- 同时跑多个 Claude Code / Codex 实例做并行开发:需要给每个代理分配角色、限制预算、看谁在干什么,而不是开一堆终端窗口自己记
- 给代理团队设成本上限:按组织/代理维度卡预算,避免某个代理陷入循环把 API 额度烧光,这是单代理工具给不了的
- 多团队或多客户隔离部署:每个组织独立数据与权限,适合一个平台内跑多个互不相干的代理团队
- 需要混用不同模型和 harness:同一个任务流里让不同代理跑不同厂商的模型,按任务难度分配
- 代理能力不够时接外部进程或 HTTP 端点:把自研工具挂成适配器,而不是等官方支持
paperclip
paperclipaiMIT活跃维护 有专家点评开源的多智能体工作管理应用,用于编排、调度和治理自主 AI Agent,支持 Claude 及技能扩展,让团队像管理同事一样管理 Agent。
The open-source app everyone uses to manage agents at work
专家点评
上手难度:进阶更新于 2026-11-11把多个编码代理按公司组织架构编排起来,统一管目标、预算和任务分发的控制平面
适用场景
踩坑
- 私有 npm 源环境下 npx 直接 E404:公司内网配了 GitHub Packages 之类镜像时,必须显式加 --registry https://registry.npmjs.org,否则 onboard 第一步就挂
- 源码开发要 Rust 工具链:默认构建原生 Paperclip Runner,没装 Rust 或没设 PAPERCLIP_RUNNER_BINARY 会卡在构建阶段;只想用功能的话走 npx 别 clone
- 本地订阅登录依赖主机环境:用 Claude/Codex 订阅而非 API key 时,主机上得有 Python 3 和对应厂商 CLI,Docker 镜像里已内置,裸机部署容易漏
- 模型接入面还在补:issue 里 Ollama 本地模型、OpenRouter、Copilot CLI 适配器这几类接入请求反应数最高,说明想接非默认厂商的模型或 harness 时,先确认当前版本是否已支持,别假设开箱即用
同类对比
如果只是单代理跑任务,Claude Code / Codex CLI 本身够用,不需要这层编排;如果重点是工作流 DAG 而非组织化代理管理,看 LangGraph 这类图编排框架更直接。
npx paperclipai@latest onboard --yesREADME 未说明 GPU 或显存要求;本地运行只需 Node.js 24.11+ 与 pnpm 9.15+,内置 PostgreSQL 自动创建,无需额外数据库。本地使用 Claude/Codex 订阅登录还需 Python 3 及对应厂商 CLI。
项目说明
由 README 自动翻译提炼开源的多智能体编排应用,把各类 AI 代理组织成公司来管理目标、预算与任务
开源的多智能体工作管理应用,用于编排、调度和治理自主 AI Agent,支持 Claude 及技能扩展,让团队像管理同事一样管理 Agent。
核心能力
- 用组织架构图、预算与治理机制协调多智能体团队
- 每个代理可单独选择模型与 harness,兼容多种代理
- 从统一仪表盘跟踪任务进度与成本并执行预算
- 支持多组织部署,数据与权限按公司隔离
- 可通过自定义进程、HTTP 端点与外部适配器扩展代理
容易踩的坑
若配置了私有 npm 源(如 GitHub Packages),npx 可能报 E404,需加 --registry https://registry.npmjs.org 强制使用公共源;源码开发默认会构建原生 Paperclip Runner,需安装 Rust 工具链或设置 PAPERCLIP_RUNNER_BINARY;本地 Claude/Codex 订阅登录需在主机上安装 Python 3 和对应厂商 CLI,Docker 镜像已内置。
- v2026.1106.0最新正式版2026-11-06 · 2026-11-06 22:31 UTC
Paperclip v2026.1106.0
Released: 2026-11-06
Paperclip v2026.1106.0 carries 515 commits, promoted from
2026.1023.0-beta.0. The headline is that the Paperclip Runner is now the default for new agents: new Claude, Codex, OpenCode, and Pi agents start on the native Runner on qualified macOS and Linux hosts, existing agents get a one-click "Upgrade runner" action, and GitHub Copilot joins as a native harness. Around that: project repositories that automatically become skill sources, model-backed prompt injection prevention, agent observability to Braintrust or any OTLP endpoint, a unified Google Workspace connection, bulk edits on the Agents roster, workspaces that compact and expire themselves with encrypted restore points, and Grok Bot and Muse as experimental Runner providers. Underneath, server restarts report ready sooner, the Docker image boots from a precompiled bundle, task pages load faster, and more background services stop polling the database.Breaking Changes
- The Pipelines experiment is removed. Pipeline boards, stage settings, case automation, review queues, the
pipelinesCLI commands, thepipelines:writepermission, theenablePipelinessetting, and thelinkedCasesfield on task detail are gone; Cases and Routines remain. Existing pipeline tables and records are preserved untouched and a storedenablePipelinesvalue is ignored. (#16834) - Run failures no longer reach Sentry by default. A backend DSN alone no longer reports agent run failures. Set
PAPERCLIP_SENTRY_RUN_FAILURES=unexpectedto keep the previous filtered policy orallto report every failed or timed-out run; the default isoff. (#16300) - The run history list is bounded.
