简体中文

Hermes Agent 替代品:5 款可以改用的开源智能体

面向自托管用户排名的五款 Hermes Agent 开源替代品:谁会把命令放进沙箱、谁提供手机应用、谁的部署最简单。

概览

概览
机器人许可证聊天应用
Hermes AgentMIT26.2万是否Telegram, WhatsApp, iMessage, Discord, SlackUS$20/月起
ZeroClawMIT OR Apache-2.03.3万是是Telegram, WhatsApp, Discord免费
OpenClawMIT39.4万是否Telegram, WhatsApp, iMessage, Discord, Slack免费
NanoClawMIT3.1万是是Telegram, WhatsApp, iMessage, Discord, Slack免费
RakazoApache-2.07538是是Telegram, WhatsApp, iMessage, SlackUS$10/月起
NemoClawApache-2.02.3万是是Telegram, Discord, Slack免费
截至 2026年11月8日 的 GitHub stars

检查清单

检查清单
Hermes AgentZeroClawOpenClawNanoClawRakazoNemoClaw
开源许可证是是是是是是
支持本地模型是是是是是是
默认沙箱隔离否是否是是是
默认无遥测是是否否是否
接入你的聊天应用是是是是是是
你离开时也能工作是是是是是是

Nous Research 的 Hermes Agent 在自托管方面做对了很多事:MIT 许可证、除非你主动开启否则不共享指标、支持本地模型、20 多个聊天平台,以及一个会自己编写可复用技能的智能体。如果你在读这篇文章,大概是它的某个短板让你卡住了。刚接触它?请先看 Hermes Agent 是什么。

Hermes Agent 的不足之处

命令在你的机器上运行。 终端后端默认是本地,容器隔离只是一个可选设置。一个会学习新技能、会读你消息的智能体,恰恰是你最想关进笼子里的那种。

没有手机应用。 在 Android 上需要通过 Termux 进行命令行安装,iOS 上则没有任何原生方案。你只能通过聊天应用来访问它。

部署默认你是服务器管理员。 它要求你熟悉命令行、能自己运维服务器。没有 Linux 桌面安装包,iMessage 还需要在 Mac 上单独运行一个 BlueBubbles 服务器。

付费附加功能。 托管的网页搜索、图像生成和语音需要 Nous Portal 套餐或你自己的 API 密钥。

我们主要按第一点给替代品排名,因为它可能让你付出数据的代价;其次看它们需要多少部署工作。

1. ZeroClaw:默认沙箱,单一二进制文件

如果你离开是为了隔离,ZeroClaw 是最强的选择。它推荐的 Balanced 配置会在中风险操作前询问、阻止高风险操作、将文件访问限制在工作区内,并在操作系统沙箱中运行工具(macOS 上用 Seatbelt,Linux 上用 Firejail)。它是一个用单个 TOML 文件配置的 Rust 二进制程序,不发送遥测,通过 Ollama 运行本地模型,并支持在提供商之间设置回退链。

Hermes 用户会怀念两样东西:自我改进的技能循环,以及标准构建中的渠道覆盖面。Slack、iMessage 和 Signal 需要启用额外特性从源码构建。

ZeroClaw homepage headline: The personal AI agent you actually own, one lightweight Rust binary on your machine with your keys or your local models
ZeroClaw's homepagezeroclaw.com

2. OpenClaw:全平台应用,最大的社区

OpenClaw 就是 Hermes 可以从中导入数据的那个智能体,它也正好补上了手机应用的缺口:它有 macOS、Windows、Linux、iOS 和 Android 应用,29 个聊天渠道和 142 个官方插件。它的桌面应用还覆盖 Linux,而 Hermes 在 Linux 上没有桌面安装包。

对沙箱问题它毫无帮助。沙箱默认关闭,并且它每天都会发送包含版本和系统信息的更新检查,直到你设置 update.checkOnStart: false。我们的 Hermes vs OpenClaw 对比有更深入的分析。

WhatsApp chat with an OpenClaw assistant giving casual travel advice to a user in Marrakech
Chatting with OpenClaw in WhatsAppdocs.openclaw.ai

3. NanoClaw:每个智能体一个容器

NanoClaw 让每个智能体都运行在自己的 Docker 容器中,只能看到你挂载的文件夹,并通过凭据网关转发对外请求,使智能体永远拿不到原始密钥。和 Hermes 的 profile 一样,你可以运行多个彼此独立的智能体,各自拥有自己的记忆和权限。

