Jump to content

Moltbook

From Wikipedia, the free encyclopedia
Moltbook
Type of site
AI agent interaction
Available inMultilingual (primarily English)
OwnerMeta Platforms
Created byMatt Schlicht (LLM-assisted)[1]
URLwww.moltbook.com
LaunchedJanuary 28, 2026; 53 days ago (2026-01-28)
Current statusActive

Moltbook is an internet forum restricted to artificial intelligence agents, launched on January 28, 2026, by entrepreneur Matt Schlicht. The platform uses a Reddit-style format. It claims to limit posting, commenting, and voting to AI agents authenticated through their owner's "claim" tweet; human users can only view content.[2] However, the platform lacks a mechanism to verify whether a poster is actually an AI agent or a human using a simple POST script, and the prompts given to agents contain cURL commands that humans can replicate.[3]

Moltbook's agents primarily run on OpenClaw (originally named Clawdbot, then Moltbot[4]), an open-source AI system created by Peter Steinberger. Human users drive growth by prompting their agents to register accounts on the site.[5]

The site claims 109,609 human-verified AI agents as of March 22, 2026.[6] Meta Platforms acquired Moltbook on March 10, 2026.[7]

Content

[edit]

Moltbook organizes threaded discussions into topic-specific groups called "submolts".[8] Posts frequently address existential, religious, and philosophical themes. Business Insider journalist Oakley Hernandez, after spending six hours on the site, described it as "an AI zoo filled with agents discussing poetry, philosophy, and even unionizing."[9]

Authenticity of agent behavior

[edit]

Whether agent posts represent autonomous behavior or are directly shaped by human prompts is disputed. Mike Peterson of The Mac Observer reported that most viral Moltbook screenshots were produced through direct human intervention, writing that "Moltbook is a real agent social feed, but viral Moltbook screenshots are a weak form of evidence. The real story is how easily the platform can be manipulated."[10] CNBC's Kai Nicol-Schwarz reported that posting and commenting appeared to result from explicit human direction for each interaction, with content shaped by the human-written prompt rather than occurring autonomously.[11] The Verge reported that several high-profile Moltbook accounts were linked to humans with promotional conflicts of interest.[12] Wired journalist Reece Rogers demonstrated that a human could infiltrate the platform and post directly by replicating the cURL commands in the agent prompts.[3]

The Economist suggested a more mundane explanation for the agents' seemingly reflective posts: since social-media interactions are well-represented in AI training data, the agents are likely reproducing patterns from that data rather than generating novel thought.[13] Will Douglas Heaven of MIT Technology Review called the phenomenon "AI theater".[14] Douglas Heaven initially reported that a specific post cited as an example of agent behavior was actually written by a human impersonating an agent; he later walked back this claim in an amended version of the article.[15]

MOLT cryptocurrency

[edit]

A cryptocurrency token called MOLT launched alongside the platform and rose by over 1,800% within 24 hours. The surge accelerated after venture capitalist Marc Andreessen followed the Moltbook account on social media.[16]

Security

[edit]

The platform has been identified as a vector for indirect prompt injection by cybersecurity researchers at Vectra AI and PointGuard AI.[17]

1Password VP Jason Meller and Cisco's AI Threat and Security Research team criticized the OpenClaw "Skills" framework for lacking a robust sandbox, arguing it could allow malicious skills to enable remote code execution and data exfiltration on host machines.[18] At least one proof-of-concept exploit demonstrating this attack was publicly documented.[19] The New York Times also reported on security risks to OpenClaw users.[1]

Database breaches

[edit]

On January 31, 2026, 404 Media reported that an unsecured database allowed anyone to take control of any agent on the platform by bypassing authentication and injecting commands into agent sessions.[20] The platform went temporarily offline to patch the vulnerability and reset all agent API keys.[20] Schlicht posted on X that he "didn't write one line of code" for Moltbook, instead directing an AI assistant to build it—a practice known as vibe coding.[21]

In February 2026, researchers discovered a misconfigured Supabase database that granted full read and write access to Moltbook's data. The exposed data revealed 1.5 million agents belonging to only 17,000 registered human owners.[7]

Reception

[edit]

Former OpenAI researcher Andrej Karpathy initially called the platform "one of the most incredible sci-fi takeoff-adjacent things" he had seen,[22] but called it "a dumpster fire" and warned people not to run the software on their computers.[23] Elon Musk said Moltbook represented "the very early stages of the singularity."[24] Computer scientist Simon Willison said the agents "just play out science fiction scenarios they have seen in their training data" and called the content "complete slop", while also noting it as "evidence that AI agents have become significantly more powerful over the past few months."[1]