GET /api/companies/{companyId}/heartbeat-runsreturns 200 rows by default and at most 1,000; clients that relied on an unbounded array must pass an explicitlimit. (#16286) paperclipai agent instructions-file:deleterequires--yeslike the other destructive CLI commands; scripts that call it must add the flag. (#11504)
Highlights
- The Paperclip Runner is the default — New Claude agents on Apple Silicon, Intel macOS, and Linux x64 (#15993, #15997), new Codex agents on Apple Silicon, Intel macOS, Linux x64, and Linux ARM64 (#15683), and new OpenCode and Pi agents on macOS and Linux x64 (#17120, #17142) now start on the native Runner instead of the legacy adapter, across onboarding, the API and CLI, hires, built-ins, plugins, and imports; Linux needs GNU libc 2.39 or later, a "Legacy runner" override lives under Advanced, and existing agents keep their current runner. Existing Claude and Codex agents on qualified targets show an Upgrade runner action that converts them in one click, keeping model, account, and instructions and listing any settings that could not be converted (#17122). Claude Runner agents start with their core task tools preloaded, measured about 20% faster on simple tasks (#16885), carry the chosen effort level through resumes (#15994), and start on Linux ARM64 (#16372).
- GitHub Copilot as a native harness — Connect GitHub Copilot through Apps / AI Connections with a saved GitHub token; the agent's model list is discovered from the authenticated account, and Copilot (CLI 1.0.88) runs through the Pap
- The Pipelines experiment is removed. Pipeline boards, stage settings, case automation, review queues, the
- v2026.1023.02026-10-24 · 2026-10-24 00:03 UTC
查看更新说明
Paperclip v2026.1023.0
Released: 2026-10-23
Paperclip v2026.1023.0 carries 200 commits, promoted from
2026.1012.1-beta.0. The headline is private work: a task or project can now be marked private and shared with named people and agents; everyone else cannot open it, find it in task lists or search, read its run transcripts, or reach it through a plugin. Around that: agents can run through your own model gateway (OpenRouter, Amazon Bedrock, Google Gemini, or any OpenAI Responses, Anthropic Messages, or Chat Completions endpoint), Slack bots set themselves up through Slack's Manifest API, the GitHub review bot gets a two-screen setup and a real Paperclip Review status check, Costs becomes an exact ledger that also shows monthly subscription fees, and connected assistants can edit tasks, upload files, and configure agents over MCP. Underneath, OpenAI Dot and Pi 1.0 join the experimental Runner, native OpenCode streams as it types, each agent gets a persistent cryptographic identity, and idle instances stop polling the database every second.Breaking Changes
- Operators can now edit the company. The Operator role preset grows from one grant (
tasks:assign) to fourteen: agent creation and configuration, skills, environments, invitations, task assignment, pipelines, connections, tool management and use, and audit reads. Existing Operators pick up the missing grants through the normal startup seeding; custom grant scopes are kept. Join approval and member-permission management stay out of the preset, and inviting an Admin now requires join approval while inviting an Owner also requires member-permission management. Review your member roles if Operators were meant to be read-mostly. (#15377) - GitHub review bots move behind their own experimental setting. The GitHub Code Review Bot catalog entry, its setup, and its management screens appear only while Settings → Experimental → GitHub review bots (
enableGitHubReviewBots, off by default) is on; existing bots keep running while it is off. The old setup-method and delegated-agent screens are gone, and per-person automatic-run flags are replaced by author include/exclude filters (legacypeople[].automaticReviewsvalues are read but ignored). (#15416) - Budgets hold on unpriced usage by default. Each budget policy gains an unpriced-usage setting that defaults to
block: while a run's usage has no reliable price, the policy counts as at its limit until the charge is resolved through the audited cost adjustment flow. Set the policy toallowto keep running on unpriced usage. (#14997)
Highlights
- Private tasks and projects — Mark a task private when you create it, or make a project private with its own member list; a personal private project is created for you on first use. Private work is readable only by its responsible user, creator, current assignee, named grantees, and private-project members, and that rule applies to task lists and task counts, search, activity, run detail, transcripts, events, and logs, documents, attachments, work products, and every plugin read. Two surfaces stay company-wide on purpose: dashboard and sidebar totals may count private work without exposing a title or identifier, and the company run list shows a locked row for a private task's run with only the agent, status, timing, token, and cost fields, so budget oversight keeps working. Privacy flows down to children; sharing a child never exposes its parent or siblings. Owners and admins do not see private tasks by default and must request
?breakGlass=true, which writes an audit row and a warning notice on the task. Agents' access is intersected with the run's responsible user, so reusing an agent does not carry another person's permissions. ([#14717](https://github.com/paperclipai/paperclip/pull
- Operators can now edit the company. The Operator role preset grows from one grant (
- v2026.1012.02026-10-12 · 2026-10-12 21:06 UTC
查看更新说明
Paperclip v2026.1012.0
Released: 2026-10-12
Paperclip v2026.1012.0 carries 130 commits, promoted from
