Overview
Moltworker is Cloudflare's proof of concept for running OpenClaw in a Cloudflare Sandbox container behind a Worker; its README warns that it is experimental, not officially supported and may break without notice. It needs the Workers Paid plan ($5 a month) plus container time: the README estimates about $34.50 a month for a standard-1 container running around the clock, less if it sleeps when idle. The admin UI sits behind Cloudflare Access, a gateway token is required and every new device must be paired. Without R2 storage, paired devices and conversations are lost whenever the container restarts. Until October 2026 this page called it free at low volume, with state in Durable Objects and no native binaries; its README describes a paid container running OpenClaw, with browser navigation through Cloudflare Browser Rendering.
Our take
Editorial opinion, not a test result.
Best for
- Cloudflare users who want OpenClaw without running a server of their own
- Trying OpenClaw in a container that is not on your machine
Not for
- Production use: its README calls it an experimental proof of concept
- Free hosting: it needs the Workers Paid plan plus container time
- Keeping state without R2: data is lost when the container restarts
Security posture
| Sandbox by default | yes |
| Auth on dashboard | yes |
| Threat model documented | yes |
| Multi-LLM support | yes |
| CVEs on NVD (total) | 0 |
| CVEs in the last 30 days | 0 |
On by default: OpenClaw and its tools run inside a Cloudflare Sandbox container, not on a machine of yours. Paired devices and conversations are lost when the container restarts unless you add R2 storage.
Sources
Sandbox default and model support read in the project's own documentation and repository on 2026-10-18.
- Moltworker README (main, 7b00c1d): Cloudflare Sandbox container, requirements, costs, R2, authentication
- Moltworker LICENSE: Apache-2.0
Links
- Homepage: https://blog.cloudflare.com/moltworker-self-hosted-ai-agent/
- Repository: https://github.com/cloudflare/moltworker
Run Moltworker on portable hardware
Verified working on these portable hosts (with the standard caveats: see the per-device pages for power, RAM headroom, browser-tool support):
Compare Moltworker with others
Stats refreshed every 6 hours from public sources (GitHub API, NVD CVE feed, CISA KEV). See our methodology for the full tracking pipeline.
See also: all AI agents, all AI CVEs, AI hardware, scan your AI stack, Pro alerts.