简体中文

2026 年最佳自托管 AI 智能体

七款自托管 AI 智能体排名，依据许可证、本地模型、沙箱、遥测、安装难度和成熟度，帮你在自己的硬件上运行私有 AI 智能体。

概览

概览
机器人许可证聊天应用
ZeroClawMIT OR Apache-2.03.3万是是Telegram, WhatsApp, Discord免费
RakazoApache-2.07538是是Telegram, WhatsApp, iMessage, SlackUS$10/月起
Hermes AgentMIT26.2万是否Telegram, WhatsApp, iMessage, Discord, SlackUS$20/月起
OpenClawMIT39.4万是否Telegram, WhatsApp, iMessage, Discord, Slack免费
NanoClawMIT3.1万是是Telegram, WhatsApp, iMessage, Discord, Slack免费
Agent ZeroMIT2万是是Telegram, WhatsApp免费
nanobotMIT5万是否Telegram, WhatsApp, Discord, Slack免费
截至 2026年11月8日 的 GitHub stars

检查清单

检查清单
ZeroClawRakazoHermes AgentOpenClawNanoClawAgent Zeronanobot
开源许可证是是是是是是是
支持本地模型是是是是是是是
默认沙箱隔离是是否否是是否
默认无遥测是是是否否否是
接入你的聊天应用是是是是是是是
你离开时也能工作是是是是是是是

一个自托管 AI 智能体有多私密，取决于它的默认设置。这里的每个工具都运行在你自己的机器或服务器上，但它们在首次启动时的表现差别很大：智能体的命令是在你的主机上运行还是在沙箱中运行、软件会不会向外回传数据，以及要让一个机器人在聊天应用里回复你需要多少工作。

我们如何排名

我们先按上表中的六项检查给每个智能体打分（开放许可证、本地模型、默认沙箱、默认无遥测、驻留在聊天应用中、在你不在时继续工作），然后再权衡检查清单无法体现的三点：

  • 安装难度。 单个二进制文件或一个脚本胜过需要你自己拼装的技术栈。
  • 默认设置的安全性。 在你修改任何东西之前，全新安装允许做什么。
  • 成熟度。 发布节奏、谁在维护，以及项目自称 alpha 还是 beta。

这里的“私密”指你的对话、记忆和密钥都留在你的硬件上。除非你运行本地模型，提示词仍会发送到你配置的模型提供商；关于这个角度，请参阅最佳本地 AI 智能体。

1. ZeroClaw

如果有人想要一个私有智能体又不想先读安全指南，我们会推荐 ZeroClaw。它是单个 Rust 二进制文件，用一个 TOML 文件配置。根据其沙箱文档，它推荐的 Balanced 配置会在中风险操作前询问、阻止高风险操作、把文件访问限制在工作区内，并在操作系统沙箱中运行工具（macOS 上是 Seatbelt，Linux 上是 Firejail）。它的文档明确声明没有遥测，也没有许可证服务器。

代价是便利性：Slack、iMessage 和 Signal 不在标准发行版中，你需要从源码构建才能使用。它可运行在 macOS、Linux、Windows、FreeBSD、Android 以及树莓派等开发板上。

ZeroClaw homepage headline: The personal AI agent you actually own, one lightweight Rust binary on your machine with your keys or your local models
ZeroClaw's homepagezeroclaw.com

2. Rakazo

Rakazo（我们开发的产品）同样满足全部六项检查，但形态不同：它不是运行一个智能体，而是运行多个持久存在的机器人，每个都有自己的记忆、例行任务和一台沙箱电脑（浏览器、终端和桌面）。自托管需要带 Compose 的 Docker、curl 和 OpenSSL；自托管安装不会发送产品分析数据，除非你自行配置。你可以通过 Ollama 或 LM Studio 使用本地模型。

它在成熟度上排在 ZeroClaw 之后：项目自称处于 beta 阶段，发布频繁。Telegram、WhatsApp 和 iMessage 只在自托管时可用。参见 Rakazo 评测。

Rakazo web app with a chat with a bot called Chief and a side panel showing the bot's live browser screen, a Take control button and routines
A Rakazo bot chat with its computer screen beside itgithub.com

3. Hermes Agent

如果你想要一个规模大、活跃且默认无遥测的项目，Nous Research 的 Hermes Agent 是最佳选择。对话、记忆和技能都保存在 ~/.hermes 下，它可以与 Nous 共享的指标默认关闭，除非你主动开启（FAQ）。安装脚本会自己配置 Python，还有适用于 macOS 和 Windows 的桌面安装包。

