What is Paperclip?
Paperclip is a Node.js server and React dashboard for running several AI agents at once. It does not build agents; it assigns work to ones you already use, such as Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Pi, Hermes and OpenClaw, and wraps them in an org chart, a ticket system, budgets, schedules and approval gates.
Agents wake on a heartbeat when a task is assigned, check it out with a lock so two runs cannot claim the same work, and report spend back to company, project and agent budgets. It launched in March 2026, runs locally with an embedded PostgreSQL on port 3100 and needs Node.js 24.11 or newer. A hosted Paperclip Cloud has a waitlist.
Is Paperclip worth it?
Paperclip solves a real problem that the coding agents themselves ignore: once you have several running, nobody knows which one is doing what or how much it has spent. Its answer is a task manager where agents are assignees. Tasks carry the goal they serve, a single assignee with an execution lock, and a thread of comments, files and run logs. Budgets apply per company, project and agent with warnings and hard stops, though the docs note that enforcement uses recorded spend, so a long run can overshoot before it is paused.
The pace is high and real. The project has merged 6,160 pull requests since March, and v2026.1106.0 on 6 November carried 515 commits, made a native Runner the default for new Claude, Codex, OpenCode and Pi agents, and added GitHub Copilot. It also removed the Pipelines feature outright, the kind of breaking change that comes with a project this young. The paperclipai npm package had 243,041 downloads in the 30 days to 13 November, which supports the 113,904 stars better than most viral repositories manage.
The catch: security. Paperclip runs agents with shell access and holds their credentials, and its advisory page lists 12 published issues, 5 rated critical, including unauthenticated remote code execution through an import authorisation bypass and a drive-by attack on local instances through DNS rebinding, published in July. All are fixed, but the pattern argues for the default loopback mode, Tailscale for remote access and prompt updates. With 3,769 open issues and 2,889 open pull requests, the backlog is as large as the momentum.
Our take: the "zero-human company" pitch is marketing, and independent reviewers who tried it found a person still writes the tasks and debugs the failures. As a dashboard for three or more agents with spend limits, it has no open-source equal.
Where it earns its place
A solo founder running Claude Code and Codex on several side projects
Stop losing track of which agent is working on what across a dozen terminals
Each piece of work becomes a ticket assigned to an agent, with its run log and diff attached, and sessions survive a reboot. Paperclip is free; the cost is the agents' own usage, capped by a per-agent budget.
An operations lead at a 20-person agency
Run recurring research and reporting jobs with agents without someone kicking them off
Routines create a task on a cron schedule or webhook and wake the assigned agent, with approval gates before anything is sent. Keep the server on loopback or Tailscale given the critical advisories.
An engineering manager trialling agents across five developers
Give developers shared agents without handing out raw provider keys
Authenticated mode adds human roles, company-scoped secrets and per-person connections, so agents act through the account of the person directing the work. Expect to track breaking changes between monthly releases.
Before you commit
- Setup
- `npx paperclipai@latest onboard --yes` on Node.js 24.11+ starts a local instance with embedded PostgreSQL on localhost:3100; `npx paperclipai test-drive` gives a throwaway instance with a CEO agent.
- Integrations
- Adapters for OpenClaw, Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Pi, Hermes, Grok Build, Kimi Code and GitHub Copilot; MCP servers; apps such as GitHub, Notion, Slack, Google Workspace and Daytona sandboxes; OTLP and Braintrust tracing.
- Data and privacy
- Self-hosted: tasks, logs, secrets and files stay in your PostgreSQL and storage. Prompts go to whichever providers your agents use. Prompt-injection screening with an OpenRouter model is available but off until configured.
- Cost at scale
- No licence cost. Spend is the agents' model usage; budgets stop work at limits, but enforcement uses recorded spend, so in-flight runs can exceed them.
- Limits
- Default mode trusts the local machine; remote use needs authenticated mode. Breaking changes land in releases, and 12 security advisories have been published since April 2026.
What’s good
- Works with most major coding agents through adapters
- Atomic task checkout stops duplicate runs
- Budgets with hard stops per company, project and agent
- Very active: 6,160 merged pull requests
What’s not
- 12 security advisories, 5 critical, in eight months
- Breaking changes between releases
- 3,769 open issues
- Little value for a single agent
Best for
Developers and small teams running three or more coding or business agents who need tasks, spend limits and review in one place.
Paperclip alternatives
Paperclip: common questions
- Is Paperclip worth it?
- Paperclip keeps a dozen agents on task and on budget better than any open-source rival, but its security record says keep it off the open internet. We rate it 3.8 out of 5.
- How much does Paperclip cost?
- Free and open source (MIT), self-hosted. You pay for the agents' model usage; Paperclip Cloud pricing not published.
- What are the downsides of Paperclip?
- 12 security advisories, 5 critical, in eight months; breaking changes between releases; 3,769 open issues; little value for a single agent.
- Who is Paperclip best for?
- Developers and small teams running three or more coding or business agents who need tasks, spend limits and review in one place.
- How much does Paperclip cost for a team or in production?
- No licence cost. Spend is the agents' model usage; budgets stop work at limits, but enforcement uses recorded spend, so in-flight runs can exceed them.
- Is Paperclip safe for company data?
- Self-hosted: tasks, logs, secrets and files stay in your PostgreSQL and storage. Prompts go to whichever providers your agents use. Prompt-injection screening with an OpenRouter model is available but off until configured.
- What are the best Paperclip alternatives?
- The closest alternatives we have reviewed are Vibe Kanban, OpenClaw and CrewAI.
Answers checked Nov 14, 2026.