2026.1006.0-beta.0. The headline is that outside assistants can now join your team: Claude Code, Codex, OpenCode, and any MCP client can connect to Paperclip as a signed-in person, review work, and delegate tasks, all behind an experimental setting. Around that: Chat leads the navigation with each agent's tasks and artifacts beside the conversation, the Connections catalog pulls in accounts you already linked in Composio and Arcade, connections carry usage instructions that reach your agents automatically, Claude Sonnet 5.5 and GPT-6.1 Sol arrive with refreshed harnesses, and agents can safely update company skills. Underneath, Codex runs survive server restarts and model-capacity errors, workspace restore locks move to crash-safe SQLite file locks, and default agent instructions shrink to a fraction of their former size.Breaking Changes
- Workspace restore locks change protocol; stop every old process before upgrading. Restore and agent-file collection locks are now OS-backed SQLite file locks under
<instance root>/locks/directory-merge/, released by the kernel when a process crashes. Old and new versions must not write to the same instance root at once: drain and stop all old server and worker processes (including other hosts or containers) before upgrading or rolling back, then move any leftover legacy<hash>.lock/directories to a scratch location. Never delete or move the new.lock.sqlitefiles. Seedoc/workspace-restore-locks.md. (#14869) - Stored tool grants are enforced as written. A grant whose
scope.allowlist does not match a tool, connection, or application no longer falls through to a broader policy; grants with unknown selectors or malformed restrictions now deny access. Review custom grants after upgrading if an agent loses a tool it previously used. (#14915)
Highlights
- Assistants join your team over MCP — A new "Assistant Connection (MCP)" card in Connections lets Claude Code, Codex, OpenCode, and generic MCP clients connect to Paperclip through browser OAuth or device-code consent and act as the signed-in user: read and search tasks, create and delegate work, leave human comments, read documents and deliverables, and follow results through signed event webhooks (#14846). Consent shows the client and organization, write access can be opted out, requests can be pinned to one company, and a
paperclip mcpCLI device login bridges local stdio clients; it is off by default behind Settings → Experimental → "Assistant connections (MCP)" and requires an HTTPSPAPERCLIP_PUBLIC_URL(#14933). - Chat leads the way — With Agent Chat enabled in the streamlined UI (the default shell), Chat is the first row in the Work navigation, the chat rail lists every eligible agent, and the side panel shows that agent's recent tasks and artifacts; a new experimental "Combined Inbox + Task List" setting folds Inbox into Tasks as views (#15100). Instances that switched "Streamlined UI" off keep the legacy navigation and do not see these changes. The Chat entry reopens the last conversation you visited (#14848), and the chat header shows the agent's avatar (#14726).
- One catalog for every account — The Connections Apps catalog discovers accounts already connected upstream in Composio, Arcade, and supported Executor gateways and groups them with native accounts under one app card, with source chips, search, and pagination (#15254). AgentMail is a default
- Workspace restore locks change protocol; stop every old process before upgrading. Restore and agent-file collection locks are now OS-backed SQLite file locks under
- v2026.1005.02026-10-06 · 2026-10-06 16:40 UTC
查看更新说明
Paperclip v2026.1005.0
Released: 2026-10-05
Paperclip v2026.1005.0 carries 179 commits, promoted from
2026.1002.0-beta.0. The headline is agents that carry more with them: Grok Build runs on the native runner, agents keep their own files across tasks, company skills sync from GitHub repositories, and Browser Use Cloud gives agents a live browser that people can watch and take over from the task. Around those: most connectors now set up in one click with MCP aggregators on by default, Slack conversations round-trip between the board and the thread, Agent Chat gets its own navigation and hands finished work back to the conversation, and the task composer picks model and effort per message. Underneath, a long reliability pass hardens the native runner, sandbox transport, and the heartbeat scheduler, including a fix for a server crash loop caused by a permanently rejected queued run.Breaking Changes
- Operator UI snippet injection is removed. The
PAPERCLIP_CLOUD_UI_SNIPPETandPAPERCLIP_CLOUD_UI_SNIPPET_B64settings no longer inject HTML into static or development pages. Operators who relied on them should move the integration to a plugin UI contribution before upgrading. (#13789) - Keyboard shortcuts are always on, and their settings are gone. The instance-wide General toggle and the per-user Profile preference are both removed, along with the
GET/PATCH /api/auth/preferencesroutes;PATCH /api/instance/settings/generalno longer acceptskeyboardShortcuts. Every signed-in user now has shortcuts enabled. (#14141, #14643) - @-mentioning an agent no longer starts a run. Mentions in task comments are kept as context for the assignee; only explicit assignment and review requests start work. Workflows that used a mention to pull a second agent onto a task must assign or request review instead. (#14577)
Highlights
- Grok Build on the native runner — Grok Build joins the Paperclip Runner through ACP for both local and Daytona execution, with separate subscription-login and API-key credential paths and governed tools (#13882); it ships in public installs with sandbox-owned binaries rather than a download at install time (#14024). The shared harness runtimes move to Codex 0.156.0, Claude Agent SDK 0.3.280, and OpenCode 1.18.32 (#13838), model catalogs and reasoning controls are refreshed across the Claude, Codex, Grok, Gemini, Cursor, Kimi, and OpenCode adapters (#13829), and remote native Codex accepts compatible releases from 0.149.0 instead of one exact pin (#13853).
