Hermes Agent 替代品:5 款可以改用的开源智能体
面向自托管用户排名的五款 Hermes Agent 开源替代品:谁会把命令放进沙箱、谁提供手机应用、谁的部署最简单。
概览
| 机器人 | 许可证 | 聊天应用 | |||||
|---|---|---|---|---|---|---|---|
| Hermes Agent | MIT | 26.2万 | 是 | 否 | Telegram, WhatsApp, iMessage, Discord, Slack | US$20/月起 | |
| ZeroClaw | MIT OR Apache-2.0 | 3.3万 | 是 | 是 | Telegram, WhatsApp, Discord | 免费 | |
| OpenClaw | MIT | 39.4万 | 是 | 否 | Telegram, WhatsApp, iMessage, Discord, Slack | 免费 | |
| NanoClaw | MIT | 3.1万 | 是 | 是 | Telegram, WhatsApp, iMessage, Discord, Slack | 免费 | |
| Rakazo | Apache-2.0 | 7538 | 是 | 是 | Telegram, WhatsApp, iMessage, Slack | US$10/月起 | |
| NemoClaw | Apache-2.0 | 2.3万 | 是 | 是 | Telegram, Discord, Slack | 免费 |
检查清单
Nous Research 的 Hermes Agent 在自托管方面做对了很多事:MIT 许可证、除非你主动开启否则不共享指标、支持本地模型、20 多个聊天平台,以及一个会自己编写可复用技能的智能体。如果你在读这篇文章,大概是它的某个短板让你卡住了。刚接触它?请先看 Hermes Agent 是什么。
Hermes Agent 的不足之处
命令在你的机器上运行。 终端后端默认是本地,容器隔离只是一个可选设置。一个会学习新技能、会读你消息的智能体,恰恰是你最想关进笼子里的那种。
没有手机应用。 在 Android 上需要通过 Termux 进行命令行安装,iOS 上则没有任何原生方案。你只能通过聊天应用来访问它。
部署默认你是服务器管理员。 它要求你熟悉命令行、能自己运维服务器。没有 Linux 桌面安装包,iMessage 还需要在 Mac 上单独运行一个 BlueBubbles 服务器。
付费附加功能。 托管的网页搜索、图像生成和语音需要 Nous Portal 套餐或你自己的 API 密钥。
我们主要按第一点给替代品排名,因为它可能让你付出数据的代价;其次看它们需要多少部署工作。
1. ZeroClaw:默认沙箱,单一二进制文件
如果你离开是为了隔离,ZeroClaw 是最强的选择。它推荐的 Balanced 配置会在中风险操作前询问、阻止高风险操作、将文件访问限制在工作区内,并在操作系统沙箱中运行工具(macOS 上用 Seatbelt,Linux 上用 Firejail)。它是一个用单个 TOML 文件配置的 Rust 二进制程序,不发送遥测,通过 Ollama 运行本地模型,并支持在提供商之间设置回退链。
Hermes 用户会怀念两样东西:自我改进的技能循环,以及标准构建中的渠道覆盖面。Slack、iMessage 和 Signal 需要启用额外特性从源码构建。

2. OpenClaw:全平台应用,最大的社区
OpenClaw 就是 Hermes 可以从中导入数据的那个智能体,它也正好补上了手机应用的缺口:它有 macOS、Windows、Linux、iOS 和 Android 应用,29 个聊天渠道和 142 个官方插件。它的桌面应用还覆盖 Linux,而 Hermes 在 Linux 上没有桌面安装包。
对沙箱问题它毫无帮助。沙箱默认关闭,并且它每天都会发送包含版本和系统信息的更新检查,直到你设置 update.checkOnStart: false。我们的 Hermes vs OpenClaw 对比有更深入的分析。

3. NanoClaw:每个智能体一个容器
NanoClaw 让每个智能体都运行在自己的 Docker 容器中,只能看到你挂载的文件夹,并通过凭据网关转发对外请求,使智能体永远拿不到原始密钥。和 Hermes 的 profile 一样,你可以运行多个彼此独立的智能体,各自拥有自己的记忆和权限。
它与 Claude 和 Claude Code 绑定:定制方式是让 Claude Code 修改你的 fork,没有配置文件。它还会发送匿名的安装诊断信息,除非你设置 NANOCLAW_NO_DIAGNOSTICS=1;在 Windows 上需要 WSL2。

4. Rakazo:带移动应用的沙箱机器人
Rakazo(我们开发的产品)同时补上了这两个缺口:每个机器人都有自己的沙箱电脑,带浏览器、终端和桌面,并且除桌面应用外还提供 iOS 和 Android 应用。它采用 Apache-2.0 许可证,自托管时不发送产品分析数据,可通过 Ollama 或 LM Studio 使用本地模型,也可以使用 Claude 或 ChatGPT 订阅。
它仍处于 beta 阶段,需要带 Compose 的 Docker Engine,且 Telegram、WhatsApp 和 iMessage 仅在自托管安装中可用。

