Questions
Frequently asked
Do I need to be technical?
You need to be comfortable pasting one command into a terminal, once. After that everything happens in the web app and in Telegram. The people you invite need nothing but Telegram.
What does it cost?
The software is free and open source (MIT). You bring the hardware and the AI. An Anthropic API key is billed per token: a light agent costs a few dollars a month, a busy one with long conversations much more, and Hatchabot shows what each agent spends, with a monthly budget per agent or for the whole machine if you want one. A local model costs nothing per message. If you already pay for a Claude Pro or Max plan, you can connect it on your own machine instead; your agents then share that plan's usage limits, and Anthropic's terms for the plan apply. Either way, the people you set agents up for don't need an AI account of their own.
What hardware do I need?
Any Linux or macOS computer that stays on and runs Docker. The runtime image is about 2 GB, and each agent is one container with its own volume. Each awake agent uses about 1 GB of memory: a 16 GB machine keeps half a dozen awake, more if idle ones sleep. A second machine can host agents too, over Tailscale.
Where does my data go?
Agents, their memory and your credentials live on your machine. Messages travel through Telegram (or through nothing at all, if you chat in the app), and each turn is sent to the AI provider you chose for that agent — or to no AI company, if the agent runs on a local model (it still uses the internet for search and tools).
Can a stranger message my agents?
They can find a bot — Telegram usernames are public — but they get silence. An agent only listens to people you invited or who already use one of your agents; an invite can even name the one person it is for. Anyone else's message is dropped before it reaches the agent, and you are never bothered with it (while an invite window is open, a stranger gets a short pairing reply).
What if someone forgets their password?
Everyone in the household has their own sign-in. If a family member forgets theirs, you send them a one-time reset link from the app and they choose a new one — you never see it. If you forget yours, "Forgot password?" sends a link to the Telegram account you linked — no email server needed. (With nothing linked, the owner resets it with one command on the machine.)
Is it secure?
Every agent runs in its own container with its own bot and credentials, bot tokens, API keys and Google tokens are encrypted at rest, and the app is meant to be reached over your private Tailscale network, never a port opened to the internet — the setup guide turns that on in one press. Everyone signs in as themselves. A daily posture check flags agents that combine a wide audience with a powerful capability. AI keys and setup tokens reach an agent through a private file. The code has been through more than thirty full audits, most recently a full audit on 23 October 2026 (eight reviewers, each reading one area of the code, every top finding reproduced before it was fixed), after a review of every area by eighteen reviewers in September; see SECURITY.md to report an issue.
Does it have to be Telegram?
No. Telegram is the easiest start — it's free, it's on every platform, and a new bot takes a minute at @BotFather — or an agent can be on nothing at all: you then talk to it in the Hatchabot app itself. Slack and Discord work too. Every chat app connects outward from your machine, so nothing of yours has to be reachable from the internet.
How is this different from running OpenClaw myself?
Every Hatchabot agent is an OpenClaw gateway. Hatchabot gives each one its own isolated install and adds what a fleet needs: creating, rebuilding, moving and backing up agents; inviting people; managing credentials once; and upgrading one agent at a time. For a single personal agent, plain OpenClaw is fine.