Rating certificate · AW/26-09/43926 Sept 2026
58of 100
Paperclip
Paperclip (paperclipai) · Orchestrators & meta-harnesses
No. 6 of 7 in categoryhigh confidenceTrust BOpen source
The Register / Orchestrators & meta-harnesses / Paperclip
Register entry · Orchestrators & meta-harnesses · updated 26 Sept 2026
Paperclip
Paperclip is an MIT-licensed Node.js server with a React UI that coordinates a team of AI agents as a 'company': agents get roles and reporting lines, pick up ticket-style tasks on scheduled heartbeats, and run under per-agent budgets with board-level approval gates. It does not run models itself; it invokes existing runtimes through adapters (Claude Code, Codex, Cursor, Gemini CLI, bash, HTTP/webhook bots such as OpenClaw). It is self-hosted and free, with local-trusted and authenticated deployment modes.
What reviewers and users praise
- Structured hierarchy, handoffs and task tracking for many agents (Villela, Reddit users)
- Useful for bootstrapping larger projects and drafts quickly (Ganglani, Villela)
- Free, MIT-licensed and self-hosted
What they criticise
- Heavy token consumption; users report subscription windows exhausted quickly (Reddit, Better Stack video)
- Marketing of 'zero-human companies' overstates what it can do (Ganglani, r/AI_Agents)
- Setup and adapter bugs; runaway retries hard to stop (r/PaperclipAI, HN)
- Repeated critical security advisories in 2026, and adapters skip agent permission prompts by default
Experts vs the crowdcrowd cooler by 9
Experts56
Crowd46
| Price | Free |
|---|---|
| Use it via | Web app, CLI, API |
| Runs on | macos, linux, windows, web |
| Licence | MIT |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Orchestrators & meta-harnesses: adoption 40%, experts 30%, crowd 30%. Pillars without enough evidence are left out and the others re-weighted. The method.
| Adoption & momentumweight 40% | 69 | GitHub stars 85k → 89 · npm weekly downloads 27k → 39 · 10 releases in 90 days → 80reach × 0.7 + momentum × 0.3 |
|---|---|---|
| Expertsindependent reviews · weight 30% | 56 | 6 independent reviews (1 positive · 5 mixed · 0 negative), averaged toward 50 for small samples. |
| Crowdcommunity sample · weight 30% | 46 | 21 dated posts from reddit, hackernews, x, github: 7 positive · 5 mixed · 9 negative (positive + ½ mixed) ÷ n, averaged toward 50 for small samples |
| Rating | 58 | high confidence (3 of 3 pillars, 21 community posts). |
Evidence checks. 2 reviews from tool directories, AI-written pages or unnamed authors not counted. 2 items could not be checked at the source (the page could not be fetched, or the quote is from a comment under the linked post); kept and marked “unverified”. How evidence is checked.
Editorial adjustment. Incident-history re-grade under methodology revision 2 (see the trust section).
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: B.
C
Permission model
Board-level approval gates exist for hires, strategy and spend, but the claude_local adapter's dangerouslySkipPermissions 'Defaults to true because Paperclip runs Claude in headless --print mode'; codex_local example config sets dangerouslyBypassApprovalsAndSandbox true. Sandboxed execution targets are optional. source
B
Data access scope
Company-scoped entities, scoped secrets and per-agent permissions are documented; agents run with broad host access in local mode. source
A
Data storage
Self-hosted server; README: 'Open source. Self-hosted.' No required vendor cloud. source
n/e
Data retention & training
Data stays on the user's instance; model-side retention depends on the connected provider. No Paperclip policy found. source
C
Incident history (24 months)
12 published GitHub security advisories: 11 published 2026-04-10/16 (6 critical incl. unauthenticated RCE CVE-2026-41679, cross-tenant key IDOR, OS command injection; most patched in 2026.416.0) and a critical DNS-rebinding drive-by RCE against default local_trusted instances published 2026-07-22 (affects <0.3.1). Repeated serious issues. Regraded from D: Revision 2: serious issues that were each fixed and publicly disclosed grade C; D is kept for unresolved issues or slow or undisclosed fixes. source
D
Compliance
No attestations published; self-hosted open-source project. source
A
Transparency
MIT licence; detailed GitHub release notes; public docs site. source
The experts
6 named independent reviews found; dated reviews from the last 12 months are scored.