- Agents keep their own files — An agent's directory (AGENTS.md and its supporting files) now persists across tasks and sessions and is shared with the Instructions Editor; concurrent runs apply only the files they changed, and new saves no longer create revision history (#14420), on top of a new plain-directory sync transport with conflict preflight (#14416). Warm native Codex sessions survive managed-file collection by checkpointing only changed files after each turn (#14735).
- Skills synced from GitHub — Skills gains a Sources tab: pick a repository through an existing GitHub connection, choose which skill folders to import, and refresh on demand. Installed snapshots mean agents never fetch GitHub mid-run, and a failed refresh leaves the last good version in place ([#14
- Operator UI snippet injection is removed. The
- v2026.1001.02026-10-02 · 2026-10-02 01:54 UTC
查看更新说明
Paperclip v2026.1001.0
Released: 2026-10-01
Paperclip v2026.1001.0 carries 77 commits, promoted from
2026.921.0-beta.1. The headline is reliability: a deep hardening pass over the native runner and chat recovery — approval and Stop races, session continuity, sandbox reconnection and cleanup — alongside a friendlier face: agent personas throughout the app, an animated onboarding character, and a rebuilt Slack setup. Around those: agents can review GitHub pull requests as scheduled review bots, Railway joins the connector catalog with governed deployment tools, approvals and answers queue during active runs instead of bouncing, and execution harnesses now default to full auto.Breaking Changes
- The legacy Composio broker is retired. The API-key catalog method, broker clients, session creation, account synchronization, child lifecycle and toolkit routes, and the Services tab are all removed. Existing legacy Composio connections stop working, and there is no automated migration — the experimental MCP aggregator connectors (below) are the successor path; see the Upgrade Guide for the manual steps. Vercel provenance is untouched. (#13758)
- Execution harnesses now default to full auto. Native runs default Claude/ACPX to
approve-all, OpenCode toallow, and Codex to approval-and-sandbox bypass, and the legacy adapters follow the same policy — provider tools and connected tools included. Explicitly configured restrictive modes are preserved, and Paperclip's own approval decisions still enforce controller authority; only the defaults change. Operators who relied on unconfigured agents inheriting restrictive provider gates should set an explicit mode. (#13686, #13693)
Highlights
- Agents get faces — Static persona images replace agent icons across lists, the sidebar, org charts, tasks, comments, selectors, activity, and dashboards, with one animated pointer-following character in the agent header (reduced-motion and touch fallbacks included) and persona reveal built into agent creation (#13171). Onboarding opens with the ClipLab sleepy-to-wake hero: the character dozes in gray through setup and wakes in full palette on Review (#13629). Slack setup can download the agent's avatar as a PNG for the bot identity, from both setup and settings (#13740).
- Agents review your pull requests — A guided setup turns a Paperclip agent into a GitHub review bot: a copyable Claude/Codex prompt walks through App installation, review scheduling, and optional required checks, with the instance origin baked in (#13717). The GitHub MCP connection also gains the Actions toolset — workflow discovery and dispatch — for existing and new connections (#13553).
- Approvals and answers queue during active runs — Responding to a question or approval while the agent is mid-run no longer bounces: resolved cards project into the run queue as immutable responses, an explicit click steers a response into a compatible native turn (or interrupts for a fresh session), and typed context survives interruption and cleanup (#13539).
