software · Picked by us

A weekend prototype that became a self-hosted assistant business

NanoClaw

A self-hosted personal AI assistant that connects agents to messaging channels and isolates each one in its own container. Built with Claude Code in a weekend, it now shows 30.8k stars, 12.8k forks and a Docker integration deal.

By Gavriel Cohen @gavrielc

Run NanoClaw
Read the TechCrunch story

The six weeks that led to the Docker deal

Self-hosted; MIT source, an AI provider or local model required

Made With Models illustration of a glass dome housing a lattice of miniature shipping containers, each a tiny glowing office, a bright message thread pulsing between them toward a sealed hatch; this is not a screenshot of the product.
A look at the result

What it does

See an agent product grow from a weekend prototype into maintained infrastructure — with a container as the security boundary.

Who it helps

Builders who run agents against real messaging and want the isolation model visible.

How it was made

Models
Claude Code / Claude Agent SDK · creator-reported
Tools
Containers · One isolated container per agent
Messaging channels · Where the assistant lives and answers
  1. Gavriel Cohen built the first version in a weekend with Claude Code; his launch post explains the container, memory, scheduled-job and skill design.
  2. The project grew fast: TechCrunch recorded 22,000 stars, 4,600 forks, 50+ contributors and a Docker integration deal in March 2026.
  3. The v2 repository now shows 30.8k stars, 12.8k forks and 2,860 commits, with a rewritten installer, a migration path and multiple channels and providers.

What the person did

Cohen designed the isolation and memory model and maintained the project through rapid growth; the MIT source and his launch post keep the architecture decisions public.

What we know

Creator-reported: The repository (30.8k stars, 12.8k forks, 2,860 commits as of the 2026-09-27 scan), the launch post and the TechCrunch interview; adoption figures are creator- and press-reported.

Access checked — 2026-09-28 · Opened the repository and the live site on 2026-09-28 and the TechCrunch interview on the same day; stars and commits are from the 2026-09-27 scan.

Can you use it?

The source is MIT; we link to the site, repository and article and host no images. Containers reduce the blast radius but do not remove prompt-injection and host-configuration risk. The cover is an original Made With Models illustration, not a screenshot of the product.

About this project

Picked by Made With Models. Added 2026-09-28. Updated 2026-09-28.