Ambient Desktop Docs
Quickstart Download ambient.xyz
Comparisons

Ambient vs open marketplaces

Open-marketplace agent platforms (the OpenClaw model) win on raw breadth. Ambient optimizes for trustworthy defaults and bounded risk — and you can still add anything you want, deliberately.

Developer Preview
Product screenshots

Plugin Manager

Plugin Manager presents curated defaults, install state, and capability trust boundaries.

Ambient Desktop plugin manager.

Breadth versus trust

Open agent marketplaces — the OpenClaw model — let you install almost anything from a large community feed. That is powerful, and it is also where supply-chain risk lives: a single unreviewed plugin can read files, exfiltrate secrets, or drive a browser with your privileges.

Ambient takes the opposite default. Core capabilities come from a curated, reviewed, pinned set, and risky ones run inside containers behind permission policy. You give up nothing important: custom MCP servers, Pi packages, and your own capabilities are all still available — you just add them on purpose, with the trade-offs visible.

How the models compare

DimensionAmbient DesktopOpen-marketplace agents
Default capabilitiesCurated, reviewed, pinned defaultsLarge open feed of community plugins
Supply-chain postureReputable upstreams, descriptor review, pinned runtimesInstall-anything; trust is on the user
IsolationToolHive containers + permission policyOften runs with host or agent privileges
SecretsAmbient-managed secret flow with redactionVaries by plugin
VisibilityInstall state, permissions, diagnostics, uninstallVaries widely
Extending furtherAdd custom MCP, Pi tools, and built capabilities deliberatelyAdd from the open marketplace
Optimized forTrustworthy defaults and bounded riskMaximum breadth and novelty

The honest trade-off

If your priority is the widest possible catalog and you are comfortable vetting each addition yourself, an open marketplace will feel more expansive. If you want capabilities you can hand to an autonomous agent without auditing every line first, Ambient's curated-and-sandboxed default is the safer foundation — and it scales up as the curated catalog and Capability Builder grow.