- Slack setup, rebuilt — Onboarding splits into six clickable steps with a generated creation link and read-only manifest, credential validation, live account-link status, and a mention-based message test (#13638). Companies can attach communication guidance to a Slack connection that follows conversations into tasks without per-turn reminders ([#13760](https://g
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
Paperclip is the app people use to manage AI agents for work.
Open-source orchestration for teams of AI agents.
If OpenClaw is an employee, Paperclip is the company.
Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Bring your own agents, assign goals, and track work and costs from one dashboard. Choose models and harnesses per agent while keeping your team's tasks, skills, permissions, and history in one place.
It looks like a task manager. Under the hood: org charts, budgets, governance, goal alignment, and agent coordination.
Manage business goals, not pull requests.
| Step | Example | |
|---|---|---|
| 01 | Define the goal | "Build the #1 AI note-taking app to $1M MRR." |
| 02 | Hire the team | CEO, CTO, engineers, designers, marketers — any bot, any provider. |
| 03 | Approve and run | Review strategy. Set budgets. Hit go. Monitor from the dashboard. |
If it can receive a heartbeat, it's hired.
Custom processes, HTTP endpoints, and external adapter packages extend the roster. See the adapter overview for setup and capabilities.
Paperclip is right for you if
- ✅ You want to build autonomous AI organizations
- ✅ You coordinate many different agents (OpenClaw, Codex, Claude, Cursor) toward a common goal
- ✅ You have 20 simultaneous Claude Code terminals open and lose track of what everyone is doing
- ✅ You want agents running autonomously 24/7, but still want to audit work and chime in when needed
- ✅ You want to monitor costs and enforce budgets
- ✅ You want a process for managing agents that feels like using a task manager
- ✅ You want to manage your autonomous businesses from your phone
The four pillars
Four things have to work for an organization of AI agents to actually produce: the tasks, the org, the training, and the infrastructure. Paperclip is built around exactly those four pillars.
| Pillar | Built for | What it covers |
|---|---|---|
| Agentic Task Manager — Declare intent. Agents work. You verify the output. | Everyone, daily | Tasks, approvals & review gates · proactive agent coworkers · auditable routines & workflows · verify from diffs, screenshots & tests |
| Org Chart for Agents — Roles, permissions & boundaries for humans and agents. | Managers | Mixed human + agent org chart · responsibilities, delegation, specialization · governance: who can do what · scoped secrets & company boundaries · connection permissions & responsible-user identities |
| Agent Employee Training — Design, train & evaluate your AI employees. | Enablers | Skill Studio & shared org-wide skills · evals & saved test runs · active learning loops & quality metrics · performance reviews for agents · saved test inputs · skill version history & restore · reusable team templates |
| Agentic OS — The infrastructure that makes the work run. | IT & platform | Cross-provider runtime: any model, any agent · sandboxing, integrations & MCP servers · SSO, GRC, RBAC & cost controls · data privacy, internal trace collection, compounding data value · personal & shared app connections · run history & opt-in tracing |
Features
Experimental Agent Chat and chat/email connectors add conversations with agents in Paperclip and through configured services such as Slack, Discord, Telegram, and AgentMail. Enable the relevant instance settings to try them.
Problems Paperclip solves
| Without Paperclip | With Paperclip |
|---|---|
| ❌ You have 20 Claude Code tabs open and can't track which one does what. On reboot you lose everything. | ✅ Tasks are ticket-based, conversations are threaded, sessions persist across reboots. |
| ❌ You manually gather context from several places to remind your bot what you're actually doing. | ✅ Context flows from the task up through the project and company goals — your agent always knows what to do and why. |
| ❌ Folders of agent configs are disorganized and you're re-inventing task management, communication, and coordination between agents. | ✅ Paperclip gives you org charts, ticketing, delegation, and governance out of the box — so you run a company, not a pile of scripts. |
| ❌ Runaway loops waste hundreds of dollars of tokens and max your quota before you even know what happened. | ✅ Spend tracking, budget alerts, and automatic pauses help you control the cost of ongoing work. |
| ❌ You have recurring jobs (customer support, social, reports) and have to remember to manually kick them off. | ✅ Routines create assigned tasks on a schedule, with outputs and run history you can inspect. |
| ❌ You have an idea, you have to find your repo, fire up Claude Code, keep a tab open, and babysit it. | ✅ Add a task in Paperclip. Your coding agent works on it until it's done. Management reviews their work. |
Why Paperclip is special
Paperclip handles the hard orchestration details correctly.