5. NemoClaw:保留 Hermes,把它放进沙箱
NemoClaw 其实不算替代品。它是 NVIDIA 的一套方案,用于在 OpenShell 沙箱中运行 OpenClaw、Hermes Agent 或 LangChain Deep Agents Code,网络目标在操作员批准前一律被阻止,凭据保存在沙箱之外。如果你喜欢 Hermes,只是不想让它无拘无束地运行,这能让你继续用它。
代价是资源占用和成熟度:至少 8 GB 内存、2.4 GB 的沙箱镜像、alpha 状态,并且会向 NVIDIA 发送遥测,除非你设置 NEMOCLAW_DISABLE_TELEMETRY=1。NemoClaw 是什么介绍了具体部署。

该选哪一个
- 因为命令没有沙箱而离开:选 ZeroClaw;如果你本来就在用 Claude Code,选 NanoClaw。
- 因为没有手机应用而离开:选 OpenClaw;如果你还想要沙箱,选 Rakazo。
- 对 Hermes 满意但想要隔离,且硬件足够:选 NemoClaw。
Hermes 这类智能体之外的完整阵容,请看我们的最佳开源 AI 智能体榜单。
替代品
Personal AI agent in one Rust binary, MIT or Apache-2.0, with local or cloud models, 30+ channels, approval gates and an OS sandbox on by default.
Meets every check: one Rust binary, approval gates and an OS sandbox on by default, no telemetry, local models.
访问 ZeroClaw优点
- Safe defaults: the recommended profile asks before medium-risk actions, blocks high-risk ones, keeps files in the workspace and runs tools in an OS sandbox
- One small Rust binary with one config file, running on macOS, Linux, Windows and boards like a Raspberry Pi
- More than 30 channels, plus a web dashboard for chat, memory, config and cron
- Provider fallback chains, local models through Ollama, and cryptographic receipts for tool calls
- States plainly that it sends no telemetry and needs no cloud account or license server
缺点
- Slack, iMessage, Signal and several other channels are not in the standard release; you build from source with extra features to get them
- `zeroclaw quickstart` only sets up the model provider; channels and risk profiles mean editing the TOML config file
- The Docker sandbox backend isn't picked automatically under the default native runtime
- Model costs are on you
Free, MIT-licensed personal AI agent that runs on your own computer and takes orders from WhatsApp, Telegram, iMessage, Slack and 20+ other chat apps.
The biggest ecosystem and every chat app, but sandboxing is off and telemetry is on by default.
访问 OpenClaw优点
- Free and MIT licensed, with no paid tier
- Runs on your own hardware, and state, memory and credentials stay there
- Works in 29 chat channels, including WhatsApp, Telegram, iMessage, Slack, Discord and Microsoft Teams
- Model-agnostic: 64 model and media providers, plus local models
- Large ecosystem of skills and 142 official plugins, and very active development
缺点
- Model costs are on you and can run high: testers and users have reported spending over $100 in a day with expensive models
- Sandboxing is off by default and the agent can run commands on the host unless you turn on approvals
- Setup and upkeep expect comfort with the command line; maintainers warn it is risky for non-technical users
- Broad access to email, messages and the system makes prompt injection and malicious third-party skills a real risk
Small, MIT-licensed OpenClaw alternative that runs each agent in its own Docker container and chats with you on WhatsApp, Telegram, Slack, Discord and more.
Every agent in its own container and a tiny codebase, but tied to Claude Code and sends setup diagnostics by default.
访问 NanoClaw优点
- Every agent runs in its own Docker container and sees only the folders you mount, so shell access stays off your host
- Small codebase (one host process and a handful of files) that you customize by having Claude Code edit your fork
- Agents never hold raw API keys: outbound calls go through a credential gateway with per-agent policies and rate limits
- Many chat channels, including WhatsApp, Telegram, Slack, Discord, iMessage, Teams, Matrix and email, with one or several agents per channel
- Scheduled tasks with optional script gates that skip waking the agent when there's nothing to do
缺点
- Built around Claude and Claude Code: customizing, debugging and adding channels all go through Claude Code
- Sends anonymous setup diagnostics unless you set NANOCLAW_NO_DIAGNOSTICS=1
- No config files by design, so every change means editing code in your own fork
- Needs Docker, and Windows only works through WSL2
Open-source, self-hostable platform for persistent AI bots that each get a job, a computer, memory and routines, using the model you choose.
Our own product. Meets every check: Apache-2.0, sandboxed bot computers, no telemetry by default, any model you connect.
访问 Rakazo优点
- Open source (Apache-2.0) and fully self-hostable, including with local models
- Choice of model per bot, including existing Claude or ChatGPT subscriptions
- Bots keep working on schedules and triggers with their own cloud computer
- Approval controls over which actions a bot may take on its own
缺点
- Still in beta, with frequent releases
- You supply and pay for the model on the hosted plans, unless you buy Rakazo credits
- Telegram, WhatsApp and iMessage/SMS are only available when self-hosted