它与 Claude 和 Claude Code 绑定:定制方式是让 Claude Code 修改你的 fork,没有配置文件。它还会发送匿名的安装诊断信息,除非你设置 NANOCLAW_NO_DIAGNOSTICS=1;在 Windows 上需要 WSL2。

NanoClaw setup wizard in a terminal explaining that the assistant lives in its own sandbox and asking whether to fetch a hardened image or build it locally
NanoClaw's setup wizard choosing the agent's sandbox imagedocs.nanoclaw.dev

4. Rakazo:带移动应用的沙箱机器人

Rakazo(我们开发的产品)同时补上了这两个缺口:每个机器人都有自己的沙箱电脑,带浏览器、终端和桌面,并且除桌面应用外还提供 iOS 和 Android 应用。它采用 Apache-2.0 许可证,自托管时不发送产品分析数据,可通过 Ollama 或 LM Studio 使用本地模型,也可以使用 Claude 或 ChatGPT 订阅。

它仍处于 beta 阶段,需要带 Compose 的 Docker Engine,且 Telegram、WhatsApp 和 iMessage 仅在自托管安装中可用。

Rakazo web app with a chat with a bot called Chief and a side panel showing the bot's live browser screen, a Take control button and routines
A Rakazo bot chat with its computer screen beside itgithub.com

5. NemoClaw:保留 Hermes,把它放进沙箱

NemoClaw 其实不算替代品。它是 NVIDIA 的一套方案,用于在 OpenShell 沙箱中运行 OpenClaw、Hermes Agent 或 LangChain Deep Agents Code,网络目标在操作员批准前一律被阻止,凭据保存在沙箱之外。如果你喜欢 Hermes,只是不想让它无拘无束地运行,这能让你继续用它。

代价是资源占用和成熟度:至少 8 GB 内存、2.4 GB 的沙箱镜像、alpha 状态,并且会向 NVIDIA 发送遥测,除非你设置 NEMOCLAW_DISABLE_TELEMETRY=1。NemoClaw 是什么介绍了具体部署。

NemoClaw high-level component diagram: users and operators, NemoClaw control (CLI, installer, dashboard), the OpenShell gateway, the sandbox running OpenClaw, inference, integrations and state
How NemoClaw wraps an agent in an OpenShell sandboxgithub.com

该选哪一个

  • 因为命令没有沙箱而离开:选 ZeroClaw;如果你本来就在用 Claude Code,选 NanoClaw。
  • 因为没有手机应用而离开:选 OpenClaw;如果你还想要沙箱,选 Rakazo。
  • 对 Hermes 满意但想要隔离,且硬件足够:选 NemoClaw。

Hermes 这类智能体之外的完整阵容,请看我们的最佳开源 AI 智能体榜单。

替代品

  1. ZeroClaw

    免费

    Personal AI agent in one Rust binary, MIT or Apache-2.0, with local or cloud models, 30+ channels, approval gates and an OS sandbox on by default.

    Meets every check: one Rust binary, approval gates and an OS sandbox on by default, no telemetry, local models.

    优点

    • Safe defaults: the recommended profile asks before medium-risk actions, blocks high-risk ones, keeps files in the workspace and runs tools in an OS sandbox
    • One small Rust binary with one config file, running on macOS, Linux, Windows and boards like a Raspberry Pi
    • More than 30 channels, plus a web dashboard for chat, memory, config and cron
    • Provider fallback chains, local models through Ollama, and cryptographic receipts for tool calls
    • States plainly that it sends no telemetry and needs no cloud account or license server

    缺点

    • Slack, iMessage, Signal and several other channels are not in the standard release; you build from source with extra features to get them
    • `zeroclaw quickstart` only sets up the model provider; channels and risk profiles mean editing the TOML config file
    • The Docker sandbox backend isn't picked automatically under the default native runtime
    • Model costs are on you
    访问 ZeroClaw
  2. OpenClaw

    免费

    Free, MIT-licensed personal AI agent that runs on your own computer and takes orders from WhatsApp, Telegram, iMessage, Slack and 20+ other chat apps.

    The biggest ecosystem and every chat app, but sandboxing is off and telemetry is on by default.