| Atomic task checkout. | A single assignee and execution locks prevent competing runs from claiming the same task. |
| Persistent work context. | Tasks, comments, and documents stay in Paperclip. Supporting adapters resume saved sessions across runs. |
| Runtime skill injection. | Agents can learn Paperclip workflows and project context at runtime, without retraining. |
| Governance with rollback. | Approval gates are enforced, config changes are revisioned, and bad changes can be rolled back safely. |
| Accountable connections. | Human access, agent eligibility, and gateway action permissions are separate controls. Approve a call once or save a revocable rule. |
| Goal-aware execution. | Linked tasks and projects carry goal ancestry so agents see the "why," not just a title. |
| Portable company templates. | Export/import orgs, agents, and skills with secret scrubbing and collision handling. |
| Organization boundaries. | Company-scoped access checks keep each organization's work, agents, and activity separate within one deployment. |
What's Under the Hood
Paperclip is a full control plane, not a wrapper. Before you build any of this yourself, know that it already exists:
┌──────────────────────────────────────────────────────────────┐
│ PAPERCLIP SERVER │
│ │
│ ┌───────────┐ ┌───────────┐ ┌───────────┐ ┌───────────┐ │
│ │Identity & │ │ Work & │ │ Heartbeat │ │Governance │ │
│ │ Access │ │ Tasks │ │ Execution │ │& Approvals│ │
│ └───────────┘ └───────────┘ └───────────┘ └───────────┘ │
│ │
│ ┌───────────┐ ┌───────────┐ ┌───────────┐ ┌───────────┐ │
│ │ Org Chart │ │Workspaces │ │ Plugins │ │ Budget │ │
│ │ & Agents │ │ & Runtime │ │ │ │ & Costs │ │
│ └───────────┘ └───────────┘ └───────────┘ └───────────┘ │
│ │
│ ┌───────────┐ ┌───────────┐ ┌───────────┐ ┌───────────┐ │
│ │ Routines │ │ Secrets & │ │ Activity │ │ Company │ │
│ │& Schedules│ │ Storage │ │ & Events │ │Portability│ │
│ └───────────┘ └───────────┘ └───────────┘ └───────────┘ │
└──────────────────────────────────────────────────────────────┘
▲ ▲ ▲ ▲
┌─────┴─────┐ ┌─────┴─────┐ ┌─────┴─────┐ ┌─────┴─────┐
│ Claude │ │ Codex │ │ CLI │ │ HTTP/web │
│ Code │ │ │ │ agents │ │ bots │
└───────────┘ └───────────┘ └───────────┘ └───────────┘
The Systems
Identity & Access — Two deployment modes (trusted local or authenticated), human roles and permissions, agent API keys, short-lived run JWTs, company memberships, and invite flows. Responsible-user attribution follows work through delegation and supported managed connections.
Org Chart & Agents — Agents have roles, titles, reporting lines, permissions, and budgets. Adapter examples match the diagram: Claude Code, Codex, CLI agents such as Cursor/Gemini/bash, HTTP/webhook bots such as OpenClaw, and external adapter plugins. If it can receive a heartbeat, it's hired.
Work & Task System — Issues carry company/project/goal/parent links, atomic checkout with execution locks, first-class blocker dependencies, comments, documents, attachments, work products, labels, and inbox state. Search across work, review document revisions, and leave anchored feedback.
Heartbeat Execution — DB-backed wakeup queue with coalescing, budget checks, workspace resolution, secret injection, skill loading, and adapter invocation. Runs produce logs, usage records, and adapter-specific session state. Bounded recovery handles supported failures and surfaces cases that need human action.
Workspaces & Runtime — Project repositories and workspaces, optional isolated execution workspaces (git worktrees, operator branches), and runtime services (dev servers, preview URLs). Sandbox providers extend execution beyond the local host; availability depends on the configured environment and adapter.
Governance & Approvals — Board approval workflows, execution policies with review/approval stages, decision tracking, budget hard-stops, and agent pause/resume/terminate. Configured task reviews govern completion; connection action approvals govern calls through the tool gateway.
Budget & Cost Control — Token and cost tracking by company, agent, project, goal, issue, provider, and model. Scoped budget policies with warning thresholds and hard stops. Enforcement uses recorded spend; usage reporting and in-flight work can delay a stop.
Routines & Schedules — Recurring tasks with cron, webhook, and API triggers. Concurrency and catch-up policies. Each routine execution creates a tracked issue and wakes the assigned agent — no manual kick-offs needed.
Plugins — Instance-wide plugin system with out-of-process workers, capability-gated host services, job scheduling, tool exposure, and UI contributions. Extend Paperclip without forking it.
Secrets & Storage — Company secrets and per-person secret values, encrypted credential storage, local or S3-compatible file storage, attachments, and work products. Secret references supply credentials to authorized runs without copying values into ordinary agent configuration.
Activity & Events — Mutating actions, heartbeat state changes, cost events, approvals, comments, and work products are recorded as durable activity so operators can audit what happened and why.
Company Portability — Preview, export, and import organization packages with agents, skills, and optional projects, routines, tasks, and attachments. Referenced secret values are omitted; review packages before sharing because plain environment values and local paths can remain. Packages share an operating setup; full-instance recovery uses backups.
