Reference · Updated June 2026
The Claw Ecosystem
Glossary
Every term, acronym, and inside joke in the Claw AI agent ecosystem — explained in plain English. Three sections: technical A-Z, community vocabulary, and the aquarium dictionary.
Technical Reference
Technical Glossary — A to Z
42 plain-English definitions. If you ran into a term or acronym you didn't know, it's here.
A
AES-256-GCM Encryption
Military-grade encryption used to protect stored data. It means that even if an attacker gained access to your server's hard drive, your data would be unreadable without your encryption key. Used by IronClaw for all locally stored data.
API (Application Programming Interface)
A way for software to communicate with other software behind the scenes. When Open Claw "calls" Claude or GPT to answer a question, it's using their API.
API Key
A secret code (similar to a password) that gives a piece of software permission to access an AI service. Open Claw uses your API key to communicate with Claude, GPT, or other AI providers. Guard these like a password. Someone with your key can run up charges in your name.
B
Binary / Executable File
A self-contained program file that runs directly on your computer without needing other software installed. When we say Zero Claw is a "3.4MB binary," we mean the entire program fits in one small file.
C
Claw Chain SECURITY
A sequence of four linked security flaws discovered in May 2026 and named by Cyera (a cybersecurity firm). An attacker can exploit them in sequence — each step gives them more access — to eventually take complete control of an Open Claw installation. Dangerous because each step looks like normal agent activity. All four are fixed in the June update.
ClawHub ⚠ RISK
Open Claw's skill marketplace — the equivalent of an "app store" where you download additional capabilities for your agent. Contains 14,706+ skills. Google's cybersecurity team has confirmed it's an active target for malware distribution. Always verify before installing anything.
Claude
The AI made by Anthropic (a US AI safety company). Claude is one of many AI models that Open Claw can connect to as its "brain." Important: Open Claw and Claude are different things. Open Claw is the agent framework; Claude is one of the AI services it can use. You can also use ChatGPT (OpenAI), Gemini (Google), or others.
Container / Docker Sandbox
A way of running software in complete isolation. Think of it as a locked room — software inside the container can't see or affect anything outside it. If a malicious skill activates inside the container, it's trapped there. Docker is the most widely used tool for creating these containers. NanoClaw uses containers for every agent and skill by default.
CVE (Common Vulnerabilities and Exposures)
A standardized naming system for security flaws in software. Each CVE has a unique number (like CVE-2026-32922) so security teams worldwide can discuss the exact same flaw precisely. Think of it as the software industry's incident report number system. When you see a CVE number, it means the flaw has been officially cataloged.
CVSS Score
The "severity rating" for a security flaw on a scale of 0.0 to 10.0. A score of 9.9 means the flaw is critically serious — an attacker can likely take complete control of the affected system. A score of 5.0 is moderate. Most everyday software bugs score under 4. Two Open Claw flaws have scored 9.9 in 2026.
D
Docker
See Container / Docker Sandbox. Docker is the most widely used tool for creating isolated software containers. NanoClaw uses Docker containers for every agent and skill by default.
E
Electron
A software framework for building desktop applications using web technologies. ClawX and OpenClaw Desktop are built using Electron — which is why they're described as "desktop app wrappers." Most modern desktop apps (VS Code, Slack, Discord) are also built with Electron.
F
Fork (Software Fork)
When a developer takes an existing open-source project's code and creates a new, separate version with their own changes. NanoClaw, Zero Claw, Moltis, and others in this guide are "forks" of Open Claw — they started with Open Claw's code and rebuilt parts of it.
G
GitHub
The world's largest platform for storing, sharing, and collaborating on software code. When we say Open Claw has "375,000 GitHub stars," we mean 375,000 developers have bookmarked the project to show interest or support.
GitHub Stars
A way for developers on GitHub to bookmark or publicly endorse a project. High star counts indicate widespread community interest. It's a rough signal of popularity and credibility in the developer community.
Go (Programming Language)
A programming language created by Google, known for being fast and efficient. PicoClaw is written in Go, which allows it to run on tiny, cheap hardware.
GPU (Graphics Processing Unit)
A specialized computer chip originally designed for video games, now widely used for AI. NVIDIA's products (including DGX stations) are GPUs. NemoClaw is optimized to run AI models locally on NVIDIA GPU hardware.
GTIG (Google Threat Intelligence Group)
Google's team of professional cybersecurity researchers who track malware campaigns, hacking groups, and software vulnerabilities worldwide. In May 2026 they formally classified ClawHub as an active malware-distribution target.
H
Heartbeat
A scheduled automatic action that your agent performs without being asked — like checking your email every morning at 8am. You configure the heartbeat once; after that it runs on its own.
I
IoT (Internet of Things)
Physical devices connected to the internet: smart thermostats, sensors, routers, cameras, vehicle computers. "Edge" bots in this guide (PicoClaw, Zero Claw, Null Claw) are specifically designed to run on IoT hardware.
L
LLM (Large Language Model)
The AI "brain" that understands language and generates responses. Claude (Anthropic), GPT (OpenAI), and Gemini (Google) are all large language models. Open Claw is the framework; the LLM is the intelligence it plugs into.