    优点

    • Free and MIT licensed, with no paid tier
    • Runs on your own hardware, and state, memory and credentials stay there
    • Works in 29 chat channels, including WhatsApp, Telegram, iMessage, Slack, Discord and Microsoft Teams
    • Model-agnostic: 64 model and media providers, plus local models
    • Large ecosystem of skills and 142 official plugins, and very active development

    缺点

    • Model costs are on you and can run high: testers and users have reported spending over $100 in a day with expensive models
    • Sandboxing is off by default and the agent can run commands on the host unless you turn on approvals
    • Setup and upkeep expect comfort with the command line; maintainers warn it is risky for non-technical users
    • Broad access to email, messages and the system makes prompt injection and malicious third-party skills a real risk
    访问 OpenClaw
  3. NanoClaw

    免费

    Small, MIT-licensed OpenClaw alternative that runs each agent in its own Docker container and chats with you on WhatsApp, Telegram, Slack, Discord and more.

    Every agent in its own container and a tiny codebase, but tied to Claude Code and sends setup diagnostics by default.

    优点

    • Every agent runs in its own Docker container and sees only the folders you mount, so shell access stays off your host
    • Small codebase (one host process and a handful of files) that you customize by having Claude Code edit your fork
    • Agents never hold raw API keys: outbound calls go through a credential gateway with per-agent policies and rate limits
    • Many chat channels, including WhatsApp, Telegram, Slack, Discord, iMessage, Teams, Matrix and email, with one or several agents per channel
    • Scheduled tasks with optional script gates that skip waking the agent when there's nothing to do

    缺点

    • Built around Claude and Claude Code: customizing, debugging and adding channels all go through Claude Code
    • Sends anonymous setup diagnostics unless you set NANOCLAW_NO_DIAGNOSTICS=1
    • No config files by design, so every change means editing code in your own fork
    • Needs Docker, and Windows only works through WSL2
    访问 NanoClaw
  4. Rakazo

    US$10/月起

    Open-source, self-hostable platform for persistent AI bots that each get a job, a computer, memory and routines, using the model you choose.

    Our own product. Meets every check: Apache-2.0, sandboxed bot computers, no telemetry by default, any model you connect.

    优点

    • Open source (Apache-2.0) and fully self-hostable, including with local models
    • Choice of model per bot, including existing Claude or ChatGPT subscriptions
    • Bots keep working on schedules and triggers with their own cloud computer
    • Approval controls over which actions a bot may take on its own

    缺点

    • Still in beta, with frequent releases
    • You supply and pay for the model on the hosted plans, unless you buy Rakazo credits
    • Telegram, WhatsApp and iMessage/SMS are only available when self-hosted
    • More setup than a single chat app
    访问 Rakazo
  5. NemoClaw

    免费

    NVIDIA's Apache-2.0 stack for running OpenClaw, Hermes or Deep Agents inside locked-down OpenShell sandboxes with managed inference. Alpha.

    Puts OpenClaw or Hermes in a locked-down sandbox, but it's alpha, heavy to run and sends telemetry by default.

    优点

    • Puts OpenClaw or Hermes Agent in a sandbox with network, filesystem and process controls instead of running it on your host
    • Unapproved network destinations are blocked and surfaced for an operator to approve
    • Inference, messaging and MCP credentials stay outside the sandbox
    • Backed by NVIDIA, with local inference through Ollama, vLLM or NIM and a tested path on DGX Spark

    缺点

    • Alpha: maintainers support it on a best-effort basis, and several channels are experimental
    • A wrapper, not an agent: what the bot can do depends on the OpenClaw or Hermes version inside
    • Heavier than running the agent alone: 8 GB RAM minimum, a 2.4 GB sandbox image and a container runtime
    • The CLI sends operation telemetry to NVIDIA unless you set NEMOCLAW_DISABLE_TELEMETRY=1
    访问 NemoClaw

功能

功能
Hermes AgentZeroClawOpenClawNanoClawRakazoNemoClaw
联网搜索是是是是是是
图像生成是是是未知是未知
语音模式是是是未知是未知
文件上传是是是是是未知
记忆是是是是是未知
代你执行操作是是是是是是
应用集成是是是是是是
自主运行是是是是是是
主动给你发消息是是是是是未知
可运行多个机器人是是是是是未知

