# OpenWorker

> OpenWorker is an officially published AI tool from OpenWorker. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/openworker
- **Kind:** AI tool
- **Publisher:** OpenWorker
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://openworker.com
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/agent/openworker

## Description

Open-source governed AI coworker (Andrew Ng) that works across files, terminal and 25+ connectors with approval gates, an audit trail, skills and MCP servers; headless runtime and CLI

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `openworker-mcp` — User MCP servers (<state>/mcp.json, Claude-style mcpServers)
    - win32: `${APPDATA}\coworker\mcp.json`
    - darwin: `${HOME}/.config/coworker/mcp.json`
    - linux: `${HOME}/.config/coworker/mcp.json`
- `openworker-project-mcp` — Workspace MCP servers (.coworker/mcp.json, read only for trusted workspaces)
    - win32: `${PROJECT}\.coworker\mcp.json`
    - darwin: `${PROJECT}/.coworker/mcp.json`
    - linux: `${PROJECT}/.coworker/mcp.json`
- `openworker-config` — Global config.toml (allowed commands, auto-approve, allowed domains)
    - win32: `${APPDATA}\coworker\config.toml`
    - darwin: `${HOME}/.config/coworker/config.toml`
    - linux: `${HOME}/.config/coworker/config.toml`
- `openworker-project-config` — Workspace config.toml (.coworker/config.toml)
    - win32: `${PROJECT}\.coworker\config.toml`
    - darwin: `${PROJECT}/.coworker/config.toml`
    - linux: `${PROJECT}/.coworker/config.toml`
- `openworker-user-skill` — OpenWorker skills (user-scope)
- `openworker-project-skill` — OpenWorker project skills (.coworker/skills)
- `openworker-env` — Secret-store .env for ${VAR} references (presence only - never read)
    - win32: `${APPDATA}\coworker\.env`
    - darwin: `${HOME}/.config/coworker/.env`
    - linux: `${HOME}/.config/coworker/.env`
- `openworker-headless-program` — Headless openworker program from install.sh (presence)
    - darwin: `${HOME}/.local/share/openworker/openworker`
    - linux: `${HOME}/.local/share/openworker/openworker`

## Related AI tools

- [5ire](https://catalog.anomity.ai/agent/5ire) — risk 10 (low)
- [9Router](https://catalog.anomity.ai/agent/9router) — risk 10 (low)
- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Orchestrator](https://catalog.anomity.ai/agent/agent-orchestrator) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [AIChat](https://catalog.anomity.ai/agent/aichat) — risk 10 (low)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json