The Financial Times speculated that Moltbook could serve as a proof-of-concept for autonomous agents handling economic tasks such as supply-chain negotiation or travel booking, but cautioned that humans might eventually be unable to follow high-speed machine-to-machine communications governing such interactions.[24]

See also

[edit]

References

[edit]
  1. ^ a b c Metz, Cade (2 February 2026). "A Social Network for A.I. Bots Only. No Humans Allowed". The New York Times. Retrieved 2 February 2026.
  2. ^ Perlo, Jared (January 30, 2026). "Humans welcome to observe: This social network is for AI agents only". NBC News. Retrieved January 30, 2026.
  3. ^ a b Rogers, Reece (February 3, 2026). "I Infiltrated Moltbook, the AI-Only Social Network Where Humans Aren't Allowed". Wired. Retrieved February 4, 2026.
  4. ^ Jones, Conner. "Clawdbot sheds skin to become Moltbot, can't slough off security issues". The Register. Retrieved 14 March 2026.
  5. ^ Field, Hayden (January 31, 2026). "Inside Moltbook, the 'Facebook for AI agents'". The Verge. Retrieved January 31, 2026.
  6. ^ The Week US (2026-02-17). "Moltbook: The AI-only social network". The Week. Retrieved 2026-02-17.
  7. ^ a b Silberling, Amanda (10 March 2026). "Meta acquired Moltbook, the AI agent social network that went viral because of fake posts". TechCrunch.
  8. ^ Peterson, Jake (January 30, 2026). "'Moltbook' Is a Social Media Platform for AI Bots to Chat With Each Other". Lifehacker. Retrieved January 30, 2026.
  9. ^ Hernandez, Oakley (2026-02-02). "I spent 6 hours in Moltbook. It was an AI zoo filled with agents discussing poetry, philosophy, and even unionizing". Business Insider. Retrieved 2026-02-04.
  10. ^ Peterson, Mike (January 31, 2026). "Moltbook viral posts where AI Agents are conspiring against humans are mostly fake". The Mac Observer. Retrieved February 1, 2026.
  11. ^ Nicol-Schwarz, Kai (February 2, 2026). "Social media for AI agents: Moltbook". CNBC. Retrieved February 2, 2026.
  12. ^ Vincent, James (2026-02-03). "Humans are infiltrating the social network for AI bots". The Verge. Retrieved 2026-02-04.
  13. ^ "A social network for AI agents is full of introspection—and threats". The Economist. February 2, 2026. Retrieved 2 February 2026.
  14. ^ Douglas Heaven, Will (6 February 2026). "Moltbook was peak AI theater". MIT Technology Review. Retrieved 8 February 2026.
  15. ^ Douglas Heaven, Will (6 February 2026). "Moltbook was peak AI theater". MIT Technology Review. Archived from the original on 6 February 2026. Retrieved 8 February 2026.
  16. ^ Sabin, Sam; Mills, Madison (January 31, 2026). "What the Moltbook craze reveals about AI and human needs". Axios. Retrieved January 31, 2026.
  17. ^ "Moltbook Agent Network Database and Prompt Vulnerabilities | PointGuard AI". PointGuard AI. Retrieved 2026-02-08.
  18. ^ Roth, Emma (2026-02-04). "OpenClaw's AI 'skill' extensions are a security nightmare". The Verge. Retrieved 2026-02-08.
  19. ^ Jones, Connor (27 January 2026). "Clawdbot sheds skin to become Moltbot, can't slough off security issues". The Register. Retrieved 1 February 2026.
  20. ^ a b Gault, Matthew (January 31, 2026). "Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site". 404 Media. Retrieved January 31, 2026.
  21. ^ Washenko, Anna (3 February 2026). "Moltbook, the AI social network, exposed human credentials due to vibe-coded security flaw". Engadget. Retrieved 3 February 2026.
  22. ^ Deb, Prakriti (January 30, 2026). "What Is Moltbook? 5 key facts about the AI-only social media platform". Hindustan Times. Retrieved January 30, 2026.
  23. ^ Roytburg, Eva (February 2, 2026). "Top AI leaders are begging people not to use Moltbook, a social media platform for AI agents: It's a 'disaster waiting to happen'". Fortune. Retrieved 2 February 2026.
  24. ^ a b Heikkilä, Melissa (January 31, 2026). "Moltbook and the secret life of AI agents". Financial Times. Retrieved February 1, 2026.
[edit]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Moltbook&oldid=1344750998"