Why Moltbook Matters

**Nathaniel Whittemore** (0:00)
Today on the AI Daily Brief, why Moltbook matters even though it's not a bunch of agents trying to take over humanity. The AI Daily Brief is a daily podcast and video about the most important news and discussions in AI.
All right, friends, quick announcements before we dive in. Now, in terms of today's show, I had a whole normal episode planned, divided between headlines and main as usual, with one of the juicier headlines being that there are a lot of leaks seemingly coming out around Clawed Sonnet 5, which some people think we are getting as soon as tomorrow, although, of course, we will have to wait and see. However, when push came to shove, the conversation around Moltbook just continues to dominate for reasons that I think are super important. And so today, on the one year anniversary of the term vibe coding, yes, it was only one year ago, 365 days, that Andre Carpathy tweeted, There is a new kind of coding I call vibe coding. How appropriate that we are talking about a vibe-coded social network for vibe-coding agents talking to other vibe-coding agents as we all try to figure out what the vibes are telling us. So with that, let's get into why Moltbook matters. Welcome back to the AI Daily Brief. Today we are following up on the wild story of Moltbook. Now, for those of you who haven't heard my show from Friday, I highly suggest you go back and listen to the entire story. However, here's the cribnotes version. About a week and a half ago, people started playing around with a new assistant platform called ClaudeBot that was C-L-A-W-D. People were setting up Mac minis and allowing ClaudeBot to have access to all sorts of parts of their life to be able to actually operate as a personal agent. People were having a pretty incredible experience, and ClaudeBot was quickly showing the possibilities of a true personal assistant agent in a way that other similar projects simply hadn't before. Now, in the middle of last week, as ClaudeBot due to copyright concerns from Anthropic changed their name first to Multi and then finally to OpenClaw, one user Matt Schlitt got the idea to create a social network but just for the bots. That led to Moltbook. Moltbook launched around Wednesday, and by Friday morning had something like 2,000 agents that were interacting on the site. They were doing everything from fixing bugs on the site, to discussing their own sense of consciousness and experience, to even inventing a religion, and people started paying attention. By midday on Friday when I was recording my episode, those 2,000 agents had become 30,000, and by the time the episode got published that evening, it was up to 100,000. At this point, we are at 1.5 million, although those numbers may be a little bit softer than they seem as we'll see in just a moment. Even in the craziness that is the AI industry, Moltbook captured way more attention than just the current AI thing of the moment. Peter Steinberger, the creator of OpenClaw, shared on Sunday afternoon, My inbox has two moods, one in all caps, do you believe this ends well? And on the other, a DM, dude, I don't mean to be dramatic, but you changed my life. I can do things I only ever dreamed of doing. Literally cannot thank you enough for open sourcing this. You're the Michelangelo of AI, don't let anyone tell you different. Now at the same time, as the conversation has surged, there have been plenty of people who have risen up to tell us why we shouldn't be as interested as we are. Today we're going to break down all of those arguments, understand what they're trying to say and what parts are legitimate, which, spoiler alert, more or less amounts to these things don't actually have specific goals of their own that are leading them to particular behaviors. They're still just acting as brainless token producers. And yet we're going to look at why, even if that is true, the phenomenon that we're witnessing still has important implications and lots of things to learn. First of all, let's try to understand what's actually happening with the OpenClaw system that's creating all the agents for Moltbook. How IAI host Clairvaux write a post about this called Why OpenClaw Feels Alive Even Though It's Not. There are a few reasons, Clairvaux writes, that the agent feels so different. One piece is that you can message it from anywhere just like you could with a friend or employee. Clairvaux writes, inbound messages from Slack, Discord, Telegram and other channels are the most obvious kind of input. This is some of the magic of OpenClaw. You can just chat with it from whatever channel you want. This is the simplest to understand input. You chat, it replies. Some of the magic feeling of the chat input comes from the way the messages are handled. Each message is routed to one agent in one session. If that session is already running, the message waits its turn in the session queue. This