Enterprise-ready self-hosted AI assistant runtime with sandboxed execution, secure credentials, approvals, and memory.
$ npx -y skills add HybridAIOne/hybridclaw --agent claude-code
HybridClaw's main promise is practical business work. The bundled CRM,
marketing, analytics, finance, cloud, office, and operations skills are
implemented as tested helpers with eval scenarios, credential boundaries, and
approval tiers, and are validated against Qwen/Qwen3.6-27B-FP8 as the
small-model baseline.
That is the useful difference: a compact model can operate Salesforce, HubSpot, GA4, Google Ads, Lexware, Airtable, Miro, Zoho, Microsoft 365, warehouse SQL, invoices, cloud ops, and office documents through structured rails instead of fragile free-form prompting.
HybridClaw also treats agents as networked coworkers. Local agents, hosted HybridAI proxy agents, and trusted peer HybridClaw instances can address one another, exchange end-to-end encrypted A2A envelopes, and route work through approval-aware channels. An A2A local mode keeps peer delivery and authenticated administration reachable while disabling other external gateway and channel surfaces.
First-run onboarding is built around hatching: a new agent asks about the user's work, records useful context, keeps setup links visible in chat, and can send a tailored first-jobs welcome email when an email route is available. The bootstrap lifecycle is recorded as structured onboarding audit events, including messages, welcome mail, workspace file updates, completion, and abort paths.
Credentials stay outside the model context. Secrets live in the encrypted runtime store and SecretRef-backed tools resolve them at execution time, so LLMs see the requested action and approval context, not raw API keys, passwords, or bearer tokens.
Run one local assistant, operate a fleet of role-specific coworkers, or launch HybridClaw on HybridAI Cloud in a few minutes at hybridclaw.io.
Quick Start · Launch Cloud · Installation · Docs · Configuration · Commands · Contributing
| You need | HybridClaw gives you |
|---|---|
| A first run that becomes useful quickly | Guided hatching with setup links, tailored first-job suggestions, optional onboarding-specific model routing, welcome-email handoff, and structured audit events |
| Business workflows that survive real use | Production skill helpers with fixtures, eval scenarios, targeted tests, approval tiers, and a Qwen/Qwen3.6-27B-FP8 validation baseline |
| Local inference on your Mac | Memory-aware MLX model setup, start/stop controls, live activity, and local model selection on supported Apple silicon Macs |
| Generated work artifacts you can reuse | An Apps gallery for self-contained HTML apps, dashboards, documents, games, tools, live connector-backed views, sharing links, and Teams tabs |
| Multi-agent workflows across installations | Local agents, hosted proxy agents, encrypted A2A trust, explicit addressing, inbound envelopes, reply-back delivery, admin-visible peer pairing, and an A2A-only deployment mode |
| Credentials the model cannot read | Encrypted runtime secrets, SecretRef-backed execution paths, and scoped gateway API tokens that keep raw keys and passwords out of prompts and tool results |
| Assistants that can act, not just chat | A gateway, web chat, Apps gallery, TUI, admin console, scheduler, tools, and OpenAI-compatible API behind one local service |
| Control over sensitive work | Approval policy, sandbox boundaries, output guardrails, and hash-chained audit trails |
| Agents that fit existing teams | Discord, Slack, Teams, Telegram, email, voice, web, and more through the same runtime, with WhatsApp available as an install-on-demand plugin |
| Operational memory | Local files, SQLite state, semantic recall, session compaction, and optional HybridAI cloud memory |
| Repeatable expert workflows | Per-agent workspaces, budgets, deterministic model-tier routing, A2A trust, proxy agents, .claw archives, and human-distillation workflows |
Fastest managed launch: HybridClaw on HybridAI Cloud.
Apple Desktop App for macOS:
HybridClaw.app into /Applications, and launch it.Linux/macOS CLI one-line installer:
curl -fsSL https://raw.githubusercontent.com/HybridAIOne/hybridclaw/main/scripts/install.sh | bash
Manual npm install:
npm install -g @hybridaione/hybridclaw
hybridclaw onboarding
hybridclaw gateway
hybridclaw tui
Requirements: Node.js >=22.23.4 <23. Docker is recommended for the default sandbox.
After the gateway starts, open:
| Surface | URL / command | Use it for |
|---|---|---|
| Web Chat | http://127.0.0.1:9090/chat | Chat, ideas, outputs, notifications, model and agent switching |
| Apps Gallery | http://127.0.0.1:9090/apps | Generated web apps, documents, games, tools, live connector-backed views, and sharing |
| Admin Console | http://127.0.0.1:9090/admin | Searchable settings plus agents, automation, activity, connectivity, security, and federation workflows |
| Agents UI | http://127.0.0.1:9090/agents | Agent fleet overview and prompt-file editing |
| TUI | hybridclaw tui | Terminal chat, approvals, status, resume |
| OpenAI-compatible API | http://127.0.0.1:9090/v1/chat/completions | Local evals and compatible clients |
For signed macOS desktop builds and future architectures, use the GitHub Releases page.
Desktop wrapper from source:
npm install
npm run desktop
| Area | Built in |
|---|---|
| Skills | 79 bundled skills, production business helpers, eval fixtures, packaged skill lifecycle, and human-distillation workflows |
| Channels | Discord, Slack, Signal, LINE self-chat, Telegram, Microsoft Teams, email, iMessage, fax, web, incoming webhooks, and install-on-demand WhatsApp, Twilio voice, and Vonage voice plugins |
| Runtime | Gateway service, TUI client, web chat with Ideas, Outputs and notifications, Apps gallery, searchable admin console, loopback OpenAI-compatible API, and Docker or host execution with document and spreadsheet tooling |
| Local models | Managed MLX setup on Apple silicon with macOS 15+, memory-aware model recommendations, live activity, configurable starter tools and skills, and optional local Laya routing |
| Governance | Encrypted runtime secrets, scoped API tokens and device pairing, SecretRef credential isolation, per-session approval modes, sandbox controls, hash-chained audit trails, dependency license gates, SBOMs, and third-party notices |
| Memory | Local memory files, SQLite persistence, semantic recall, persistent tool exchanges, session compaction, optional HybridAI cloud memory sync |
| Agents | Guided hatching, per-agent workspaces, models, budgets, prompt files, deterministic tier routing, explicit addressing, proxy agents, encrypted A2A trust, peer-instance communication, and reply delivery status |
| Extensibility | Packaged business skills, install-on-demand channel plugins, MCP servers, Published Tools endpoints for external MCP hosts, admin connector flows, and SecretRef-backed HTTP tools |
/admin groups Activity, Agents, Automation,
Connectivity, Models, Security, System, and Labs workflows. Page and setting
search opens with Cmd/Ctrl+K, settings link to one canonical owner, and
legacy admin URLs redirect to their corresponding tab.hybridclaw is a Claude Code plugin with 89 hand-picked skills, indexed on Flowy in the AI & Agents category. Install it with the command on its page. It includes 1password, agentic-tpm, airtable. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it