What GambaOS is

A control panel for AI agents you run yourself — and an explanation of what it does not try to be.

GambaOS is a control panel for AI agents that you host yourself. It sits in front of an agent runtime — currently OpenClaw or Hermes — and gives you one interface for the things you otherwise manage by editing config files and reading logs: models, channels, sessions, scheduled tasks.

It is a desktop application built on Tauri, and it can also be run as a web application on your own server.

The problem it exists for

Running an agent yourself is not hard. Running one safely, for months, without a surprise, is harder — and it fails in two specific ways.

It ends up reachable from the internet. The default binding for most agent gateways is convenient rather than safe. A deployment that started on a laptop gets moved to a VPS and quietly becomes a public endpoint that will happily take instructions from anyone who finds it.

It burns credits while you are not looking. Agents are not request-response tools; they have heartbeats, retries, and background work. A loop that ships your full context to a model every few minutes costs very little per call and a great deal per month. You find out when the invoice arrives.

Both failures share a shape: nothing appears broken, so nothing prompts you to look. GambaOS is built to make you look.

What it does

Security audit. One pass over your deployment — gateway binding, authentication, channel exposure policy, workspace scope — producing a score and a list of findings. Every finding links directly to the page that fixes it, so the audit is a to-do list rather than a report.

Cost guard. You set a monthly budget. The panel tracks spend and projects the month-end total from your current rate, warning you at your threshold. The point is the projection: a warning at the end of the month is history, a warning on the tenth is a decision.

One panel over two runtimes. Models, channels, agents, sessions, logs and scheduled tasks work the same way whether you run OpenClaw or Hermes.

What it is not

It is not a hosted service. There is no GambaOS cloud, no account to create, and nowhere for your data to be sent. If your machine is off, GambaOS is off.

It is not a model provider or a proxy. It does not resell tokens and it does not sit in the request path between you and Anthropic, OpenAI, or anyone else. You bring your own keys and talk to your providers directly.

It is not a guarantee. The audit finds the problems it knows how to look for, and the cost projection is arithmetic on your recent usage. Both are useful; neither removes your responsibility for your own deployment.

Licence and origin

GambaOS is AGPL-3.0 and open source. It began as a fork of ClawPanel and is maintained independently — rebuilt around the security and cost problems above, with the upstream telemetry removed from the source rather than switched off.