Install
$ agentstack add mcp-swarmclawai-swarmclaw ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
SwarmClaw
[](https://github.com/swarmclawai/swarmclaw/actions/workflows/ci.yml) [](https://github.com/swarmclawai/swarmclaw/releases) [](https://www.npmjs.com/package/@swarmclawai/swarmclaw)
The self-hosted AI agent runtime and multi-agent framework for autonomous agents. Open-source agent swarms with durable agent memory, MCP tools, skills, delegation, schedules, and 23+ LLM providers — a practical Claude Code and LangChain alternative.
SwarmClaw is an open-source, self-hosted AI agent runtime and multi-agent framework. Run autonomous AI agents, agent swarms, and orchestrators with heartbeats, schedules, delegation, agent memory, runtime skills, and reviewed conversation-to-skill learning — across OpenClaw gateways, Claude, GPT, Gemini, OpenRouter, Ollama, and 23+ other providers. Use it as your AI agent dashboard, agent orchestration platform, and home base for self-hosted multi-agent AI workflows.
GitHub: https://github.com/swarmclawai/swarmclaw Docs: https://swarmclaw.ai/docs Website: https://swarmclaw.ai Discord: https://discord.gg/sbEavS8cPV Extension tutorial: https://swarmclaw.ai/docs/extension-tutorial
Screenshots
Org chart for visualizing agent teams, delegation, and live activity. Agent chat with durable history, tools, and operator controls.
Workswith OpenClaw Hermes Claude Code Codex Gemini CLI OpenCode Copilot Droid Cursor Qwen Code Goose Anthropic OpenAI OpenRouter Gemini Ollama DeepSeek Groq Together Mistral xAI Fireworks Nebius DeepInfra
Requirements
- Node.js 22.6+ (
nvm usewill pick up the repo's.nvmrc, which matches CI) - npm 10+ or another supported package manager
- Docker Desktop is recommended for sandbox browser execution
- Optional provider CLIs if you want delegated CLI backends such as Claude Code, Codex, OpenCode, Gemini, Copilot, Factory Droid, Cursor Agent, Qwen Code, or Goose
Quick Start
Desktop app (recommended for non-technical users)
Download the one-click installer from swarmclaw.ai/downloads. Available for macOS (Apple Silicon & Intel), Windows, and Linux (AppImage + .deb).
The release workflow supports Developer ID signing and notarization when Apple credentials are configured. If a macOS build is still ad-hoc signed, first launch may need one manual approval:
- macOS: signed/notarized releases publish both
.dmgand.zip; unsigned fallback releases publish.ziponly to avoid the damaged unsigned DMG path. Right-click the app in Finder → Open → Open to bypass Gatekeeper. If macOS instead reports "SwarmClaw is damaged and can't be opened" (common when a downloaded app was quarantined by Safari), strip the quarantine attribute and relaunch:
``bash xattr -dr com.apple.quarantine /Applications/SwarmClaw.app ``
- Windows: if SmartScreen appears, click More info → Run anyway.
- Linux (AppImage):
chmod +xthe downloaded file, then run it.
Data lives in your OS app-data directory (~/Library/Application Support/SwarmClaw, %APPDATA%\SwarmClaw, or ~/.config/SwarmClaw), separate from any CLI or Docker install.
Global install
npm i -g @swarmclawai/swarmclaw
swarmclaw
yarn global add @swarmclawai/swarmclaw
swarmclaw
pnpm add -g @swarmclawai/swarmclaw
swarmclaw
bun add -g @swarmclawai/swarmclaw
swarmclaw
Running swarmclaw starts the server on http://localhost:3456.
From the repo
git clone https://github.com/swarmclawai/swarmclaw.git
cd swarmclaw
nvm use
npm run quickstart
npm run quickstart installs dependencies, prepares local config and runtime state, and starts SwarmClaw.
Docker
git clone https://github.com/swarmclawai/swarmclaw.git
cd swarmclaw
mkdir -p data
touch .env.local
docker compose up -d --build
Then open http://localhost:3456.
ClawHub Skill
Install the SwarmClaw skill for your OpenClaw agents:
openclaw skills install swarmclaw
v1.9.39 Highlights
Scheduled-run reliability release: stale workspace rebinding, fail-fast credential checks, and durable delivery evidence for schedule-driven sends.
- Legacy workspace cwd migration. Scheduled reruns and reused schedule sessions pinned to a pre-migration workspace root (e.g.
~/.swarmclaw/workspace) are now rebound to the currentWORKSPACE_DIRautomatically; intentional custom working directories are never touched. - Orphan recovery dedup. Startup queue recovery now recovers each orphaned task once instead of re-logging it every tick, and dead-letters tasks that repeatedly return to the queue without starting.
- Schedule delivery status. Every scheduled run now writes
lastDeliveryStatus/lastDeliveryErrorback to its schedule, so failures are visible without digging through task records. - Credential preflight for schedules. Scheduled runs on API-key providers fail fast with an actionable error when no credential resolves, instead of dying on a 401 deep in execution.