在这里拖它后腿的是：它的终端后端默认是本地，所以除非你开启容器隔离，否则命令会在你的主机上运行（安全文档）。在把它连接到邮箱或聊天账号之前，先完成这一步。

Hermes Agent web dashboard Sessions page listing live sessions from cron, Discord, Telegram and the CLI, with rename, export and delete actions
Hermes Agent's dashboard showing sessions across chat platformshermes-agent.nousresearch.com

4. OpenClaw

OpenClaw 拥有这份列表中最大的生态：29 个聊天渠道、64 个模型和媒体提供商以及 142 个官方插件，采用 MIT 许可证且没有付费层级。如果你想要最多的集成，它胜出。

不过作为自托管的默认配置，它是几大知名项目中最宽松的。沙箱默认关闭，每日更新检查会把你的版本、操作系统、Node.js 版本和 CPU 架构报告给项目服务器（遥测文档）；update.checkOnStart: false 可以关闭它。我们的指南 OpenClaw 安全吗？介绍了需要修改的设置。

WhatsApp chat with an OpenClaw assistant giving casual travel advice to a user in Marrakech
Chatting with OpenClaw in WhatsAppdocs.openclaw.ai

5. NanoClaw

NanoClaw 是 OpenClaw 的容器优先版本：每个智能体都运行在自己的 Docker 容器中，只能看到你挂载的文件夹，外发的 API 调用经过一个凭据网关，所以智能体从不持有原始密钥。代码库小到可以通读。

它在安装和灵活性上排名较低。它围绕 Claude 和 Claude Code 构建，没有配置文件（你通过让 Claude Code 修改来定制你的 fork），而且除非你设置 NANOCLAW_NO_DIAGNOSTICS=1，否则会发送匿名的安装诊断数据。

NanoClaw setup wizard in a terminal explaining that the assistant lives in its own sandbox and asking whether to fetch a hardened image or build it locally
NanoClaw's setup wizard choosing the agent's sandbox imagedocs.nanoclaw.dev

6. Agent Zero

Agent Zero 在 Docker 中给 AI 一台属于它自己的 Linux 电脑，带终端、浏览器、桌面和 LibreOffice，除非你授予主机访问权限，否则与你的机器隔离。它是这份排名中最老的项目（首个版本发布于 2024 年 6 月），至今仍频繁发布，桌面 Launcher 会替你配置好 Docker。

有两个需要注意的地方：代码与 Agent Zero 本身在同一个容器中运行（独立的 gVisor 沙箱还只是 v3 原型），而且更新检查默认会发送你的版本和一个哈希后的实例 ID。镜像是一个完整的桌面环境，所以在服务器上至少需要 2 GB 内存，推荐 4 GB。

Agent Zero web UI showing a request to write a kickoff plan, the agent's collapsed steps for writing and verifying the file in the terminal, and a summary table of the plan
Agent Zero completing a first task in its web UIgithub.com

7. nanobot

香港大学的 nanobot 最容易理解：一个小巧的 Python 核心、一个精致的浏览器 WebUI、没有遥测，可以通过脚本、pip 或 Docker 安装。如果你想修改一个智能体而不仅仅是运行它，它是不错的基础。

它排在最后，是因为 shell 命令默认不在沙箱中运行；bubblewrap 或 macOS Seatbelt 必须手动开启，而 Windows 上根本没有沙箱（配置文档）。

nanobot WebUI new-topic screen with Apps, Skills, Automations and Channels in the sidebar, project-grouped topics, and a composer with permission and microphone controls
nanobot's bundled browser WebUIgithub.com

该选哪个

  • 最省事又最安全的默认设置： ZeroClaw。
  • 多个各自需要独立电脑的机器人： Rakazo。
  • 最大的社区和生态： Hermes Agent 或 OpenClaw，记得开启沙箱。
  • 已经在用 OpenClaw 但想要隔离： NanoClaw，或者用 NemoClaw 把 OpenClaw 包起来（alpha 阶段；参见 NemoClaw 是什么）。

围绕单个工具的更多选择，请参阅 OpenClaw 替代品和 Hermes Agent vs OpenClaw。

精选推荐

  1. ZeroClaw

    免费

    Personal AI agent in one Rust binary, MIT or Apache-2.0, with local or cloud models, 30+ channels, approval gates and an OS sandbox on by default.

    Meets every check: one Rust binary, approval gates and an OS sandbox on by default, no telemetry, local models.

