLIP_WEBHOOK_SECRET
NanoClaw group folder that receives Paperclip tasks, e.g. telegram_1234567890.
- Objetivo
- PAPERCLIP_GROUP_FOLDER
Port for the Paperclip webhook server. Default 3102.
- Objetivo
- PAPERCLIP_WEBHOOK_PORT
- Por defecto
- 3102
Internal credential proxy port used by agent containers to reach the Anthropic API. Only needs to be accessible on the local Docker bridge network. Change if port 3001 is already in use.
- Objetivo
- 3001
- Por defecto
- 3001
Paperclip webhook port for receiving heartbeats from Paperclip.
- Objetivo
- 3102
- Por defecto
- 3102
Categorías
Descargar estadísticas
Detalles
bitcryptic/nanoclaw:latestEjecute NanoClaw en Unraid.
NanoClaw se encuentra en Community Apps para Unraid OS. Explore Unraid para crear un servidor doméstico flexible, un NAS o un laboratorio doméstico.