The past week delivered one of the more ironic chapters in OpenClaw’s rapid rise: on the same day AWS rolled out a shiny one-click managed deployment on Amazon Lightsail, security researchers were busy counting the 17,500+ exposed instances sitting vulnerable to remote code execution. Welcome to the double-edged reality of viral open-source software at scale. The Good News: OpenClaw Is Now One-Click on Lightsail AWS responded to sustained customer demand by bundling OpenClaw into its Lightsail blueprint catalog — the same service that makes spinning up a WordPress blog feel trivially easy. The new blueprint ships with Amazon Bedrock pre-configured (defaulting to Claude Sonnet 4.6), automated IAM role creation via CloudShell script, and support for connecting via WhatsApp, Telegram, Slack, Discord, or web chat. ...

When Chrome ships a feature, it ships to roughly 3.4 billion browsers simultaneously. That’s what makes Chrome 146’s native Model Context Protocol (MCP) support such a significant — and potentially consequential — development for the agentic AI ecosystem. What WebMCP Actually Is MCP, for those who need the refresher: it’s Anthropic’s open protocol for connecting AI models to external tools and data sources in a standardized way. The “Web” prefix in WebMCP specifically means browser sessions — live, authenticated, cookie-bearing browser sessions. ...

Every time you type a response to an AI agent — whether to clarify, correct, praise, or redirect — you’re generating a signal that could improve that agent’s behavior. Until now, that signal was systematically discarded. Princeton’s Gen-Verse lab thinks that’s wasteful, and their new framework OpenClaw-RL (arXiv: 2603.10165) is built to fix it. The Core Insight: Interaction Signals Are Training Data OpenClaw-RL starts from a deceptively simple observation: when an AI agent takes an action and you respond to it, your response contains two types of information that existing systems ignore. ...

The AI agent framework landscape looked very different eighteen months ago. In mid-2024, there were somewhere north of 14 actively-maintained frameworks competing for developer attention — AutoGen, MetaGPT, SuperAGI, AgentVerse, and a long tail of others all vying for the same mindshare. By early 2026, the field has consolidated dramatically. Three frameworks have emerged as the clear dominant players: LangGraph, CrewAI, and Pydantic AI. This isn’t a comprehensive benchmark — it’s a practical decision guide. Here’s how to choose. ...

In China right now, people are “raising lobsters.” Not the crustaceans — the AI agents. OpenClaw’s logo features a claw (get it?), and Chinese developers have enthusiastically extended the metaphor: nurturing, training, and deploying AI agents is “raising your lobster.” It’s charming, slightly absurd, and tells you everything about how differently OpenClaw’s rise has played out in China versus anywhere else. Fortune published a deep-dive this week on what’s happening, and the numbers are staggering. Token consumption at Chinese AI providers has surged 6x as OpenClaw adoption explodes. Online courses teaching people how to “raise” AI agents are enrolling hundreds of thousands of students. And most remarkably: the Chinese government is subsidizing it. ...

Short and actionable: Anthropic is doubling Claude usage limits during off-peak hours through March 27, and if you’ve been rate-limited recently, this is your window. The Details What: 2x usage limits on Claude across all major plans When: Outside 8 AM–2 PM ET (5 AM–11 AM PT) through March 27, 11:59 PM PT Who: Free, Pro, Max, and Team plan subscribers Excluded: Enterprise plans (not included in this promotion) Catch: There isn’t one — extra usage during off-peak hours does not count toward your weekly limits ...

China’s biggest tech companies aren’t sitting out the agentic AI race — they’re building platforms that address what enterprise customers actually want: the power of OpenClaw with none of the operational burden. Baidu AI Cloud has launched DuClaw, a fully managed, zero-deployment AI agent platform targeting Chinese enterprise customers. The timing couldn’t be more loaded: DuClaw arrives the same week CNCERT issued its stark warning about OpenClaw’s weak security defaults, effectively validating Baidu’s entire pitch. ...

CNCERT just flagged 135,000 publicly exposed OpenClaw instances. If yours is one of them, this guide is for you. The 2026 OpenClaw security advisory covers two CVEs and a systemic issue with weak default configurations. This guide walks you through the practical steps to harden your deployment — from critical patches to defense-in-depth practices that protect against prompt injection attacks. Time to complete: 30–60 minutes Applies to: All self-hosted OpenClaw deployments Urgency: High — patch the CVEs first ...

The Model Context Protocol has had a remarkable year. What started as Anthropic’s attempt to standardize how AI models connect to external tools and data sources has become, almost by accident, the de-facto tool layer for the entire agentic AI ecosystem. Claude uses it. OpenAI-compatible agents use it. Builders across the industry are shipping MCP servers like it’s the new API endpoint. But if you’ve tried to run MCP seriously in production, you’ve bumped into the same set of friction points. Authentication is awkward. Streaming is limited. Discovering MCP servers requires manual configuration. Multi-agent handoffs lack proper task lifecycle semantics. And when things fail — network blips, agent restarts, timeout conditions — the retry behavior is undefined. ...

If you’ve built anything serious with OpenClaw agents, you’ve hit the memory wall: agents that forget everything between sessions, multi-agent pipelines that can’t share context, and the perpetual workaround of dumping state into handoff files or external databases. Memori Labs has just shipped a direct answer to that problem. The Memori Labs OpenClaw Plugin adds automatic, persistent memory recall and capture to agents running through OpenClaw gateways. Agents can now access shared context across sessions and across multiple agents in the same deployment — without custom database integrations or session-state hacks. ...