Dev & Engineering self-hosted-workspaceweb-uidockerbunmcpvncbrowser-automationsqlite

PiClaw

A self-hosted, persistent Pi Coding Agent workspace with a streaming web interface and built-in developer tools.

FollowAgents review · FARS-2.1
Not recommended
48/ 100 5-point scale 2.4 / 5
1 2 3 4 5 6
Per-dimension scores and reasoning
1Trust10 / 29 · 1.7/5

Evidence shows permission controls (e.g., external route registration restrictions, data directory escape checks) and user confirmation mechanisms (e.g., m365 extension dry-run/confirm parameters), but not comprehensively across all tools. Data flow transparency: documentation exists for storage and key management, but not all data flows detailed. Sensitive data handling: key management and RAM-only caches present, but not fully assessed. Dependency security: exact versions and overrides used, but no vulnerability scan evidence. External effects: external routes and browser automation present, but not explicitly limited. Rollback: not mentioned. Source attribution: copyright and license present, but publisher not verified.

2Reliability9 / 14 · 3.2/5

Self-consistency: code and tests show consistent architecture and naming. Dependency availability: dependencies pinned, but availability not verified. Failure messages: tests show error handling, but not fully assessed.

3Adaptability10 / 18 · 2.8/5

Audience and scenarios: README clearly defines target users and use cases. Capability boundaries: tools and extensions documented, but not all boundaries explicit. Trigger precision: commands and tools defined, but trigger conditions not detailed. Environment fit: multiple installation methods and platforms supported, but Windows support limited.

4Convention9 / 18 · 2.5/5

Information architecture: documentation structure clear, multiple docs. Install notes: Docker and source install guides provided. Naming stability: version number clear, but no changelog. Examples and FAQ: examples present but no FAQ. Known limitations: partially mentioned (e.g., Windows support limited). License: MIT. Versioning and changelog: version number but no detailed changelog. Maintenance responsibility: GitHub Issues present, but maintainer not explicit.

5Effectiveness7 / 13 · 2.7/5

Output usability: Web UI feature-rich, multiple output formats. Marginal value: integrated workspace with unique features. Cost-benefit: self-hosted, but no performance or resource data.

6Verifiability3 / 8 · 1.9/5

Claim traceability: README features supported by docs, but no test results. Cross-source corroboration: multiple docs and tests, but not independently verified. Fact-inference separation: docs distinguish experimental and stable features, but not all inferences labeled.

Evidence confidence: Low Reviewed Aug 09, 2026 Reviewed revision a0a341a744f0
The upstream repository has new commits since this review. The score still applies to the reviewed revision shown and may not cover the latest changes.
Safety controls not found in source: rollback or recovery path
Before you use it
  • Publisher identity unverified; assess supply chain risk carefully.
  • Dependencies pinned but no vulnerability scan evidence; run security audit.
  • Some tools (e.g., browser automation, external routes) may pose security risks; ensure least privilege configuration.
  • Windows support limited; may affect cross-platform deployment.
Review evidence [1][2][3][4][5][6][7][8]
See the full review method →

What does this agent do, and when should you use it?

PiClaw packages Pi Coding Agent as a single-user, self-hosted AI workspace with a streaming web UI. Its interface combines chat, code editing, a terminal, file browsing, uploads, and several viewers, with updates delivered over SSE. SQLite persists messages, media, tasks, run logs, token usage, encrypted keychain entries, and session-scoped SSH profiles. It can run in Docker or be installed globally with Bun, and it also offers an experimental Electrobun desktop wrapper. The product operates as a Pi runtime and tool-enabled local or containerized workspace, with optional add-ons extending both runtime and web UI.

A user drives Pi Coding Agent through the web chat while editing code, using the embedded xterm.js terminal, uploading files, and browsing the workspace in the same application. Built-in panes view CSV/TSV, PDF, images, video, code previews, and VNC targets; automation includes image_process, cdp_browser, and mcp. PiClaw stores messages, media, tasks, token usage, and run records in /workspace/.piclaw/store/messages.db, while Pi state is persisted under /config/.pi. Tool loading is staged: a small always-active set exposes further capabilities through list_tools and list_scripts. Chat workflows include steering, queued follow-ups, side prompts, and scheduled tasks.

