Open-source multi-tenant gateway for deploying and embedding autonomous AI agents powered by OpenClaw runtime, with sandboxing, network isolation, and multi-platform access.
Lobu is an open-source multi-tenant AI Agent gateway built for production environments, powered by the OpenClaw runtime. Its core architecture adopts a Gateway-Worker separation design: the Gateway acts as the sole network egress proxying all traffic, while Workers execute Agent tasks in isolated sandboxes. Each tenant gets an independent virtual filesystem (~50MB/instance), supporting 300+ concurrent instances on a single machine without Docker.
On the security front, Workers have no direct network egress — all internet access and MCP calls are proxied through the Gateway with domain whitelist filtering. K8s environments can further leverage gVisor/Kata/Firecracker hardening. API keys and OAuth tokens reside exclusively on the Gateway side; Workers never touch them. On the capability front, Agents have a full Linux toolbox (bash, file operations, grep/find, etc.), support for 16 LLM providers (OpenAI, Gemini, Groq, DeepSeek, Mistral, etc.), built-in cron scheduling, human-in-the-loop (HITL) workflows, and dual-layer persistent memory (filesystem + database).
Lobu supports multi-platform messaging channels including Slack, Telegram, WhatsApp, Discord, and Microsoft Teams, plus a REST API for third-party product embedding. Deployment options range from CLI scaffolding for quick starts, Docker Compose for single-node production, to Kubernetes Helm Charts for production-grade orchestration. Skills are extensible via lobu.toml or the management UI, Agent personas are defined through IDENTITY.md/SOUL.md/USER.md, and built-in OpenTelemetry observability is included.
Quick Start
npx @lobu/cli@latest init my-bot
cd my-bot && npx @lobu/cli@latest run -d
Architecture Highlights
- Monorepo structure:
packages/core(core logic),packages/gateway(gateway),packages/worker(worker),packages/cli(CLI tool),packages/owletto-*(memory SDK/embeddings/CLI) - Primary language TypeScript (91.4%), supplemented by PLpgSQL (4.5%), MDX, Astro, Shell, Python
- Runtime: Bun, Node.js compatible; Database: PostgreSQL
- Build order:
bun run build→ core → gateway → worker - Toolchain: Biome (formatting/lint), Knip (unused code detection), dependency-cruiser (dependency analysis), Husky (Git hooks)
- CI/CD: GitHub Actions + release-please automated releases
Unconfirmed Information
- Google Chat support: listed on website but not in README, implementation completeness unconfirmed
- Memory benchmark methodology details pending official documentation review
- Owletto's positioning as an independent project and its open-source status unconfirmed
- CLI package name inconsistency between init (
@lobu-cli) and skills/run commands (@lobu/cli)