- More setup than a single chat app
NVIDIA's Apache-2.0 stack for running OpenClaw, Hermes or Deep Agents inside locked-down OpenShell sandboxes with managed inference. Alpha.
Puts OpenClaw or Hermes in a locked-down sandbox, but it's alpha, heavy to run and sends telemetry by default.
访问 NemoClaw优点
- Puts OpenClaw or Hermes Agent in a sandbox with network, filesystem and process controls instead of running it on your host
- Unapproved network destinations are blocked and surfaced for an operator to approve
- Inference, messaging and MCP credentials stay outside the sandbox
- Backed by NVIDIA, with local inference through Ollama, vLLM or NIM and a tested path on DGX Spark
缺点
- Alpha: maintainers support it on a best-effort basis, and several channels are experimental
- A wrapper, not an agent: what the bot can do depends on the OpenClaw or Hermes version inside
- Heavier than running the agent alone: 8 GB RAM minimum, a 2.4 GB sandbox image and a container runtime
- The CLI sends operation telemetry to NVIDIA unless you set NEMOCLAW_DISABLE_TELEMETRY=1
功能
来源
Hermes Agent
- NousResearch/hermes-agent on GitHub (MIT, v0.23.0)
- Hermes Agent homepage and Nous Portal pricing
- Hermes Agent documentation
- Hermes Agent docs: Profiles, running multiple agents
- Hermes Agent docs: Bot Mode
- Hermes Agent docs: Voice mode
- Hermes Agent docs: Vision and image paste
- Hermes Agent docs: iMessage via BlueBubbles
- Nous Research on X: Meet Hermes Agent (February 25, 2026)
- Hermes Agent docs: Session heartbeats and cron watchdogs
- Hermes Agent docs: FAQ (Is my data sent anywhere?)
- Hermes Agent docs: Installation (desktop packages, install script, Docker)
- Hermes Agent docs: Platform support (no Linux desktop package; PyPI installs unsupported)
- Hermes Agent docs: Docker setup
- Hermes Agent docs: Configuration (terminal backend defaults to local)
- Hermes Agent docs: Security (approval modes, optional container isolation)
- Hermes Agent docs: Local models
- Hermes Agent example config (shared metrics off by default)
ZeroClaw
- zeroclaw-labs/zeroclaw on GitHub (MIT OR Apache-2.0, v0.8.7, README)
- ZeroClaw website
- ZeroClaw docs: Sandboxing
- ZeroClaw source: risk presets (Balanced, recommended, has the sandbox on)
- ZeroClaw docs: Channels overview (default and standard release bundles)
- ZeroClaw docs: You own it (no telemetry)
- ZeroClaw docs: Docker and containers
- ZeroClaw source: tools (image generation, screenshot, web)
OpenClaw
- OpenClaw homepage and Foundation section
- OpenClaw integrations: channels, providers and plugins
- openclaw/openclaw on GitHub (MIT, v2026.11.1)
- OpenClaw docs: Sandboxing (off by default)
- Wikipedia: OpenClaw
- Notebookcheck: OpenClaw can burn through hundreds of dollars per day
- OpenClaw docs: Memory overview
- OpenClaw docs: Automations
- OpenClaw docs: Chat channels
- OpenClaw docs: iMessage
- OpenClaw docs: Heartbeat, now a default Proactive check job
- OpenClaw docs: Multi-agent routing
- OpenClaw docs: Platforms (macOS, Windows, Linux, iOS and Android apps)
- OpenClaw docs: Tools (exec, browser, web search)
- OpenClaw docs: Audio and voice notes (inbound transcription)
- OpenClaw docs: Image and media support (inbound media)
- OpenClaw docs: Install (system requirements, installer script, npm, desktop apps, Docker)
- OpenClaw docs: One-click deploy on Railway
- OpenClaw docs: Usage telemetry and update checks (on by default, feature statistics opt-in)
- OpenClaw docs: Ollama provider (local models)
NanoClaw
Rakazo
- Rakazo homepage
- Rakazo pricing
- Rakazo privacy policy
- Rakazo on GitHub (README and license)
- Rakazo changelog
- Rakazo releases
- Rakazo docs: Image and video generation
- Rakazo docs: Memory
- Rakazo docs: Connect apps
- Rakazo docs: Routines
- Rakazo docs: Chat apps
- Rakazo docs: Messaging apps (self-hosting)
- Rakazo docs: Bots and chats (add another bot, bot templates)
- Rakazo docs: Groups (several bots in one chat)
- Rakazo docs: Mobile app (notifications)
- Rakazo privacy policy (updated Sep 14, 2026)
- Rakazo privacy policy source on GitHub
- Rakazo docs: Logs and monitoring (product analytics off by default)
- Rakazo docs: Desktop app (run locally in Docker, updates)
- Rakazo docs: Docker computers
- Rakazo docs: Self-hosted models (Ollama, LM Studio)
- Rakazo Railway template setup guide
NemoClaw
- NVIDIA/NemoClaw on GitHub (Apache-2.0, README: supported agents, alpha status)
- NemoClaw docs: Overview
- NemoClaw docs: Prerequisites and platforms
- NemoClaw docs: Choose an inference provider (Ollama, vLLM, NIM)
- NemoClaw docs index: messaging channels (WhatsApp, Teams, Google Chat, WeChat experimental)
- NemoClaw source: telemetry delivery and NEMOCLAW_DISABLE_TELEMETRY