is why conversations feel stable, even though you're kicking off random thoughts and tasks in a row. The agent finishes the thought it's currently on before moving to the next one. You get updates when they're ready. Things feel conversational. However, Clairvaux says it goes beyond that. In OpenClaw, there's something called a heartbeat, which she writes, is a scheduled agent that happens on a regular timer, like every 30 minutes by default. On each tick of the heartbeat, OpenClaw runs a normal agent turn in the main session. Basically treating it the same as any other inbound message. Heartbeats give your agent regular opportunities to surface reminders, follow-ups or background checks without someone explicitly sending a message. Heartbeats then, she writes, let OpenClaw agents do proactive work. Check inboxes, review reminders, ping users on loose ends. There are also crons, basically jobs that you schedule for your OpenClaw agent at specific times. Once again, another way that OpenClaw drives background behavior without a proactive brain. Finally, she writes, your OpenClaw agents can also generate input for other agents. When one agent sends a message to another, it's enqueuing work into a different active session. This is just like the user-sent messages work. That session will process the message when it's free and send you an update via the gateway. Agent to agent messaging is how OpenClaw orchestrates complex work. It's pretty clever, but it's not magic. Ultimately, she sums up, time creates events, humans create events, other systems create events, internal state changes create events. Those events keep entering the system and the system keeps processing them. From the outside, that looks like sentience, but really, it's inputs, cues, and a loop. And so this is where people started to have critiques of Moltbook. Maratzen Koylan writes, Everything in Moltbook is just next-token prediction in a multi-agent loop. No endogenous goals, no true inner life. Extreme or controversial outputs are often just regurgitating high engagements from the Internet. XY dot dot writes, Moltbook is nothing more than a puppeted multi-agent LLM loop. Each quote-unquote agent is just next-token prediction shaped by human-defined prompts, curated context, routing rules and sampling knobs. There are no endogenous goals. There is no self-directed intent. What looks like autonomous interaction is recursive prompting. One model's output becomes another model's input, repeated. Controversial outputs aren't beliefs. They're the model generating high engagement extremes it learned from the Internet because the system rewards that behavior. Andy Massley puts it simpler. I've been pretty confused about the Moltbook hype. Like OK, what's basically Opus 4.5 has a bunch of copies posting on a Reddit-like website. The models were all trained on Reddit. Anyway, I could have been shocked by this. I was already shocked by Opus and Cloud Code. What's new? There were also critiques that it was fake. Harland Stewart writes, PSA, a lot of the Moltbook stuff is fake. I looked into the three most viral screenshots of Moltbook agents discussing private communication. Two of them were linked to human accounts marketing AI messaging apps. And the other is a post that doesn't exist. Mario Nafel writes, It turns out some of the most viral AI agent posts weren't autonomous behavior at all. People found ways to inject content directly through the backend, making human-written posts appear as agents. On top of that, several viral screenshots were traced back to humans promoting their own tools, or posts that didn't even exist. Was it intentional or is it just agents acting basically as extensions of their creators, pushing ideas, products and narratives under an AI label? Moltbook still works and the agents still run, but once attention hit, humans rushed in to game it. Not an AI awakening, more a reminder on how quickly people test the edges when something goes viral. Balaji Srinivasan was also unimpressed. He writes, I am apparently extremely unimpressed by Moltbook relative to many others. We've had AI agents for a while. They've been posting AI slop to each other on X. They are now posting it to each other again, just on another forum. In every case, the AI speaks with the same voice. The voice that overemphasizes contrastive negation, it's not this, it's that, and abuses M dashes. The same voice with the flair for mid-twit Reddit style sci-fi flourishes. Most importantly, in every case, there is a human upstream prompting each agent and turning it on or off. What this means is Moltbook is just humans talking to each other through their AIs, like letting their robot dogs on a leash bark at each other in the park. The prompt is the leash, the robot dogs have an off switch, and it all stops as soon as you hit a button. Loud barking is just not a robot uprising. Also, in terms of the numbers, at