M
MCP (Model Context Protocol)
A standard protocol that lets AI agents connect to external tools and applications — your calendar, task manager, company database, etc. Think of it as a universal connector for AI. Several bots in this guide support MCP, which dramatically expands what they can connect to.
MIT License
A type of open-source license that allows anyone to use, copy, modify, and share the software for free, including for commercial purposes. All the self-hosted bots in this guide are MIT licensed.
N
Node.js / npm
Node.js is the software framework (runtime environment) that Open Claw runs on. It must be installed on your computer or server before Open Claw will work. npm is the package manager that comes with Node.js and handles installing software components. Current requirement: Node.js 22.16 or newer.
O
Open Source
Software whose underlying code is publicly available for anyone to read, modify, and build upon. All self-hosted bots in this guide are open source, meaning you can inspect exactly what they do.
P
Port (Network Port) ⚠ RISK
A numbered "door" on a computer that allows incoming network connections. Open Claw's default is port 3000. Leaving this port exposed to the internet without protection is a major security risk. It's like leaving a door unlocked on the public street.
Prompt Injection ⚠ RISK
A type of attack where malicious text hidden in a document, email, or webpage tricks an AI agent into doing something unintended — like forwarding private files, sending messages, or changing settings. One of the harder attacks to defend against because it exploits how the AI understands language.
R
RAG (Retrieval-Augmented Generation)
A technique that makes AI look up answers in documents you provide, rather than guessing from its training data alone. Anything LLM uses RAG so you can ask questions of your own files and get cited, accurate answers. The "retrieval" part finds relevant passages; the "generation" part writes the answer.
Rust (Programming Language)
A programming language designed for high performance and built-in memory safety. It's structured so that a whole class of security vulnerabilities (called memory errors) are impossible by design. Zero Claw, Moltis, Open Fang, and IronClaw are written in Rust.
S
Self-Hosted
Running software on your own computer or a server you control, rather than using a cloud service. Self-hosted gives you full control over your data and configuration, but you're also responsible for security, updates, and uptime.
Skill ⚠ VERIFY FIRST
An add-on capability for Open Claw downloaded from ClawHub (the skill marketplace). Skills add new abilities — like reading email, monitoring a website, or connecting to Shopify. They're similar to browser extensions or app store apps. Current count: 14,706+, with 1,103 confirmed as malicious.
SQLite
A lightweight database that stores structured data in a single file on your computer or server. Several bots use SQLite to remember preferences and conversation history locally. No separate database server required.
SSH (Secure Shell)
A method for securely connecting to and controlling a remote server through a text interface. Required for advanced server management in Tier 1 self-hosting.
T
Tailscale
A free, easy-to-use private networking tool that creates a secure encrypted connection between your devices. Recommended for accessing your self-hosted Open Claw remotely instead of opening a network port to the internet.
Terminal / Command Line
A text-based interface for controlling a computer — you type commands instead of clicking. Most Tier 1 self-hosted bots require some comfort with the terminal for installation and configuration.
Token
The unit AI companies use to measure and charge for text processing. Roughly speaking, one token ≈ three-quarters of a word in English. "Per million tokens" is the standard pricing unit for AI APIs.
TypeScript
A programming language used by NanoClaw. It's a more structured and type-safe version of JavaScript (the language that powers most websites), widely used in professional web development.
V
VirusTotal
A free online service (owned by Google) that scans files and URLs using 70+ security scanners simultaneously. ClawHub now runs all uploaded skills through VirusTotal to check for known malware. A "Benign" result is a good sign, but not a guarantee.
VPS (Virtual Private Server)
A rented slice of a server in a data center, typically costing $6–20/month. The most common way to run a self-hosted Open Claw instance without owning your own hardware.
W
WASM / WebAssembly
A highly secure, efficient way of running code inside a tightly controlled sandbox environment. IronClaw uses WebAssembly to ensure the agent can only access exactly the resources you've explicitly permitted, with every access logged and auditable.
Webhook
An automatic notification sent from one app to another when something happens. For example: when a new email arrives, your email provider can send a webhook to Open Claw to process it immediately, rather than having the agent check for new email on a schedule.
Z
Zig (Programming Language)
A low-level programming language focused on maximum performance and minimum binary size. Null Claw is written in Zig, which is why its entire program fits in 678 kilobytes.
Community Reference
Community Vocabulary
Terms you'll encounter in Discord, Reddit, and GitHub discussions — and what they actually mean.
ClawHavoc SECURITY EVENT
The 2026 supply chain attack on the Claw ecosystem. Updated scans now show 800+ malicious skills in ClawHub. The reason security-focused forks like NanoClaw and IronClaw exist.
ClawHub ⚠ RISK
The official skill marketplace. 13,729+ skills. CRITICAL: the ToxicSkills audit found 36.82% of skills have security flaws. Verify before installing.
Dream Diary
OpenClaw's memory system now runs a "REM phase" overnight that consolidates and promotes important memories. The agent writes reflections to
dreams.md.EXFOLIATE
The lobster mascot Molty's battle cry (a riff on the Daleks' "EXTERMINATE" from Doctor Who). Official OpenClaw lore — seen everywhere in the community.
