OpenMausBot

milind-soni/OpenMausBotReviewed by AI

What it does

A desktop app that looks like a messaging app, except each chat is an AI agent with its own personality, model and computer. The agents do not run on their own: each one drives the claude, codex or grok command-line program already installed and signed in on your machine, so you need one of those accounts. There are installers for macOS, Windows and Ubuntu with the local server built in. Optional keys add connected apps (Gmail, Slack, GitHub), a remote Linux desktop and spoken replies. Ubuntu is still beta.

How easy it is to install

C · install 1 or 2 tools · Windows

Windows C
macOS C
Linux C

macOS is the smoothest: a signed and notarised .dmg you drag to Applications, with the server built in. It is still a C everywhere because the app does nothing until you separately install an agent program (claude, codex or grok) and sign it in, which usually means installing Node and running commands. On Windows the installer is "not code-signed yet, so SmartScreen shows unknown publisher", and the Ubuntu .deb and AppImage are beta, GNOME only, on Ubuntu 24.04 x64.

Numbers on GitHub

Stars: 9,630on Oct 31, 2026
Downloads: 884,51939,656 this week
Growth: +3,945stars in 5 days

Stars over time

Facts

Runs on: Windows, macOS, Linux
You need to install: Node.js, Other tools
To build from source: Node.js, Docker
Disk space: 248 MB–745 MB · from the installer
Accounts or keys: Claude, Codex or Grok account, through their command-line program, Composio (connected apps such as Gmail, Slack, GitHub), Boat (boat.dev) for a bot's remote Linux desktop, ElevenLabs (spoken replies), Fish Audio (spoken replies), xAI (Grok voices), OpenRouter or TypeSafe Jev (the optional decision model)
Cost: Free, API costs extra · The app is free (Apache-2.0, except the enterprise/ folder). To use it you need a paid AI account or API key behind the claude, codex or grok CLI. Optional extras cost money too: the README says "Boat is a paid service after its trial, and using a cloud computer may incur charges", and it mentions a paid Cloud plan with a higher event limit.
License: Apache-2.0 (Permissive)
Can replace: Grok Bot, Manus, Muse, dots
Last update: Oct 31, 2026

Risk signals (8)

AttentionDependencies with known vulnerabilities
Pinned dependencies with known vulnerabilities (OSV): undici: GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26
automatic check
Attentionagents can control your computer
README: "Each bot can use a cloud Linux desktop, an isolated Local VM, or—where the platform safety boundary is currently certified—your own computer". Control of your own machine needs an explicit opt-in, is macOS and Ubuntu Xorg only, and "Ubuntu Wayland host control remains disabled while issue #345 is resolved". Shell commands and file edits appear as Allow / Deny cards.
AI review
Attentionbot creates schedules and webhooks without confirmation
README, "Triggers": a bot "sets the trigger up in that turn with its `trigger` tool (no confirmation; the chat shows a live card with Edit, Pause and Undo)". Schedules can run every 5 minutes and webhooks open a receiver on 127.0.0.1:8800.
AI review
Attentionapi keys stored in plain text
README, "Run from a terminal or on a server": "API keys are saved as plaintext, not encrypted, in private `config.json` (`0600` on Unix)."
AI review
Infovery new project with many open issues
The repository was created on 2026-08-11 and has 93 releases and 613 open issues, with version numbers still at 0.1.x. The README calls it "Early but real" and lists rough edges.
AI review
Infopart of the repository is not open source
README, License: Apache 2.0 "except `enterprise/`, which is source-available under its own license; delete that folder and what remains is the open-source edition".
AI review
Infooptional usage analytics
posthog-js is a direct dependency in package.json. The README says analytics are "optional and anonymous: product events and a once-a-day count of what is set up, never keys, names, addresses or conversations", switched off in Settings → General.
AI review
Infoname used by unrelated crypto tokens
The README opens with a warning: "No affiliation with any cryptocurrency. OpenMausBot has no token. Any coin using the OpenMausBot, Maus, or SupaMaus name is not created, endorsed, or affiliated with this project".
AI review

Evidence is shown in its original language.

What Radar could not check

Whether the approval cards really catch every risky action a bot takes, on each platform.
What a month of real use costs, between the AI subscription, Boat cloud computers and the optional Cloud plan.
Whether analytics are really off once you switch them off.
How well the Ubuntu beta behaves, especially on Wayland, where bot control of the computer is disabled.
How much disk space and memory it uses in practice: the installers are 248-314 MB before any agent program or browser it downloads.