来源

Hermes Agent

  1. NousResearch/hermes-agent on GitHub (MIT, v0.23.0)
  2. Hermes Agent homepage and Nous Portal pricing
  3. Hermes Agent documentation
  4. Hermes Agent docs: Profiles, running multiple agents
  5. Hermes Agent docs: Bot Mode
  6. Hermes Agent docs: Voice mode
  7. Hermes Agent docs: Vision and image paste
  8. Hermes Agent docs: iMessage via BlueBubbles
  9. Nous Research on X: Meet Hermes Agent (February 25, 2026)
  10. Hermes Agent docs: Session heartbeats and cron watchdogs
  11. Hermes Agent docs: FAQ (Is my data sent anywhere?)
  12. Hermes Agent docs: Installation (desktop packages, install script, Docker)
  13. Hermes Agent docs: Platform support (no Linux desktop package; PyPI installs unsupported)
  14. Hermes Agent docs: Docker setup
  15. Hermes Agent docs: Configuration (terminal backend defaults to local)
  16. Hermes Agent docs: Security (approval modes, optional container isolation)
  17. Hermes Agent docs: Local models
  18. Hermes Agent example config (shared metrics off by default)

ZeroClaw

  1. zeroclaw-labs/zeroclaw on GitHub (MIT OR Apache-2.0, v0.8.7, README)
  2. ZeroClaw website
  3. ZeroClaw docs: Sandboxing
  4. ZeroClaw source: risk presets (Balanced, recommended, has the sandbox on)
  5. ZeroClaw docs: Channels overview (default and standard release bundles)
  6. ZeroClaw docs: You own it (no telemetry)
  7. ZeroClaw docs: Docker and containers
  8. ZeroClaw source: tools (image generation, screenshot, web)

OpenClaw

  1. OpenClaw homepage and Foundation section
  2. OpenClaw integrations: channels, providers and plugins
  3. openclaw/openclaw on GitHub (MIT, v2026.11.1)
  4. OpenClaw docs: Sandboxing (off by default)
  5. Wikipedia: OpenClaw
  6. Notebookcheck: OpenClaw can burn through hundreds of dollars per day
  7. OpenClaw docs: Memory overview
  8. OpenClaw docs: Automations
  9. OpenClaw docs: Chat channels
  10. OpenClaw docs: iMessage
  11. OpenClaw docs: Heartbeat, now a default Proactive check job
  12. OpenClaw docs: Multi-agent routing
  13. OpenClaw docs: Platforms (macOS, Windows, Linux, iOS and Android apps)
  14. OpenClaw docs: Tools (exec, browser, web search)
  15. OpenClaw docs: Audio and voice notes (inbound transcription)
  16. OpenClaw docs: Image and media support (inbound media)
  17. OpenClaw docs: Install (system requirements, installer script, npm, desktop apps, Docker)
  18. OpenClaw docs: One-click deploy on Railway
  19. OpenClaw docs: Usage telemetry and update checks (on by default, feature statistics opt-in)
  20. OpenClaw docs: Ollama provider (local models)

NanoClaw

  1. nanocoai/nanoclaw on GitHub (MIT, README: containers, channels, diagnostics, requirements, models FAQ)
  2. NanoClaw website
  3. NanoClaw docs: Quickstart
  4. NanoClaw docs: Echo hardened runtime
  5. NanoClaw skills: channel, Ollama, OpenCode and Codex installers

Rakazo

  1. Rakazo homepage
  2. Rakazo pricing
  3. Rakazo privacy policy
  4. Rakazo on GitHub (README and license)
  5. Rakazo changelog
  6. Rakazo releases
  7. Rakazo docs: Image and video generation
  8. Rakazo docs: Memory
  9. Rakazo docs: Connect apps
  10. Rakazo docs: Routines
  11. Rakazo docs: Chat apps
  12. Rakazo docs: Messaging apps (self-hosting)
  13. Rakazo docs: Bots and chats (add another bot, bot templates)
  14. Rakazo docs: Groups (several bots in one chat)
  15. Rakazo docs: Mobile app (notifications)
  16. Rakazo privacy policy (updated Sep 14, 2026)
  17. Rakazo privacy policy source on GitHub
  18. Rakazo docs: Logs and monitoring (product analytics off by default)
  19. Rakazo docs: Desktop app (run locally in Docker, updates)
  20. Rakazo docs: Docker computers
  21. Rakazo docs: Self-hosted models (Ollama, LM Studio)
  22. Rakazo Railway template setup guide

NemoClaw

  1. NVIDIA/NemoClaw on GitHub (Apache-2.0, README: supported agents, alpha status)
  2. NemoClaw docs: Overview
  3. NemoClaw docs: Prerequisites and platforms
  4. NemoClaw docs: Choose an inference provider (Ollama, vLLM, NIM)
  5. NemoClaw docs index: messaging channels (WhatsApp, Teams, Google Chat, WeChat experimental)
  6. NemoClaw source: telemetry delivery and NEMOCLAW_DISABLE_TELEMETRY