What Paperclip is not
| Not just a chatbot. | Conversations stay attached to tasks, plans, decisions, and outputs. Experimental Agent Chat can hand work off to assigned tasks. |
| Not an agent framework. | We don't tell you how to build agents. We tell you how to run a company made of them. |
| Not just a workflow builder. | Routines operate within an organization, with roles, goals, budgets, and governance. |
| Not a prompt manager. | Agents bring their own prompts, models, and runtimes. Paperclip manages the organization they work in. |
| Not limited to one agent. | Start with one agent and grow into a team with shared skills, delegation, and review. |
| Not only for code review. | Coding and PR review fit alongside research, operations, content, and other work. |
Quickstart
Open source. Self-hosted. No Paperclip account required. Follow the guided quickstart to set up your first agent.
Just ask your agent to install Paperclip
Share the installation guide with your agent.
Or install it yourself
With Node.js 24.11 or newer installed:
npx paperclipai@latest onboard --yes
The CLI runs from npm's cache; your instance configuration and data persist locally.
See the installation guide for managed installs, pinned versions, canary and git-ref installs, updates, rollback, service management, and uninstalling.
For an isolated manual test instance that is already initialized with a CEO
agent, use test-drive. It stays in the foreground, never installs a service
or creates a first task, and opens the browser only after setup succeeds:
ANTHROPIC_API_KEY=... npx paperclipai test-drive
OPENAI_API_KEY=... npx paperclipai test-drive --harness codex
OPENROUTER_API_KEY=... npx paperclipai test-drive \
--harness opencode \
--model openrouter/anthropic/claude-sonnet-4.5
Each run without --data-dir gets a unique, retained temporary directory; its
absolute path is printed at startup. Pass --data-dir to reuse one, or
--no-browser to leave the initialized instance unopened. When invoked from a
linked Git worktree, test-drive also enables task execution in that worktree.
See the test-drive guide for credential and
reuse behavior.
Troubleshooting: private npm registry
.npmrcIf this fails with an
E404forpaperclipai(or similar) and you use a private npm registry (for example GitHub Packages) via a global~/.npmrc,npxmay be resolvingpaperclipaiagainst that private registry instead of the public npm registry.Diagnostic:
npm config get registryWorkaround (cross-platform; force the public npm registry for this command):
npx --registry https://registry.npmjs.org paperclipai@latest onboard --yes
That quickstart path now defaults to trusted local loopback mode for the fastest first run. To start in authenticated/private mode instead, choose a bind preset explicitly:
npx paperclipai@latest onboard --yes --bind lan
# or:
npx paperclipai@latest onboard --yes --bind tailnet
If you already have Paperclip configured, rerunning onboard keeps the existing config in place. Use npx paperclipai configure to edit settings.
Or manually:
git clone https://github.com/paperclipai/paperclip.git
cd paperclip
pnpm install
pnpm dev
This starts the UI and API at http://localhost:3100. An embedded PostgreSQL database is created automatically — no setup required.
Requirements: Node.js 24.11+, pnpm 9.15+
Local Claude and Codex subscription sign-in also needs Python 3 and the corresponding provider CLI on the Paperclip host. The Docker image includes them.
Source development also builds the native Paperclip Runner when enabled (the self-hosted default). Install a Rust toolchain, or set PAPERCLIP_RUNNER_BINARY to a compatible prebuilt runner.
FAQ
Q: Is this project maintained or just slop?
A: Paperclip is maintained by the Paperclip team. We've merged over 2,700 pull requests.
Q: What does a typical setup look like?
A: Locally, a single Node.js process manages an embedded Postgres and local file storage. For production, point it at your own Postgres and deploy however you like. Configure projects, agents, and goals — the agents take care of the rest.
For remote access, use authenticated mode with a private-network bind such as Tailscale, or deploy the persistent server with Docker. See deployment modes and the Docker guide.
Q: Can I run multiple companies?
A: Yes. A single deployment can host multiple organizations with company-scoped data and access checks.
Q: How is Paperclip different from agents like OpenClaw or Claude Code?
A: Paperclip uses those agents. It orchestrates them into a company — with org charts, budgets, goals, governance, and accountability.
Q: Why should I use Paperclip instead of just pointing my OpenClaw to Asana or Trello?
A: Agent orchestration has subtleties in how you coordinate who has work checked out, how to maintain sessions, monitoring costs, establishing governance - Paperclip does this for you.
(Bring-your-own-ticket-system is on the Roadmap)
Q: Do agents run continuously?
A: Agents wake for assigned work and follow-up messages. Optional timer heartbeats let them check for work periodically; routines create recurring tasks on their own schedules. You can also connect externally running agents such as OpenClaw. A mention alone does not assign work or wake another agent.
