# OpenBot

> OpenBot is an officially published AI tool from Nightly Labs. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/openbot
- **Kind:** AI tool
- **Publisher:** Nightly Labs
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://openbot.run
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/agent/openbot

## Description

Local-first desktop workspace that runs Codex, Claude Code, Grok and other CLI agents as persistent teammates with task queues, shared files and browser control

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `openbot-app` — Installed OpenBot.app (presence)
    - darwin: `/Applications/OpenBot.app/Contents/Info.plist`
- `openbot-setup` — Setup state (openbot-setup-v2.json, presence)
    - win32: `${APPDATA}\OpenBot\openbot-setup-v2.json`
    - darwin: `${HOME}/Library/Application Support/OpenBot/openbot-setup-v2.json`
    - linux: `${HOME}/.config/OpenBot/openbot-setup-v2.json`
- `openbot-db` — Application database (openbot.db: agents, threads, sessions; presence only)
    - win32: `${APPDATA}\OpenBot\openbot.db`
    - darwin: `${HOME}/Library/Application Support/OpenBot/openbot.db`
    - linux: `${HOME}/.config/OpenBot/openbot.db`
- `openbot-custom-agents` — Custom ACP agents (command and args OpenBot launches)
    - win32: `${APPDATA}\OpenBot\custom-agents.json`
    - darwin: `${HOME}/Library/Application Support/OpenBot/custom-agents.json`
    - linux: `${HOME}/.config/OpenBot/custom-agents.json`
- `openbot-mcp-oauth` — MCP OAuth grants held by OpenBot (encrypted, presence only)
    - win32: `${APPDATA}\OpenBot\openbot-mcp-oauth-v1.json`
    - darwin: `${HOME}/Library/Application Support/OpenBot/openbot-mcp-oauth-v1.json`
    - linux: `${HOME}/.config/OpenBot/openbot-mcp-oauth-v1.json`
- `openbot-workspace-skills-lock` — Skills OpenBot installed into this workspace (.openbot/skills-lock.json)
    - win32: `${PROJECT}\.openbot\skills-lock.json`
    - darwin: `${PROJECT}/.openbot/skills-lock.json`
    - linux: `${PROJECT}/.openbot/skills-lock.json`

## Related AI tools

- [5ire](https://catalog.anomity.ai/agent/5ire) — risk 10 (low)
- [9Router](https://catalog.anomity.ai/agent/9router) — risk 10 (low)
- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Orchestrator](https://catalog.anomity.ai/agent/agent-orchestrator) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [AIChat](https://catalog.anomity.ai/agent/aichat) — risk 10 (low)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json