Back to Gems of AI

Kimi Claw: Native OpenClaw arrives on Kimi.com

Moonshot AI launches Kimi Claw directly on Kimi.com with 40GB storage and 5000+ skills. Is it the ultimate cloud agent or a security nightmare?

If you’ve been lurking in the AI agent scene lately, you’ve probably seen the OpenClaw craze. It started as a hacker’s toy—running locally, breaking often, but promising a future where your AI actually does things instead of just talking about them.

Well, Moonshot AI just took that concept mainstream. They’ve launched Kimi Claw natively on Kimi.com, and it’s basically OpenClaw with the friction removed (and a price tag added).

I’ve been poking around the details, and honestly, I’m torn. On one hand, it’s the "Jarvis" experience we’ve all been asking for. On the other, it involves handing the keys to your digital life over to a cloud agent. Let’s break down what’s actually happening here.

The Cloud-Native Shift

Until now, running OpenClaw meant setting up your own environment, managing Docker containers, or fiddling with local models if you wanted privacy. Kimi Claw moves all of that to the browser.

The headline features are exactly what you’d expect from a managed service trying to court power users:

  • ClawHub Access: You get instant access to over 5,000 community skills. This is the killer feature. Instead of teaching your agent how to use Notion or scrape a website, you just plug in an existing skill.
  • 40GB Cloud Storage: This isn't just for saving chat logs. It’s for persistent context. You can dump technical documentation, code repos, or massive datasets into the agent’s "brain," and it remembers them. No more "I forgot what we talked about 5 minutes ago."
  • Pro-Grade Search: They’ve integrated real-time data fetching (like Yahoo Finance). This helps ground the agent in reality, reducing those confident hallucinations we all love to hate.

It’s About the Workflow, Not the Chat

The most interesting thing about Kimi Claw isn't the model itself (though Kimi 2.5 is solid); it’s how it fits into your day.

Reading through the community reactions, one user described it perfectly: it’s not about having a conversation; it’s about delegation.

"I treat it as an assistant... I give it my course content and it makes flashcards... It schedules my tasks throughout the day."

This is where the "Soul.md" feature comes in. You can customize the personality and behavior of your agent via a markdown file. It sounds gimmicky, but having an agent that knows you prefer terse summaries over polite conversational fluff makes a difference when you’re using it 50 times a day.

Plus, the integrations with Telegram and WhatsApp mean you don't have to keep a browser tab open. You can text your agent to "add this receipt to my expense sheet," and it just happens in the background. That’s the dream, right?

The Security Elephant in the Room

Here is where I get hesitant.

When you run OpenClaw locally, you control the blast radius. If it goes rogue, it’s messing up your local files. Moving this to the cloud, specifically a hosted environment where you might be pasting API keys or connecting your email, requires a massive leap of faith.

The hacker community is already pointing out the risks. One comment on Hacker News put it bluntly:

"I really don’t understand the widespread adoption... when a simple prompt injection... has the potential to leak the credentials/keys for every attached service."

They aren't wrong. We are effectively giving an LLM—which can be tricked by a cleverly worded email—access to our calendars, emails, and cloud storage. Moonshot has introduced a BYOC (Bring Your Own Claw) feature, which allows you to connect a local setup to their cloud interface. That might be the sweet spot for the paranoid (like me) who want the nice UI but want to keep the execution logic on their own metal.

Is It Worth the Price?

There’s some confusion around the pricing, with mentions of a $40/month tier to really get the most out of it. That’s steep compared to a $20 ChatGPT subscription, but you’re paying for the compute and state, not just the tokens.

If you’re just using it to write poems, it’s a waste of money. But if you’re using it to monitor competitor websites, automate data entry, or manage a complex calendar, that $40 is cheaper than a human virtual assistant.

My Take

Kimi Claw feels like a glimpse of 2027. We’re moving away from "chatting with a bot" to "managing a fleet of agents."

It’s polished, powerful, and terrifyingly capable. If you’re comfortable with the security trade-offs, it’s probably the most powerful productivity tool you can buy right now. If you’re security-conscious, maybe stick to the local version for now—but keep an eye on this space. The browser tab is becoming an operating system, and Kimi Claw is making a strong play for the kernel.