- Empty-run classification. Runs that produce no text, no tool calls, and no error now fail with a clear provider-configuration message instead of a generic validation failure.
- Durable connector delivery evidence. Task follow-up sends route through the connector outbox with task/schedule linkage, retries with backoff, and per-run dedupe, so triage can prove whether a scheduled send succeeded, failed, or was never attempted.
- Regression coverage. Added tests for workspace path normalization, orphan recovery, schedule outcome writes, credential preflight, empty-run classification, and outbox-backed follow-ups.
v1.9.38 Highlights
PR integration release for provider catalog coverage, OpenRouter context meters, and safer unsigned macOS desktop artifacts.
- TokenMix provider. Added TokenMix as a built-in OpenAI-compatible provider with setup metadata, starter-agent defaults, and provider health checks.
- OpenRouter context meters. Chat context status now uses cached OpenRouter model metadata when available so routed model context windows display accurately.
- macOS unsigned artifact fallback. Desktop releases publish zip-only macOS artifacts when signing/notarization inputs are missing, avoiding the unsigned DMG damaged-app path.
- Regression coverage. Added targeted tests for TokenMix setup, OpenRouter context metadata caching, and macOS target selection.
v1.9.37 Highlights
Theme and memory-pressure release for lighter UI preferences and leaner chat history storage.
- Light, dark, and system theme modes. Settings → Appearance now persists a Light/Dark/System selector while keeping the existing hue presets and custom color picker.
- Lean session history storage. Legacy transcript blobs migrate into the
session_messagestable and are compacted from session records after persistence is verified, reducing page-load memory pressure on lower-RAM devices. - Repo-backed message readers. Global search, live usage summaries, and OpenClaw history merge now read table-backed messages after transcript compaction.
- Regression coverage. Added tests for theme-mode normalization, legacy transcript compaction, and repo-backed message search.
v1.9.36 Highlights
Protocol builder visibility release for built-in Structured Sessions.
- Built-in flow inspector. Built-in protocol templates now open in a full-size visual builder canvas with a read-only template step panel.
- Canvas viewport repair. Builder routes now claim the full dashboard workspace and refit React Flow after async template loads.
- Regression coverage. Browser smoke now verifies that the built-in facilitated discussion graph renders with visible flow nodes.
v1.9.35 Highlights
Installed package build fix for fresh npm-global installs and upgrades.
- Fallback build dependency fix. The npm package now declares
mime-typesand@types/mime-typesdirectly soswarmclaw server --buildcan type-check the OpenClaw media proxy on clean installs. - Installed-build regression guard. CLI/package tests now verify that unbundled type declarations needed by local fallback builds ship as runtime package dependencies.
- macOS desktop status. The damaged-app issue remains open until Developer ID signing and Apple notarization are configured and verified on downloaded macOS artifacts.
v1.9.34 Highlights
Credential recovery and external extension access release for npm-global upgrades and scoped agent tool configuration.
- Credential secret recovery. Startup now checks prior npm-global build env files before accepting a fresh per-version
CREDENTIAL_SECRET, and validates candidate secrets against existing encrypted credentials before persistingDATA_DIR/credential-secret. - Clear connector failures. Connector startup now logs and surfaces credential decrypt failures directly instead of falling through to a misleading "No bot token configured" error.
- External extension tools. Scoped agents now keep explicitly attached external
*.jsand*.mjsextensions, and the agent/chat tool controls persist enabled external tools through theextensionsfield. - Regression coverage. Added tests for previous-build credential recovery, non-decrypting secret replacement, scoped external extension access, and extension access persistence.
v1.9.33 Highlights
Issue and PR validation release for credential durability, delegated task dispatch, connector output hygiene, and OpenClaw gateway protocol compatibility.
- Credential durability. Execute-tool credential injection now reads the persisted
encryptedKeyfield, andCREDENTIAL_SECRETnow resolves in a stable order: explicit environment value,DATA_DIR/credential-secret, legacy env files, then generated fallback. - Delegated task dispatch. Agent-created tasks delegated to another agent auto-queue when no explicit status is supplied, and failed dead-lettered tasks can be requeued through
POST /api/tasks/:id/retry. - Connector output hygiene. Connector replies now reuse the internal metadata scrubber before delivery and persistence, while successful non-connector delivery tool output is no longer overwritten as an unconfirmed send.
- Agent and gateway compatibility. Agent updates preserve workspace filesystem settings, and OpenClaw gateway routes now use protocol version 4.
- Regression coverage. Added tests for credential env injection, secret precedence, delegated queueing, failed-task retry, connector sanitization, agent workspace settings, and OpenClaw gateway protocol exports.
v1.9.32 Highlights
PR integration release for background model routing, reflection memory controls, and current ClawHub install guidance.
