IronClaw
Verified Oct 15, 2026 ActiveOpen-source personal agent that keeps your credentials in an encrypted enclave, not in the prompt
Listed on EffectHub ·
Pricing
- Pricing model
- Freemium
- Paid options from
- $5/mo
- Billing
- Monthly
$5/month Starter includes $5 of model credits; Basic $20/month includes $20 and up to 2 agent instances; Pro+ $200/month includes $200 and up to 5 instances. The source is Apache-2.0 on GitHub, so self-hosting costs only your own model spend.
Use tool ↗About IronClaw
IronClaw is an Apache-2.0 agent runtime published by NEAR AI under the NEAR Foundation. Its distinguishing design choice is credential handling: secrets live in an encrypted vault inside a hardware enclave, so the agent can act on your accounts without the model seeing the keys. Typical jobs are inbox triage, meeting prep, monitoring and delegated developer chores, wired to Gmail, Google Drive, Sheets, Calendar, Docs, Slides, GitHub, Discord, Telegram and Signal, and it can build and sandbox new tools against any API on the fly. It is model-agnostic across Anthropic, OpenAI, Gemini, Mistral, Ollama, OpenRouter and others. Hosted plans are $5, $20 and $200 a month with matching credit balances, or you can self-host from the repository.
- Platforms
- Web
- API
- Not confirmed
- Last verified
- Oct 15, 2026
Verified sources
- Encrypted enclave vault, integration list, model-agnostic support, and the $5, $20 and $200 per month tiers with included creditsironclaw.com ↗
- Apache-2.0 licence, repository created 2026-02-03, actively pushed, over 12,500 starsapi.github.com ↗
- Public source repository under the nearai organisationgithub.com ↗
Is IronClaw legit?
We don’t label tools safe or unsafe. Below are the records we checked ourselves, each with the date we read it.
- Domain registered
- Jan 4, 2018 (8 years ago)Registry record (RDAP), registrar Cloudflare, Inc., looked up Sep 6, 2026
- TLS certificate
- Issued by Let's Encrypt, valid until Nov 22, 2026Seen in our own connection to the site on Oct 15, 2026
- Last checked
- Oct 15, 2026The site answered
- On the market since
- 2026The vendor's own material, read by us
- Operated by
- NEAR FoundationOur research, card verified Aug 23, 2026
Pros & cons of IronClaw
IronClaw takes the part of personal agents everyone hand-waves, what happens to your credentials, and answers it with an encrypted enclave vault plus open source you can read. The repository is busy and drew over 12,000 stars within months of its February 2026 start. That youth is also the risk: a six-month-old agent runtime touching your inbox and GitHub is an early adopter's tool.
Pros
- Apache-2.0 source on GitHub, so self-hosting is a real option rather than a promise
- Secrets stay in an encrypted enclave vault instead of passing through the model
- Model-agnostic across Anthropic, OpenAI, Gemini, Mistral, Ollama and OpenRouter
- Hosted plans include model credits at face value, starting at $5 a month
Cons
- The project is only months old and moving fast, so interfaces will churn
- Credits are the real cost driver; the subscription is largely a credit prepayment
- Hosted tiers cap agent instances at 2 and 5, and no country or legal entity is published
Best for
- Developers who want an agent they can audit and self-host
- People uneasy about handing mailbox and repo tokens to a closed SaaS agent
- Teams standardising on MCP-style tool access across several model providers
Not for
- Non-technical users who want a finished consumer assistant
- Regulated deployments needing a mature vendor and support contract
Watch out: Granting one agent Gmail, Drive, GitHub and Signal access concentrates a lot of blast radius; scope the tokens narrowly even with enclave storage.
Alternatives to IronClaw
IronClaw head-to-head
Side-by-side fact sheets against the competitors our research or their makers name — pricing, platforms, API and both verdicts on one page.