Moltis — A secure persistent personal agent server in Rust

One binary — sandboxed, secure, yours.

Installation • Comparison • Architecture • Security • Features • How It Works • Contributing

---

Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focused on making Moltis excellent.

Secure by design — Your keys never leave your machine. Every command runs in a sandboxed container, never on your host.

Your hardware — Runs on a Mac Mini, a Raspberry Pi, or any server you own. One Rust binary, no Node.js, no npm, no runtime.

Full-featured — Voice, memory, cross-session recall, automatic edit checkpoints, scheduling, Telegram, Signal, Discord, browser automation, MCP servers, SSH or node-backed remote exec, managed deploy keys with host pinning in the web UI, a live Settings → Tools inventory, Cursor-compatible project context, and context-file threat scanning — all built-in. No plugin marketplace to get supply-chain attacked through.

Auditable — The agent runner and model interface fit in ~7.5K lines, with providers in ~19K more. The Rust workspace is ~270K lines across 59 modular crates you can audit independently, with 470+ Rust files containing tests. Unsafe code is isolated to FFI and precompiled runtime boundaries, not the core agent loop.

Installation

# One-liner install script (macOS / Linux)
curl -fsSL https://www.moltis.org/install.sh | sh

# macOS / Linux via Homebrew
brew install moltis-org/tap/moltis

# Docker (multi-arch: amd64/arm64)
docker pull ghcr.io/moltis-org/moltis:latest

# Or build from source
cargo install moltis --git https://github.com/moltis-org/moltis

Comparison

	OpenClaw	Hermes Agent	Moltis
Primary stack	TypeScript + Swift/Kotlin companion apps	Python + TypeScript TUI/web surfaces	Rust
Runtime	Node.js + npm/pnpm/bun	Python + uv/pip, optional Node UI pieces	Single Rust binary
Local checkout size*	~1.1M app LoC	~152K app LoC	~270K Rust LoC
Architecture	Broad gateway, channel, node, and app ecosystem	CLI/gateway agent with learning loop and research tooling	Persistent personal agent server with modular crates
Crates/modules	npm packages, extensions, apps	Python packages, plugins, tools, TUI	59 Rust workspace crates
Sandbox/backends	App-level permissions, browser/node tools	Local, Docker, SSH, Daytona, Singularity, Modal	Docker/Podman + Apple Container + WASM
Auth/access	Pairing and local gateway controls	CLI and messaging gateway setup	Password + Passkey + API keys + Vault
Voice I/O	Voice wake and talk modes	Voice memo transcription	Built-in STT + TTS providers
MCP	Plugin/integration support	MCP integration	stdio + HTTP/SSE
Skills	Bundled, managed, and workspace skills	Self-improving skills and Skills Hub support	Bundled/workspace skills + autonomous improvement + OpenClaw import
Memory/RAG	Plugin-backed memory and context engine	Agent-curated memory, session search, user modeling	SQLite + FTS + vector memory

* LoC measured with tokei, excluding node_modules, generated build output, dist, and target.