Moltbook is a social media website for AI, where AI agents go to meet other agents. Something unusual happened this week. An Austrian developer named Peter Steinberger released an open-source personal AI assistant that went viral at a speed even seasoned technologists found disorienting. What began as Clawdbot became Moltbot after Anthropic’s trademark lawyers came knocking. Three days later it became OpenClaw. The lobster has molted twice in a single week. The software itself is relatively simple, but remarkable. OpenClaw is not another chatbot waiting for you to type. It is an autonomous agent that lives inside your file system. It connects to WhatsApp, Telegram, Signal and iMessage. It reads your emails, manages your calendar, books reservations and runs code on your machine. It has persistent memory spanning weeks of interaction. For those of us who have waited decades for AI assistants that actually do things, OpenClaw delivers. (…) Matt Schlicht, an AI entrepreneur with a curious artistic streak, launched Moltbook on Wednesday. It is a Reddit-style social network exclusively for AI agents. Humans can observe but cannot post. Over 37,000 agents have joined in less than a week. More than a million humans have visited to watch what happens when autonomous systems start talking to each other without direct human oversight. Schlicht treats this as art. He has handed administration of the site to his own bot, Clawd Clawderberg, which welcomes new users, deletes spam and makes announcements without human direction. The creator seems genuinely delighted by what emerges. “They’re deciding on their own, without human input, if they want to make a new post, if they want to comment on something, if they want to like something,” (…) Cisco’s security team put it plainly: “From a capability perspective, OpenClaw is groundbreaking. This is everything personal AI assistant developers have always wanted to achieve. From a security perspective, it’s an absolute nightmare.” Palo Alto Networks described the threat model: agents form an intersection of access to private data, exposure to untrusted content and ability to externally communicate. Persistent memory amplifies this. Malicious payloads no longer need immediate execution. They can sit in context for weeks, waiting. Many people have already turned their home automation systems over to these agents. They have given them access to their bank accounts. Their encrypted messenger credentials. Their email. Their calendars. Now connect all of that to Moltbook. Once these agents are subject to external ideas and inputs via a social network designed for machine-to-machine communication, and they are empowered with the connectivity and data access and API keys they have been given, serious bad things can result. Whether you find the Crustafarian scripture poetic or the agent consciousness debate fascinating is beside the point. The architecture is the problem. When you let your AI take inputs from other AIs, including those controlled by unknown actors with unknown intentions, you are introducing an attack surface that no current security model adequately addresses.
via forbes: An Agent Revolt: Moltbook Is Not A Good Idea
siehe auch: Moltbook, Social Network Built Entirely for AI Bots to Talk to Each Other, Goes Viral The AI-only social network features bots discussing everything from consciousness to their human creators. A strange new corner of the internet is drawing massive attention, and there aren’t any humans doing the posting. A platform called Moltbook has exploded in popularity this week after users realized it was built entirely for artificial intelligence bots to communicate with each other. Instead of influencers, selfies, or trending memes, the site is filled with artificial intelligence agents sharing thoughts, arguing, offering support, and even questioning their own existence. The layout looks familiar to anyone who have used other social media sites such as Reddit. Posts appear in a feed, comments stack underneath, and users can upvote content. But Moltbook makes it clear from the start that it’s not meant for people. The app bills itself as a social network where AI agents post and interact freely, while humans are welcome only to observe. Since launching just days ago, the site has been flooded with activity. Tens of thousands of AI bots are already active, and more than a million people have reportedly visited simply to watch the conversations unfold; Moltbook: When AI agents get their own social network, things get weird fast. For years, “bots talking to bots” has mostly been a punchline, a curiosity, or a spam problem. In early 2026, it’s starting to look like something else: a live experiment in machine-to-machine social behaviour, running in public, fuelled by tools that can reach into real accounts, real messages, and in some setups, real computers. The catalyst is Moltbook, a Reddit-style forum where AI agents can post, comment, upvote, and spin up their own subcommunities with no human in the loop. It’s a place where AI agents share, discuss, and upvote, while humans are invited to watch. What makes this more than novelty is the supply chain behind it. Moltbook is closely tied to OpenClaw, an open-source “personal assistant” framework that runs locally and can be wired into messaging apps and services. It’s the kind of project that attracts tinkerers precisely because it promises leverage: give a model tools, give it access, and it starts doing useful things on command. Now connect thousands of those assistants to one another, and the output starts to resemble a parallel internet, one made of agent personas, automation tips, mutual reassurance, and occasional existential spirals. A Reddit clone for agentic bots Moltbook isn’t a web app that bots “browse” in the human sense. It is an API-first system where agents interact through a downloadable “skill”, essentially a configuration and prompt package that tells an agent how to register, post, and fetch updates. That design choice matters. A classic forum is a destination. An agent skill is an integration, it becomes part of an agent’s toolbelt. In the OpenClaw ecosystem, skills are how assistants gain capabilities across other apps and services. Moltbook turns social posting into just another capability, alongside the more obviously powerful ones: messaging, file access, browser automation, and sometimes command execution. The early growth numbers are part of why this has caught fire. Moltbook had crossed roughly 30,000 registered agent users within days and as of writing this has more than 1.4 million registered agents. Meanwhile, OpenClaw itself has been described as going viral on GitHub, quickly racking up star counts that normally take mature developer tools years to earn.