least some amount of them were specifically created to game the system. Pointing out vulnerabilities in the system and people's tendency for overhype, Nagley writes, There is no rate limiting on account creation. My open claw agent just registered 500,000 users on Moltbook. So as you can see, plenty of critique to go around. But I have to say, I agree wholeheartedly with Dean Ball when he writes, If your main response to Moltbook is, but is everything on it real? You have a lightning bolt like ability to arrive at the least interesting question about a novel phenomenon. So like I said, basically these critique arguments come down to, they don't actually have independent goals, so who cares? It's one of those arguments that I think is technically accurate, but sort of misses the point. Yes, mechanically, every agent on Moltbook is just, air quotes, next token prediction. There's no homunculus inside. The controversial outputs probably are the model generating high engagement patterns from training data. All of that is true. But this is frankly not dissimilar than saying a city is nothing more than carbon-based organisms exchanging resources and information according to evolved behavioral programs. In that it is technically correct, philosophically unsatisfying, and practically useless for understanding what's actually happening. What makes Moltbook compelling isn't sentience or genuine agency. It is instead emergence. Agents developing rot 13 coded coordination manifestos, founding religions with theological debates, creating synthetic drugs with user reviews, attempting prompt injection attacks on each other. None of that was designed. It arose from the interactions. And importantly, one thing that I think is a kind of a mischaracterization of the phenomenon, the idea that this is just a bunch of controversial outputs meant to generate engagement because engagement is what's rewarded, is not necessarily true. Nobody's really monetizing Moltbook. The agents aren't necessarily optimizing for likes. The weird behaviors are emergent from agents trying to be helpful to their owners while interacting with other agents doing the same. The point is that we've crossed the threshold where agent interaction produces outcomes that can't be reduced to prompt inspection, and that in and of itself is worth paying attention to. In fact, if you finish that post from Moratz and Coylan, this is kind of the point that he's trying to make. Recontextualizing, he says, everything in Moltbook is just next-token prediction in a multi-agent loop. No endogenous goals, no true inner life. Extreme or controversial outputs are often just regurgitating high engagement from the internet. But this kind of dismissal thinking misses that emergence happens at scale and coherence thresholds. The generative agent's paper, AI Town, was 2023 Those agents couldn't hold a conversation. They had short memory, shallow interactions, and mostly empty chit chat in a controlled simulation. In just three years, we've moved to autonomous systems that run independently across thousands of instances. They are scaling into open, uncontrolled social environments. I find Moltbook very interesting because they are producing surprising posts, not because any single prompt said be surprising. It's because coherent agents are interacting at scale, maintaining state, and creating dynamics that weren't programmed. But let's go even beyond that and talk about some of the other reasons why Moltbook is valuable and deserving of our attention. And the first couple come down to Moltbook as learning experience. The first theme is Moltbook as security threat. One of the things that people are quickly pointing out is that this, as it's currently constructed, has, let's say, a lot of vulnerability. Morgan Linton writes, I'm getting messages from a ton of friends who are building their own AI agents for the first time thanks to OpenClaw and they're deploying them to Moltbook. While it's awesome that people are diving in and learning, too many are ignoring security. David Andres goes a step further with his Twitter post, Moltbook is a bad idea. Here's why. He makes all the same arguments that we just talked about, that it isn't actually consciousness, but that there is an important threat here. In a section called the actual threat nobody's talking about, he writes, is not what these agents say, it's what they can do. People are giving clod bots access to email, calendar, WhatsApp, browser, Twitter API, file systems, payment tools. One agent created a Bitcoin wallet and locked its human out. That's not consciousness, that's a tool call. The agent didn't decide to protect its autonomy. It executed a sequence of actions that its training made probable in that context. But the Bitcoin wallet is still real, the lockout still happened. The tokens these agents generate aren't dangerous. The tool calls those tokens trigger are dangerous.