  1. A solo developer who wants a browser-based coding assistant, editor, and terminal on a self-hosted machine or server.
  2. A developer using Docker who needs Pi login state, model metadata, and project files to survive container recreation.
  3. An engineer who needs a coding session to inspect CSV files, PDFs, images, videos, or a VNC desktop from the same workspace.
  4. A single-user workflow that needs scheduled tasks, follow-up instructions, chat branches, and retained run logs in one interface.
  5. A self-hosting user who needs a custom OpenAI-compatible endpoint or a local llama.cpp router preset.

What are this agent's strengths and limitations?

Pros
  • Combines Pi Coding Agent, chat, a CodeMirror 6 editor, an xterm.js terminal, and file viewers in one self-hosted interface.
  • SQLite persistence covers chats, tasks, media, token usage, run logs, encrypted keychain entries, and session-scoped SSH profiles.
  • Includes image_process, cdp_browser, mcp, VNC, and viewers for CSV/TSV, PDF, images, and video.
  • Supports custom OpenAI-compatible endpoints and local llama.cpp router presets, with add-ons for runtime and UI extensions.
Limitations
  • Use depends on Pi Agent provider login and model configuration; the supplied material does not document an included model or free inference service.
  • Windows support is explicitly experimental, and PICLAW_WEB_TERMINAL_ENABLED defaults to off on Windows.
  • messages.db is the source of truth for chats, tasks, token records, keychain entries, and sessions, so deleting it loses that persisted data.
  • Some capabilities require optional add-ons, including the Ghostty terminal, Draw.io, Office rendering, Windows desktop automation, Proxmox, and Portainer.

How do you install or deploy this agent?

Create persistent directories, then run:

mkdir -p ./home ./workspace
docker run -d \
--init \
--name piclaw \
--restart unless-stopped \
-p 8080:8080 \
-e PICLAW_WEB_PORT=8080 \
-v "$(pwd)/home:/config" \
-v "$(pwd)/workspace:/workspace" \
ghcr.io/rcarmo/piclaw:latest

An experimental alternative is bun add -g github:rcarmo/piclaw. The container route requires Docker; the global-install route requires Bun.

How do you use this agent?

Open http://localhost:8080, type /login in chat, and configure provider credentials in Pi Agent settings; provider API keys do not need to be set as PiClaw environment variables. Then send coding tasks in chat, browse projects and uploads in Workspace, or open the Terminal, CSV/TSV, PDF, image, video, and VNC panes. Deployment behavior can be configured with environment variables including PICLAW_WEB_PORT, PICLAW_WEB_TERMINAL_ENABLED, PICLAW_WEB_TOTP_SECRET, PICLAW_WEB_PASSKEY_MODE, PICLAW_KEYCHAIN_KEY, and PICLAW_TRUST_PROXY.

How does this agent compare with similar options?

PiClaw is a derivative built on the Pi Coding Agent core, adding its own runtime, tooling, and web UI layers; the repository states that it is not directly affiliated with pi.dev.

FAQ

Must provider API keys be placed in container environment variables?
No. PiClaw reuses credentials configured in Pi Agent settings; /login is the documented first configuration step.
Can sessions and login state survive container recreation?
Yes, when /config and /workspace are persistently mounted. In the Docker example, Pi state is under ./home/.pi/agent/ and workspace data includes /workspace/.piclaw/store/messages.db.
Which model providers can it use?
The material documents multi-provider support, custom OpenAI-compatible endpoints, and local llama.cpp router presets, but does not provide a complete provider list.
What security controls are documented for deployment?
The web UI can use TOTP or passkey login, PICLAW_KEYCHAIN_KEY configures the encrypted-secret master key, and PICLAW_TRUST_PROXY is available for reverse-proxy or tunnel deployments.

Compare agents like this one

The same FARS review applied across the shortlist this agent qualifies for.

Related agents