🛡️

OpenLegion

Security-first AI agent framework for production multi-agent systems

Python active 79 multi-agentsecurityself-hostedenterprisebrowser

About

Production-grade multi-agent platform built on the assumption that agents can be compromised. Every agent runs in its own Docker container with blast-radius containment through isolation, credential separation, permissions, and cost controls. Credentials live in a vault/proxy layer so agents never directly access raw keys. Includes a built-in stealth browser for human-like web interaction without fragile external browser setups. Designed for teams deploying agents in production, especially in security-sensitive or enterprise environments.

At a Glance

Runs On

Server / VPS / DockerMessaging (Telegram / Discord)

LLM Required

Yes — needs API key

MCP Support

Yes

Ecosystem Role

Alternative

Security-first agent fleet — blast-radius containment per agent, vault-proxied credentials agents never see, built-in stealth browser, per-agent budget caps

Editorial Take

OpenLegion sits in the OpenClaw family as a alternative rather than a generic AI agent tool. It is written in Python and currently shows 79 GitHub stars, which gives a quick sense of where it fits between experimentation and mainstream adoption.

OpenLegion is best understood as a response to the tradeoffs in OpenClaw itself. Compared with the flagship project, its community is roughly 4296x smaller, but that smaller scope often exists because the project is optimizing for a sharper use case: security-sensitive deployments.

Operationally, this project targets security-sensitive deployments. MCP support improves interoperability with modern tool ecosystems. Its deployment surface spans Server / VPS / Docker, Messaging (Telegram / Discord).

Best For

Security-sensitive deployments

+ MCP support makes it easier to integrate external tools and data sources without custom glue code.
+ Its category focus on multi-agent and security makes the product direction easier to understand than generic agent frameworks.

Tradeoffs

What to understand before choosing OpenLegion over another project in the ecosystem.

- The smaller community means fewer battle-tested examples, integrations, and third-party writeups.
- It still depends on an external LLM provider, so token spend and vendor reliability remain part of the operating model.
- Its specialization around multi-agent can be a limitation if you need a broader, more general-purpose assistant runtime.

GitHub Stats

#46 of 54 on the leaderboard →

Stars

★ 79

+6 this week

Forks

Open Issues

Last Commit

0d ago

License: NOASSERTION

OpenClaw Relationship

OpenLegion is an OpenClaw-inspired project — part of the growing ecosystem of personal AI agent frameworks that trace their lineage to Peter Steinberger's original self-hosted assistant.

openlegion-ai/openlegion

Added to Shelldex on March 7, 2026

See all OpenLegion alternatives