Lobu — Multi-tenant OpenClaw for Organizations

Lobu is an open-source multi-tenant gateway for OpenClaw. One sandbox and filesystem per user/channel. Shared memory across contexts. Agents never see secrets.

OpenClaw is a full agent runtime (~800k LOC) but it's single-tenant by design — every user shares the same filesystem and bash session. Lobu rewrites only the gateway layer (~40k LOC) to be multi-tenant and keeps OpenClaw's Pi harness untouched inside each worker.

Embedded mode uses just-bash + Nix for reproducible packages. Each user gets an isolated virtual filesystem and bash session at ~50MB per instance — tested at 300 concurrent instances on a single machine, no Docker needed.

Embed OpenClaw-powered agents into your product, or give your team agents without managing a separate instance per person.

• REST API — programmatic agent creation, control, and state.
• Slack — multi-channel/DM agents with rich interactivity.
• Telegram — long-polling bot with interactive workflows.
• WhatsApp — WhatsApp Business Cloud API.
• Discord — channel + DM bot support.
• Teams — Microsoft Teams bot.

Scaffold and run via the CLI:

npx @lobu/cli@latest init my-bot
cd my-bot && npx @lobu/cli@latest run -d

Install the Lobu starter skill into any local skills/ directory:

npx @lobu/cli@latest skills add lobu

Install the Owletto starter skill separately when the agent should understand Owletto memory and tooling:

npx owletto@latest skills add owletto
npx owletto@latest init

• Docker Compose — docker compose up (single-machine production).
• Kubernetes — OCI Helm chart, no clone needed:

  helm install lobu oci://ghcr.io/lobu-ai/charts/lobu \
    --namespace lobu --create-namespace

• Local dev (contributing to Lobu itself): clone, make setup, make dev (Docker Compose Watch + hot reload).

flowchart LR
  Slack[Slack] <--> GW[Gateway]
  Telegram[Telegram] <--> GW
  WhatsApp[WhatsApp] <--> GW
  Discord[Discord] <--> GW
  API[REST API] <--> GW

  GW <--> Redis[(Redis)]
  GW -->|spawn| W[Worker]

  subgraph Sandbox
    W
  end

  W -.->|HTTP proxy| GW
  W -.->|MCP proxy| GW
  GW -->|domain filter| Internet((Internet))
  GW -->|scoped tokens| MCP[MCP Servers]

Every Lobu agent ships with tools for autonomous execution and persistence:

• Productivity: Google Calendar, Slack, Jira, Notion
• Development: GitHub, GitLab, Postgres, Docker
• Knowledge: Wikipedia, Brave Search, YouTube, PDF Search

• Gateway as single egress. All worker traffic — internet and MCP — routes through the gateway. Workers have no direct network access; domain filtering controls which services they reach.
• MCP proxy. Gateway resolves ${env:VAR} secrets and routes to upstream MCP servers. OAuth for third-party APIs stays in Owletto — workers never see tokens.
• Multi-platform, multi-tenant. One instance serves Slack, Telegram, WhatsApp, Discord, Teams, and the REST API. Each channel/DM gets its own runtime, model, tools, credentials, and Nix packages.
• OpenClaw runtime. Workers run OpenClaw Pi Agent with per-agent model selection. Supports OpenClaw skills and IDENTITY.md / SOUL.md / USER.md workspace files.
• Multi-provider auth. 16 LLM providers (OpenAI, Gemini, Groq, DeepSeek, Mistral, …) via a config-driven registry. API keys stay on the gateway.

Lobu is the infrastructure layer for autonomous agents. Frameworks like LangChain or CrewAI help you write agent logic; Lobu is the delivery layer that runs those agents at scale — sandboxing, persistence, and messaging connectivity.

• No direct worker egress — all traffic routes through the gateway proxy.
• Secrets stay in gateway — provider credentials and ${env:} substitution; OAuth lives in Owletto.
• Defense in depth on K8s — NetworkPolicies, RBAC, optional gVisor / Kata.
• Nix system packages — per-agent reproducible tooling and skill policy.

Lobu is open source, but deploying production-grade agents usually means tuning soul, identity, and integrations. I offer hands-on implementation for:

• Employee AI assistants — persistent sandboxed agents on Slack wired into internal tools and docs.
• Automated customer support — multi-step ticket handling with human-in-the-loop.
• Autonomous workflows — long-running, scheduled background jobs with persistent state.
• Managed infrastructure — private Lobu deployments on your Kubernetes cluster with updates and scaling.
• Custom tooling & skills — bespoke MCP servers, Nix runtimes, and OpenClaw skills.

I'm a second-time technical founder. Previously founded rakam.io (enterprise analytics PaaS), acquired by LiveRamp (NYSE: RAMP).