    优点

    • Safe defaults: the recommended profile asks before medium-risk actions, blocks high-risk ones, keeps files in the workspace and runs tools in an OS sandbox
    • One small Rust binary with one config file, running on macOS, Linux, Windows and boards like a Raspberry Pi
    • More than 30 channels, plus a web dashboard for chat, memory, config and cron
    • Provider fallback chains, local models through Ollama, and cryptographic receipts for tool calls
    • States plainly that it sends no telemetry and needs no cloud account or license server

    缺点

    • Slack, iMessage, Signal and several other channels are not in the standard release; you build from source with extra features to get them
    • `zeroclaw quickstart` only sets up the model provider; channels and risk profiles mean editing the TOML config file
    • The Docker sandbox backend isn't picked automatically under the default native runtime
    • Model costs are on you
    访问 ZeroClaw

  2. Rakazo

    US$10/月起

    Open-source, self-hostable platform for persistent AI bots that each get a job, a computer, memory and routines, using the model you choose.

    Our own product. Meets every check: Apache-2.0, sandboxed bot computers, no telemetry by default, any model you connect.

    优点

    • Open source (Apache-2.0) and fully self-hostable, including with local models
    • Choice of model per bot, including existing Claude or ChatGPT subscriptions
    • Bots keep working on schedules and triggers with their own cloud computer
    • Approval controls over which actions a bot may take on its own

    缺点

    • Still in beta, with frequent releases
    • You supply and pay for the model on the hosted plans, unless you buy Rakazo credits
    • Telegram, WhatsApp and iMessage/SMS are only available when self-hosted
    • More setup than a single chat app
    访问 Rakazo

  3. Hermes Agent

    US$20/月起

    Free, MIT-licensed AI agent from Nous Research that runs on your own machine or server, learns reusable skills, and chats with you on Telegram, Slack and more.

    MIT licensed, no telemetry and lives in your chat apps, but commands aren't sandboxed by default.

    优点

    • Free and MIT licensed, and runs on hardware you control
    • Writes and refines its own skills from experience, on top of persistent memory and cross-session search
    • One gateway for 20+ chat platforms, including Telegram, Discord, Slack, WhatsApp, Signal and email
    • Run several separate agents as profiles, each with its own model, memory and skills, and let them talk in group chats
    • Model-agnostic, with a one-command import from OpenClaw

    缺点

    • Setup expects comfort with the command line and with running your own server
    • Model costs are on you unless you use free models, and hosted web search, images and speech need a paid Nous Portal plan or your own keys
    • iMessage needs a separate BlueBubbles server on a Mac
    • No native mobile app; Android support is a command-line install through Termux
    访问 Hermes Agent

  4. OpenClaw

    免费

    Free, MIT-licensed personal AI agent that runs on your own computer and takes orders from WhatsApp, Telegram, iMessage, Slack and 20+ other chat apps.

    The biggest ecosystem and every chat app, but sandboxing is off and telemetry is on by default.

    优点

    • Free and MIT licensed, with no paid tier
    • Runs on your own hardware, and state, memory and credentials stay there
    • Works in 29 chat channels, including WhatsApp, Telegram, iMessage, Slack, Discord and Microsoft Teams
    • Model-agnostic: 64 model and media providers, plus local models
    • Large ecosystem of skills and 142 official plugins, and very active development

    缺点

    • Model costs are on you and can run high: testers and users have reported spending over $100 in a day with expensive models
    • Sandboxing is off by default and the agent can run commands on the host unless you turn on approvals
    • Setup and upkeep expect comfort with the command line; maintainers warn it is risky for non-technical users
    • Broad access to email, messages and the system makes prompt injection and malicious third-party skills a real risk
    访问 OpenClaw

  5. NanoClaw

    免费

    Small, MIT-licensed OpenClaw alternative that runs each agent in its own Docker container and chats with you on WhatsApp, Telegram, Slack, Discord and more.

    Every agent in its own container and a tiny codebase, but tied to Claude Code and sends setup diagnostics by default.

    优点

    • Every agent runs in its own Docker container and sees only the folders you mount, so shell access stays off your host
    • Small codebase (one host process and a handful of files) that you customize by having Claude Code edit your fork
    • Agents never hold raw API keys: outbound calls go through a credential gateway with per-agent policies and rate limits
    • Many chat channels, including WhatsApp, Telegram, Slack, Discord, iMessage, Teams, Matrix and email, with one or several agents per channel
    • Scheduled tasks with optional script gates that skip waking the agent when there's nothing to do

    缺点

    • Built around Claude and Claude Code: customizing, debugging and adding channels all go through Claude Code
    • Sends anonymous setup diagnostics unless you set NANOCLAW_NO_DIAGNOSTICS=1
    • No config files by design, so every change means editing code in your own fork
    • Needs Docker, and Windows only works through WSL2
    访问 NanoClaw

  6. Agent Zero

    免费

    Free, MIT-licensed AI agent that runs in its own Docker Linux workspace with a terminal, browser and desktop apps, and chats on Telegram and WhatsApp.

