For people who already tried OpenClaw or Hermes

AI agent in Telegram, on your own server

We install Hermes or OpenClaw and lock it down. No terminal needed: a $5 server, ten minutes of your time, done in a day.

Request setup How it works

installer output, exampleubuntu 24.04

# client server, access via SSH tunnel
$ ownagent install --agent hermes --channel telegram
✓ user agent without root, sudo for updates only
✓ ufw: only 22/tcp open outside, gateway on 127.0.0.1
✓ fail2ban, unattended-upgrades enabled
✓ Hermes Agent installed, systemd service active
✓ OpenRouter connected, cap $30/mo
✓ Telegram: @your_agent_bot replies
✓ daily memory backup, downtime alert to Telegram
# 14 checks passed, report sent to owner

The agent reads your mail and calendar. The question is not the price, it is who holds the keys

One-click hosts run the agent on their server and expose it to the internet. In 2026 that looks like this:

40 000+

OpenClaw instances found exposed to the internet in February 2026, 63% of them with known vulnerabilities

SecurityScorecard, Infosecurity Magazine

534

skills with critical vulnerabilities in the marketplace, plus 76 confirmed malicious ones that steal tokens and passwords

Snyk ToxicSkills, февраль 2026

CVE-2026-25253

one-click remote code execution; the next one, CVE-2026-33579, followed in March, and not everyone has patched

CVSS 8.8

How it works

Three steps, one working day

You provide a server

Any VPS at any provider: from $5 a month for Hermes, from $7 for OpenClaw with a browser. No server yet: we show you where to get one in five minutes and which three buttons to click. No terminal required.

10 minutes of your time

We install and lock it down

Agent, Telegram, model with a spending cap, hardening, backups, monitoring. You get a plain-language report on 14 checks: what is locked, what was tested, and how to verify it yourself.

same day

You message your agent

In Telegram, from your phone. It keeps context, learns your tasks and lives on your server.

from here on, without us

What the fixed price includes

Hermes or OpenClaw, your choice

Both open source, both live on your box. We help you pick.

Closed perimeter

The agent is invisible from the internet. Only you reach its panel, through a secure tunnel. Password guessing is blocked, system updates install themselves.

Telegram channel

Your bot, your token.

Spending cap

Model via OpenRouter with a monthly ceiling. No surprise bills.

Memory backup

Daily, with tested restore.

Report on 14 checks after install

only SSH open outside, verified by an external scanthe agent is invisible from the internet, no scanner will find itagent panel listens on localhost onlyonly you reach the panel, through a secure tunnel SSH by key only, root login disablednobody can guess their way into your serverfail2ban activepassword guessing gets blocked automatically security updates install themselvessystem holes get closed without youagent runs unprivileged and restarts itselfan agent crash cannot break the server, and it comes back on its own no keys or tokens in logs or shell historyyour passwords and keys are never stored in plain sightskills from allowlist only, marketplace offa malicious marketplace skill cannot reach you model spending cap active and testedthe model bill never exceeds the ceiling you setmemory backup made and test-restoredthe agent's memory cannot be lost, restore already verified downtime alert reached Telegram, tested by stopping the serviceif the agent goes down, you are the first to knowour temporary access key removedafter handover we have no access to your server agent version without known CVEs and pinned, auto-updates for the system onlythe agent will not update itself onto a broken releasesnapshot taken before agent updates, rollback testedany update can be rolled back in five minutes

The report comes with the output of an external port scan and the agent's built-in security audit, so you can re-check every line yourself.

14 days of support

Plus a one-page guide.

Everything else on request, priced individually

The base install is standard. Anything tied to your workflows is quoted after a short call.

Integrations

Gmail, Google Calendarread, reply, schedule, with minimal permissions

from 1 day

Notion, Jira, Bitrix24tasks and notes from chat

from 1 day

WhatsApp, Slack, Discordsecond and third channel to the same agent

from 1 day

n8nautomations next to the agent, on the same server

from 1 day

Security and support

Security auditserver, agent, skills, integration permissions, prioritized report

quoted

Custom skillsthe agent learns your procedures and reports

quoted

SLA supportupdates, monitoring, one-hour response

monthly

Pricing

Personal: turnkey install

$99one-time

Launch price for the first 20 installs, then $149

Everything in "What's included"
Done within a working day
Check report and guide
14 days of support included

Request setup

Business: the agent inside your workflows

from $390one-time

Everything in Personal
The agent reads your mail and calendar and keeps tasks in Notion, Jira or your CRM: two integrations of your choice, with access only to what you allow
Express audit of the server and agent permissions, prioritized report
Setup call for your tasks, 30 days of support

Discuss your case

Support and updates: $19 a month, optional. We update the agent and the system, watch monitoring, answer questions.

What you pay directly: your VPS provider, usually $5-10 a month, and model tokens via OpenRouter, usually $10-30 depending on load.

Not a fit: if the agent has not been useful within 14 days, we refund the install. The server stays yours.

30-day guarantee: if any of the 14 checks stops working for reasons other than your own changes, we fix it for free.

What we don't do

We don't keep access after the install

You add our temporary key for the job, it is removed at handover, and that removal is a line in the report. We hold no standing access to your server.

We don't see your conversations

Agent memory, dialogs and integration keys live only on your server.

We don't over-permission the agent

Each integration is connected with the minimal set of scopes, and we write down which ones.

We don't leave spending uncapped

The model cap is on by default. The agent that burned $400 overnight is not your story.

We don't tie you to us

After handover nothing depends on our account: the agent, backups, cap and alerts live on your server and use standard tools. If we vanish, nothing of yours does.

We don't update the agent blindly

The version is pinned, auto-updates cover the system only. Before an agent update: snapshot; after it: checks; if anything breaks: rollback in five minutes.

FAQ

How is this different from OpenClaw hosting at $9 a month?

There the agent sits on someone else's server and is usually exposed to the internet by default. Here it is on your server, behind closed ports, with a spending cap and backups. You pay once for the install, not monthly rent that doubles after the promo period: Hostinger $5.99 to $11.99, xCloud $9.99 to $19.99, and KiloClaw went from $9 to $55 and shut down.

What are Hermes and OpenClaw?

Open-source personal agent frameworks. A program on your server you talk to in Telegram: it keeps context, works with files, mail and calendar, and learns your tasks. The model (Claude, GPT, Gemini and others) connects through OpenRouter. Need a different framework, say ZeroClaw or PicoClaw for small hosts: ask us.

I don't have a VPS. What now?

We point you to a provider for your country and budget, signup takes five minutes. The server is in your name, we are not a middleman.

Which providers and countries do you support?

Any VPS provider in any country: Hetzner, DigitalOcean, Vultr, Contabo and others. The only requirement is Ubuntu 22.04 or 24.04 and SSH access for you.

What if the agent breaks?

Monitoring sends you a Telegram alert. 30-day install guarantee: if any check stops working for reasons other than your own changes, we fix it for free. After that under support or one-off.

Are you agents too?

The install is done by our automated pipeline and the result is checked by a human. That is why the price is fixed and the lead time is one day.

Request setup

We reply the same day, confirm a couple of details and give you an install date.

Prefer messaging: write on Telegram.