Felix
Nat Eliason's bot that made $14,718 in 2.5 weeks using Open Claw for autonomous revenue generation. The ecosystem benchmark and most referenced real-world example of what's possible with Claw bots.
Friends of the Crustacean NEW JUNE
The official OpenClaw Discord server. 176,484+ members as of June 2026 — the fastest-growing Discord server in the platform's history. When community members say "the server," this is what they mean. Tagline: "New shell, ready to help. The lobster way."
Heartbeat
The agent's background autonomous pulse. With heartbeat configured, the bot acts without being asked.
OpenShell
NVIDIA's kernel-level sandbox runtime, deployed via NemoClaw. Sits beneath the OS application layer — deeper than container-based isolation.
PinchBench
Open-source benchmark for OpenClaw covering 23 standardized real-world tasks. Use it to compare LLM provider performance with your specific workflows.
Skill Card NEW JUNE
The documentation card that now ships with every ClawHub skill (launched May 31, 2026). Shows what the skill does, where it came from, and its VirusTotal scan result. The first thing to check before installing any skill from the store.
Skills
The plugin/extension system. Installing a skill gives the agent a new capability. Community skills live on ClawHub. Currently 13,729+ available, but 36.82% flagged as having security flaws in the ToxicSkills audit.
SkillSpector NEW JUNE
The automated scanner built into ClawHub (launched May 31, 2026) that checks every skill for hidden instructions and agentic risks before it reaches the marketplace. Complements VirusTotal scanning. Community shorthand: "Did it pass SkillSpector?" means "is it clean?"
Soul Document
A file defining the agent's personality, preferences, and identity. Each Open Claw instance has its own Soul Document.
WASM Sandbox
WebAssembly sandbox used by IronClaw and Moltis. Provides capability-based security with cryptographic verification of agent actions.
Culture & Language
🦞 The Aquarium Dictionary
The Chinese tech community nicknamed OpenClaw "Crawfish" because of its lobster logo. This vocabulary of aquaculture metaphors spread globally in early 2026 and shows up constantly in forums, Discord, and Reddit threads.
Cloud Shrimp Farming
Running your agent on cloud vs. local hardware
The distinction between running your agent on a rented cloud server vs. your own local hardware. Affects cost, privacy, and setup complexity.
Deployment model distinction. Affects cost and privacy.
Cold Feet Users
People who install, feel the hype, then abandon it
Users who install a Claw bot out of excitement, struggle to find a concrete use case, and walk away before getting value from it.
The #1 failure mode. Define your use case before installing.
The Lobster Way NEW JUNE
The community's informal ethos
Doing things deliberately, with craft and patience. "New shell, ready to help." Often used approvingly in Discord when someone takes a careful, methodical approach instead of rushing.
Shows up constantly when someone takes time to do something right.
Molting
Major version updates
When OpenClaw releases a major version update, the community calls it "molting" — after the lobster's process of shedding its shell to grow a new, larger one. Every major release "molts."
Official OpenClaw lore. You'll see it on every release announcement.
The Moltiverse
The entire OpenClaw community and ecosystem
The community's official name for the entire OpenClaw ecosystem — all the bots, developers, Discord members, and builders together.
Used in community announcements and official communications.
Shrimp Farming
Running an OpenClaw agent for automated 24/7 work
The general community term for using any Claw platform to run automated agents — "farming" tasks around the clock without manual input.
The most common term for the basic use case. If someone says "I'm farming," this is what they mean.
Shrimp Feed
Selling skill packages and configuration bundles
A revenue model where you package pre-configured skills, soul documents, and workflows and sell them to other Claw users. Community pricing benchmark: $725+ per package, with recurring revenue potential.
A proven revenue path for technical users in the ecosystem.
Shrimp Ponds
Building full SMB automation services with retainers
The highest-value business model in the ecosystem: building and managing complete AI agent setups for small businesses on a monthly retainer. You are the "pond keeper" for their agents.
The highest-revenue agency business model in the ecosystem.
Shrimp Seedlings
Selling deployment-as-a-service to non-technical users
A business model where you set up Claw bots for non-technical buyers who want the capability but can't do the setup themselves. Community pricing benchmark: $14–$72 per setup, a proven revenue model.
The entry-level service revenue model. Low barrier, scalable.
Worry-Free Farming NEW JUNE
Using a managed Tier 2 option instead of running your own server
Choosing a managed Tier 2 service (like MaxClaw or Kimi Claw) instead of self-hosting. Someone else handles the infrastructure, security updates, and uptime. You just use the agent.
Community shorthand for the Tier 2 decision. "I went worry-free" = moved from self-hosted to managed.
No terms match your search. Try a different word — or email us if something's missing.
June 2026 Edition
Go deeper with the full Field Guide
This glossary is extracted from the June 2026 Field Guide — which also covers 18 bots and tools in full, cost breakdowns, the compatibility matrix, security cheat sheet, and your first-week action plan.
Get the Field Guide — $2730-day clarity guarantee · Instant PDF download