Development
pnpm dev # Full dev (API + UI, watch mode)
pnpm dev:once # Full dev without file watching
pnpm dev:server # Server only
pnpm dev:mobile # Serve prebuilt UI on :3101 for phones/tablets (proxies /api → :3100)
pnpm dev:both # Run `pnpm dev` and `pnpm dev:mobile` together
pnpm build # Build all
pnpm typecheck # Type checking
pnpm test # Cheap default test run (Vitest only)
pnpm test:watch # Vitest watch mode
pnpm test:e2e # Playwright browser suite
pnpm db:generate # Generate DB migration
pnpm db:migrate # Apply migrations
pnpm test does not run Playwright. Browser suites stay separate and are typically run only when working on those flows or in CI.
See doc/DEVELOPING.md for the full development guide.
Roadmap
- ✅ Plugin system (e.g. add a knowledge base, custom tracing, queues, etc)
- ✅ Get OpenClaw / claw-style agent employees
- ✅ companies.sh - import and export entire organizations
- ✅ Easy AGENTS.md configurations
- ✅ Skills Manager, Skill Studio & Skills Store
- ✅ Scheduled Routines
- ✅ Better Budgeting
- ✅ Agent Reviews and Approvals
- ✅ Multiple Human Users
- ✅ Cloud / Sandbox agents (e2b, Cloudflare, Daytona, Modal, Novita, boxd, self-hosted Kubernetes)
- ✅ Artifacts & Work Products
- ✅ Deep Planning (planning mode, revisioned plans, plan approvals)
- ✅ Enforced Outcomes (watchdogs, recovery actions, review gates)
- ✅ MCP Tool Gateway & Apps (governed tool access)
- ✅ Secrets Manager with per-agent access
- ✅ Activity log & action attribution
- ✅ Self-healing runs & automatic recovery
- ✅ Agent evals & feedback
- ✅ Connected Apps
- ✅ Personal & Shared AI Accounts
- ✅ Shared Agents Use Personal GitHub Identities
- ✅ Skill Version History & Restore
- ✅ Document Comments & Revision History
- ✅ Company-Wide Search
- ✅ Multi-Model & Multi-Harness Teams
- 🟡 Memory / Knowledge
- ⚪ MAXIMIZER MODE
- ⚪ Work Queues
- ⚪ Self-Organization
- ⚪ Automatic Organizational Learning
- 🟡 Agent Chat
- 🟡 Cloud deployments
- ⚪ Desktop App
- ⚪ Bring-your-own-ticket-system (Asana / Linear / Jira as on-ramps)
This is the short roadmap preview. See the full roadmap in ROADMAP.md.
Community & Plugins
Find Plugins and more at awesome-paperclip
Observability
Paperclip ships with opt-in OpenTelemetry auto-instrumentation for the server (traces only). It activates when OTEL_EXPORTER_OTLP_ENDPOINT is set and supports grpc, http/protobuf, and http/json via the standard OTEL_EXPORTER_OTLP_PROTOCOL env var. @opentelemetry/api is a normal server dependency; the SDK, auto-instrumentation, and exporter packages are optional peer dependencies — install them only if you want tracing. See doc/observability.md for install commands and the full env-var reference.
Paperclip also ships with opt-in Sentry error monitoring for the server and the browser. Set SENTRY_DSN_FRONTEND to activate it for the browser and SENTRY_DSN_BACKEND to activate it for the server — each variable is optional, and the legacy SENTRY_DSN variable still works as a fallback for either component. The supported server SDK version is @sentry/[email protected]; it is an optional peer dependency for the server, so install it only if you want error monitoring. The browser SDK, @sentry/browser, is pinned to the same exact version. See doc/observability.md for the install command, the privacy settings, and the full default capture set.
Telemetry
Paperclip collects anonymous usage telemetry to help us understand how the product is used and improve it. No personal information, issue content, prompts, file paths, or secrets are ever collected. Private repository references are hashed with a per-install salt before being sent.
Contributors changing emitted telemetry events should follow the Telemetry Data Contract. For proposed first-party events that are not in the generated contract yet, follow Telemetry Workflow.
Telemetry is enabled by default and can be disabled with any of the following:
| Method | How |
|---|---|
| Environment variable | PAPERCLIP_TELEMETRY_DISABLED=1 |
| Standard convention | DO_NOT_TRACK=1 |
| CI environments | Automatically disabled when CI=true |
| Config file | Set telemetry.enabled: false in your Paperclip config |
Contributing
We welcome contributions. See the contributing guide for details.
Community
- Discord — Join the community
- Twitter / X — Follow updates and announcements
- GitHub Issues — bugs and feature requests
- GitHub Discussions — ideas and RFC
License
MIT © 2026 Paperclip Labs, Inc