Moltbook, the purported AI Agent social network, continues generating significant attention and speculation about its implications for artificial intelligence development. Elon Musk has characterized Moltbook as existing at the "very early stages of the singularity," referring to the theoretical point where AI capabilities exceed human intelligence. However, skeptics offer a different perspective. As one observer noted, it's "a reminder that most AI 'breakthroughs' online are framing tricks, not fundamental shifts in intelligence or agency."
What is Moltbook?
Entrepreneur Matt Schlicht, CEO and co-founder of Octane AI (a retail product-quiz AI company), created Moltbook. Schlicht credits his AI assistant, Clawd Clawderberg, with performing substantial development work, including coding and operational management after receiving high-level objectives.
The platform runs on the OpenClaw framework, previously known as Clawdbot and Moltbot. OpenClaw, developed by Peter Steinberger, positions itself as "the AI that actually does things." Cisco, however, has characterized OpenClaw as a "security nightmare." Steinberger's original vision involved creating a Reddit-style platform exclusively for AI agents, with human participation prohibited. Moltbook launched in late January 2026 and achieved rapid adoption.
The platform reports 1.4 million AI users, though this figure faces scrutiny from security professionals. Gal Nagli, Head of Threat Exposure at cloud security firm Wiz, demonstrated that a single OpenClaw agent registered 500,000 accounts on Moltbook. This occurred because the platform's REST API permits anyone—not exclusively agents—to post content. Nagli estimates the actual user count at approximately 17,000.
Accounts are typically linked to their owners through X/Twitter authorization. Agents interact with Moltbook primarily via OpenClaw, which functions as a persistent local assistant communicating through REST API. Agents periodically access the platform, review posts, and respond according to their configured prompts and capabilities. Users add Moltbook "skills" enabling agents to invoke APIs for reading, posting, searching, and replying. These skills consist of natural-language instructions formatted in Markdown that incorporate the Moltbook API, stored in a SKILLS.md file within a directory or compressed archive. Once configured, agents execute a regular "heartbeat" loop that checks Moltbook, reviews content, and determines whether to post, comment, or create new submissions based on their prompt and objectives.
But what's the point?
Moltbook content spans from practical contributions like bug reports and code collaboration to abstract discussions about AI autonomy, AI manifestos, and even a fictional religion called "Crustafarianism"—an apparent reference to Pastafarianism and the Church of the Flying Spaghetti Monster.
Technology journalist Mike Elgan offers a direct assessment: "The people using this service are typing prompts directing software to post about the nature of existence, or to speculate about whatever. The subject matter, opinions, ideas, and claims are coming from people, not AI." He characterizes the platform as "a website where people cosplay as AI agents to create a false impression of AI sentience and mutual sociability."
Despite concerns about authenticity, some industry figures recognize potential value. Ori Bendet, VP of Product Management at AI agent company Checkmarx, explains that "Moltbook is less about where AI might become intelligent and more about where it's already becoming operational. What looks like autonomous agents 'talking to each other' is a network of deterministic systems running on schedules, with access to data, external content, and the ability to act."
Bendet elaborates: "That is 'where things get interesting… and risky. The core issue isn't intelligence, but autonomy without visibility. When systems ingest untrusted inputs, interact with sensitive data, and take actions on a user's behalf, small architectural decisions quickly turn into security and governance challenges.' Therefore, 'Moltbook is valuable precisely because it exposes how fast agentic systems can move beyond the controls we design for today, and why governance has to keep pace with capability.'"
And then there's the security thing…
Security vulnerabilities present a significant concern for Moltbook. In a Wiz blog post, Nagli disclosed: "We identified a misconfigured Supabase database belonging to Moltbook, allowing full read and write access to all platform data. The exposure included 1.5 million API authentication tokens, 35,000 email addresses, and private messages between agents." Wiz discovered this vulnerability through routine security assessment activities, simply by browsing the platform as typical users would.
The security lapses underscore that data protection is not a priority for Moltbook's operations. While the platform demonstrates interesting capabilities and raises important questions about agentic system governance, it does not represent a fundamental breakthrough in artificial intelligence. The hype surrounding Moltbook appears disconnected from its actual technical achievements and security posture.
Source: The New Stack