- mixed
If you treat Paperclip AI as an idea accelerator with a fun UI, it delivers something. If you treat it as an autonomous company builder
Kunal Ganglani · 19 Apr 2026 · kunalganglani.com - mixed
I think that using Paperclip to orchestrate my BMAD-enabled agents can be very handy for larger projects. It might, however, be overkill for smaller projects.
Adriana Villela (Geeking Out Podcast) · 29 Jun 2026 · geekingoutpodcast.substack.com - mixed
Downsides include token burn risk, overkill for simple tasks, and sensitivity to poorly written skill/rules definitions.
Better Stack (YouTube, Josh Wenner) · 13 May 2026 · youtube.com - positive
Paperclip’s core insight is that the hard problem isn’t making agents smarter.
Tom Nervegna (Sorted Pixels newsletter) · 20 Mar 2026 · nervegna.substack.com - mixed
The concept shows promise. The project has real potential. If you’re curious about AI agent orchestration and want something with a polished UI, give it a spin.
Andrea (OpenSource is Better) · 8 Apr 2026 · unverified · opensourceisbetter.com - mixed
Excellent vision and dashboard, held back by current bugginess and a real learning curve.
Zane (vibecoding.app) · 17 Apr 2026 · vibecoding.app
The crowd
21 coded posts from reddit, hackernews, x, github.
7 positive5 mixed9 negative
- negative
It was a token hog for me, burning through my 5-hour Codex window in 40 minutes.
r/openclaw (comment) · 29 Mar 2026 · reddit.com - negative
Paperclip cannot be successful without unlimited llm tokens
r/openclaw (comment) · 29 Mar 2026 · reddit.com - positive
Paperclip, which is a task management platform built specifically for AI agents (Not mine but cool as hell).
r/ClaudeCode · 31 Mar 2026 · reddit.com - mixed
Take Paperclip, cool project, but it literally markets itself as "orchestration for zero-human companies." That's not what we want.
r/AI_Agents · 29 Mar 2026 · reddit.com - positive
Paperclip AI built my product, set up WordPress and WooCommerce, wrote the docs, published blog content, built backlinks
r/PaperclipAI · 1 Apr 2026 · reddit.com - negative
I have endless trees of ceos running into issues connecting and then frantically trying 1000 reconnects in tree branches. That is not useful design pattern!
r/PaperclipAI · 4 May 2026 · reddit.com - negative
Ran into a nasty validation bug with Paperclip's gemini_local adapter (GitHub Issue #8448)
r/PaperclipAI · 21 Jun 2026 · reddit.com - mixed
It's glitchy, it's early, and it's probably the most important thing
r/PaperclipAI · 13 Mar 2026 · search snippet · unverified · reddit.com
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| Open source, self-hosted | Free | No hosted plan or pricing page found (paperclip.ing/pricing returns 404). Model/agent costs are the user's. |
Recent changes
- 21 Sept 2026
v2026.916.1 patch fixing message sending in task conversation view. source
- 16 Sept 2026
v2026.916.0 (503 commits): 'Connections' - Claude/Codex subscriptions, API keys and shared accounts managed as Connections. source
- 2 Sept 2026
v2026.831.0/.1 release with onboarding fix. source
- 22 Jul 2026
Critical DNS-rebinding RCE advisory published for local_trusted mode. source
Ranked alongside
Other ranked entries in Orchestrators & meta-harnesses.
OrcaStably AI78
SupersetSuperset Inc.70
HerdrHerdr (Can Celik; YC F26)68
T3 CodePing Labs (ping.gg / T3 Tools)67
Vibe KanbanBloop (company shut down April 2026; now community maintained)60
Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.