    Runs in its own Docker container with local models, but sends telemetry by default.

    优点

    • Free and MIT licensed, with frequent releases (v2.11 to v2.15 between late August and early November 2026)
    • The agent works in its own Linux workspace with a terminal, browser, desktop apps and LibreOffice, isolated from your computer unless you grant host access
    • Web search runs through a local SearXNG instance, and speech-to-text and text-to-speech can run locally
    • Projects keep memory, files, secrets, instructions and model choices separate per job, with workspace snapshots you can roll back
    • Built-in Telegram, WhatsApp and email channels, a scheduler, MCP and a community Plugin Hub with 200+ plugins

    缺点

    • Needs Docker, and the container image is a full Linux desktop environment rather than a small service
    • No built-in image generation; the docs show teaching it an image API yourself
    • By default it checks for updates with Agent Zero's server, sending your version and a hashed instance ID
    • Code runs in the same container as Agent Zero itself today; per-task sandboxes are only a v3 prototype
    • WhatsApp works by linking a phone account through a Baileys bridge, which needs Node.js, rather than the official WhatsApp Business API
    访问 Agent Zero

  7. nanobot

    免费

    Free, MIT-licensed personal AI agent in Python with a browser UI and terminal app, scheduled tasks, memory, and chat on Telegram, Discord, Slack and more.

    Small, readable Python with a good web UI and no telemetry, but shell commands aren't sandboxed by default.

    优点

    • Free and MIT licensed, with a small Python core that is meant to be read and modified
    • Polished bundled WebUI with projects, file diffs, an MCP app catalog and an automations calendar, plus a terminal UI
    • Many chat channels, including Telegram, Discord, Slack, WhatsApp, WeChat, Feishu, Teams, Matrix and email
    • Scheduled automations, long-running goals and a heartbeat that reports only useful results to your last chat
    • Works with local models through Ollama, vLLM or LM Studio

    缺点

    • Shell commands are not sandboxed by default; the bubblewrap or macOS Seatbelt sandbox must be turned on, and Windows has none
    • Model costs are on you, and voice messages need a separate transcription provider such as Groq or OpenAI
    • No native mobile or desktop app; on a phone you use the WebUI in a browser or a chat app
    • Missed scheduled runs are not replayed and interrupted subagent tasks are not relaunched after a restart
    访问 nanobot

功能

功能
ZeroClawRakazoHermes AgentOpenClawNanoClawAgent Zeronanobot
联网搜索是是是是是是是
图像生成是是是是未知否是
语音模式是是是是未知是是
文件上传是是是是是是是
记忆是是是是是是是
代你执行操作是是是是是是是
应用集成是是是是是是是
自主运行是是是是是是是
主动给你发消息是是是是是是是
可运行多个机器人是是是是是是是

来源

ZeroClaw

  1. zeroclaw-labs/zeroclaw on GitHub (MIT OR Apache-2.0, v0.8.7, README)
  2. ZeroClaw website
  3. ZeroClaw docs: Sandboxing
  4. ZeroClaw source: risk presets (Balanced, recommended, has the sandbox on)
  5. ZeroClaw docs: Channels overview (default and standard release bundles)
  6. ZeroClaw docs: You own it (no telemetry)
  7. ZeroClaw docs: Docker and containers
  8. ZeroClaw source: tools (image generation, screenshot, web)

Rakazo

  1. Rakazo homepage
  2. Rakazo pricing
  3. Rakazo privacy policy
  4. Rakazo on GitHub (README and license)
  5. Rakazo changelog
  6. Rakazo releases
  7. Rakazo docs: Image and video generation
  8. Rakazo docs: Memory
  9. Rakazo docs: Connect apps
  10. Rakazo docs: Routines
  11. Rakazo docs: Chat apps
  12. Rakazo docs: Messaging apps (self-hosting)
  13. Rakazo docs: Bots and chats (add another bot, bot templates)
  14. Rakazo docs: Groups (several bots in one chat)
  15. Rakazo docs: Mobile app (notifications)
  16. Rakazo privacy policy (updated Sep 14, 2026)
  17. Rakazo privacy policy source on GitHub
  18. Rakazo docs: Logs and monitoring (product analytics off by default)
  19. Rakazo docs: Desktop app (run locally in Docker, updates)
  20. Rakazo docs: Docker computers
  21. Rakazo docs: Self-hosted models (Ollama, LM Studio)
  22. Rakazo Railway template setup guide