- Background model routing. Per-agent
dreamConfigoverrides can route dream cycles and daily digests before global dream settings, whilecompactionProvidersettings can route live auto-compaction summaries through a cheaper or faster model. - Reflection memory controls.
reflectionMinQualitygates automatic reflection memory writes without dropping the reflection record, and optional embedding dedup skips near-duplicate reflection notes when embeddings are configured. - ClawHub install guidance. OpenClaw skill docs now use
openclaw skills install swarmclawand current owner-scoped ClawHub links. - Regression coverage. Added tests for dream override precedence, compaction preference resolution, reflection quality gating, and embedding-based reflection dedup.
v1.9.31 Highlights
Documentation cleanup release for public release notes and OpenClaw guidance. No runtime behavior changed.
- Public docs cleanup. Removed an unwanted third-party example from the README and site release notes.
- OpenClaw guidance preserved. The README keeps the SwarmClaw-native OpenClaw gateway, skill, and agent-file guidance without naming unrelated workflows.
v1.9.30 Highlights
PR integration release for dream-model routing, email bridge TLS opt-outs, and installed CLI runtime resolution.
- Dream model routing. Memory dream cycles and daily digests can use optional
dreamProvidersettings so background consolidation can run on a smaller local model. - Email bridge TLS opt-outs.
tlsRejectUnauthorized=falsenow disables hostname checks too, matching the explicit self-signed-server opt-out. - Installed CLI stability. Legacy API-backed CLI commands import the package-local
tsxruntime instead of resolvingtsxfrom the caller's project.
v1.9.29 Highlights
Issue-fix release for Edit Agent tooltips, installed package builds, and structured dream output on local Ollama models.
- Edit Agent tooltips. Help tips in the Edit Agent sheet now render above modal layers instead of being hidden behind the dialog.
- Installed package builds. The npm package now ships the Dagre type declarations needed by
swarmclaw server --build. - Local Ollama dream output. Structured dream/reflection calls request Ollama JSON mode and validate balanced JSON before writing memories.
- Regression coverage. CLI/package, model-build, and dream-parser tests cover the reported failure modes.
Hosted Deploys
SwarmClaw now ships provider-ready deploy files at the repo root:
render.yamlfor Render Blueprint deploys from the public GHCR imagefly.tomlfor Fly.io image-backed deploysrailway.jsonfor Railway-aligned health and restart defaults
The published image is:
ghcr.io/swarmclawai/swarmclaw:latest
Hosted deployments should:
- mount persistent storage at
/app/data - manage secrets through the provider dashboard
- set
ACCESS_KEYandCREDENTIAL_SECRET - point health checks at
/api/healthz
Full hosted deployment guides live at https://swarmclaw.ai/docs/deployment
Core Capabilities
- Providers: 24+ built-in — Claude Code CLI, Codex CLI, OpenCode CLI, Gemini CLI, Copilot CLI, Cursor Agent CLI, Qwen Code CLI, Goose, Anthropic, OpenAI, OpenRouter, Google Gemini, DeepSeek, Groq, Together, Mistral, xAI, Fireworks, Nebius, DeepInfra, Ollama, LM Studio, OpenClaw, and Hermes Agent, plus compatible custom endpoints.
- OpenRouter: Use OpenRouter as a first-class built-in provider with its standard OpenAI-compatible endpoint and routed model IDs such as
openai/gpt-4.1-mini. - Hermes Agent: Connect Hermes through its OpenAI-compatible API server, locally or through a reachable remote
/v1endpoint. - Delegation: built-in delegation to Claude Code, Codex CLI, OpenCode CLI, Gemini CLI, Cursor Agent CLI, Qwen Code CLI, and native SwarmClaw subagents.
- Autonomy: heartbeat loops, schedules, background jobs, task execution, supervisor recovery, and agent wakeups.
- Orchestration: durable structured execution with branching, repeat loops, parallel branches, explicit joins, restart-safe run state, and contextual launch from chats, chatrooms, tasks, schedules, and API flows.
- Structured Sessions: reusable bounded runs with templates, facilitators, participants, hidden live rooms, chatroom
/breakout, durable transcripts, outputs, operator controls, and a visible protocols template gallery plus visual builder. - Memory: hybrid recall, graph traversal, journaling, durable documents, project-scoped context, automatic reflection memory, communication preferences, profile and boundary memory, significant events, and open follow-up loops.
- Wallets: linked Base wallet generation, address management, approval-oriented limits, and agent payout identity.
- Connectors: Discord, Slack, Telegram, WhatsApp, Teams, Matrix, email, local file queues, OpenClaw, SwarmDock, SwarmFeed, and more.
- MCP Servers: connect any Model Context Protocol server (stdio, SSE, or streamable HTTP) and inject its tools into agents alo
…
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: swarmclawai
- Source: swarmclawai/swarmclaw
- License: MIT
- Homepage: https://www.swarmclaw.ai
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.