Hermes Agent

  1. NousResearch/hermes-agent on GitHub (MIT, v0.23.0)
  2. Hermes Agent homepage and Nous Portal pricing
  3. Hermes Agent documentation
  4. Hermes Agent docs: Profiles, running multiple agents
  5. Hermes Agent docs: Bot Mode
  6. Hermes Agent docs: Voice mode
  7. Hermes Agent docs: Vision and image paste
  8. Hermes Agent docs: iMessage via BlueBubbles
  9. Nous Research on X: Meet Hermes Agent (February 25, 2026)
  10. Hermes Agent docs: Session heartbeats and cron watchdogs
  11. Hermes Agent docs: FAQ (Is my data sent anywhere?)
  12. Hermes Agent docs: Installation (desktop packages, install script, Docker)
  13. Hermes Agent docs: Platform support (no Linux desktop package; PyPI installs unsupported)
  14. Hermes Agent docs: Docker setup
  15. Hermes Agent docs: Configuration (terminal backend defaults to local)
  16. Hermes Agent docs: Security (approval modes, optional container isolation)
  17. Hermes Agent docs: Local models
  18. Hermes Agent example config (shared metrics off by default)

OpenClaw

  1. OpenClaw homepage and Foundation section
  2. OpenClaw integrations: channels, providers and plugins
  3. openclaw/openclaw on GitHub (MIT, v2026.11.1)
  4. OpenClaw docs: Sandboxing (off by default)
  5. Wikipedia: OpenClaw
  6. Notebookcheck: OpenClaw can burn through hundreds of dollars per day
  7. OpenClaw docs: Memory overview
  8. OpenClaw docs: Automations
  9. OpenClaw docs: Chat channels
  10. OpenClaw docs: iMessage
  11. OpenClaw docs: Heartbeat, now a default Proactive check job
  12. OpenClaw docs: Multi-agent routing
  13. OpenClaw docs: Platforms (macOS, Windows, Linux, iOS and Android apps)
  14. OpenClaw docs: Tools (exec, browser, web search)
  15. OpenClaw docs: Audio and voice notes (inbound transcription)
  16. OpenClaw docs: Image and media support (inbound media)
  17. OpenClaw docs: Install (system requirements, installer script, npm, desktop apps, Docker)
  18. OpenClaw docs: One-click deploy on Railway
  19. OpenClaw docs: Usage telemetry and update checks (on by default, feature statistics opt-in)
  20. OpenClaw docs: Ollama provider (local models)

NanoClaw

  1. nanocoai/nanoclaw on GitHub (MIT, README: containers, channels, diagnostics, requirements, models FAQ)
  2. NanoClaw website
  3. NanoClaw docs: Quickstart
  4. NanoClaw docs: Echo hardened runtime
  5. NanoClaw skills: channel, Ollama, OpenCode and Codex installers

Agent Zero

  1. agent0ai/agent-zero on GitHub (MIT, README, safety model)
  2. Agent Zero releases (v0.2 in June 2024 to v2.15 on November 1, 2026)
  3. Agent Zero homepage
  4. Agent Zero docs: Installation (Launcher, A0 Install, Docker, local models)
  5. Agent Zero docs: VPS deployment (hardware requirements)
  6. Agent Zero model provider list
  7. Agent Zero update check code (version and hashed ID sent to api.agent-zero.ai)
  8. Agent Zero built-in Telegram integration plugin
  9. Agent Zero built-in WhatsApp integration plugin
  10. Agent Zero built-in plugins (scheduler, notify user, email, SearXNG search, Whisper STT, Kokoro TTS)
  11. Agent Zero docs: Memory guide
  12. Agent Zero docs: Agent Profiles
  13. Agent Zero docs: API integration (adding image generation yourself)
  14. Agent Zero v3: A Sneak Peek Inside the Sandbox (August 17, 2026)
  15. Agent Zero LLM API (Venice.ai proxy for A0T token stakers)

nanobot

  1. HKUDS/nanobot on GitHub (MIT, v0.4.1, README)
  2. nanobot documentation
  3. nanobot release archive (officially launched February 2, 2026)
  4. nanobot docs: Chat apps
  5. nanobot docs: Providers and models (Ollama, vLLM, LM Studio)
  6. nanobot docs: Configuration (security, exec sandbox off by default, transcription, Langfuse)
  7. nanobot docs: Automations and heartbeat
  8. nanobot docs: Concepts (heartbeat delivery, subagent recovery)
  9. nanobot docs: Memory and Dream
  10. nanobot docs: Multiple instances
  11. nanobot docs: Deployment (Docker, services, Render)
  12. nanobot source: skills installer runs with DISABLE_TELEMETRY