OpenAI Offers ChatGPT Subscriptions to OpenClaw’s 3.2M Users as Anthropic Blocks Claude

OpenAI has officially opened ChatGPT subscriptions to users of OpenClaw, the open-source AI agent framework that now boasts over 3.2 million users and 346,000 GitHub stars. For $23 per month, subscribers can run autonomous agents powered by GPT-5.4 on their own hardware. This move stands in sharp contrast to Anthropic’s decision to block Claude subscriptions from OpenClaw in April, creating a clear competitive divide: OpenAI is betting on distribution, while Anthropic is protecting margins.

Sam Altman posted on X at 2:33 a.m. on May 2: “you can sign in to openclaw with your chatgpt account now and use your subscription there! happy lobstering.” The casual tone belies the significance of the announcement. OpenAI has effectively turned its ChatGPT subscription into the authentication and billing backbone for OpenClaw, the fastest-growing project in GitHub history. It accumulated 346,000 stars in under five months and is now used by more than three million people. ChatGPT Plus subscribers can log in via OAuth, access GPT-5.4 through the Codex endpoint, and run autonomous AI agents on their own machines for a flat $23 per month. OpenAI didn’t build the most popular AI agent in the world. It hired the developer, backed the foundation, and opened the login.

The Lobster

OpenClaw was created in November 2025 by Peter Steinberger, an Austrian developer who previously sold a software company for $100 million. He was experimenting with AI coding tools in a Madrid cafe when he built the first version, called Clawdbot , a play on Anthropic’s Claude, complete with a lobster mascot. After Anthropic filed a trademark complaint, Steinberger renamed it Moltbot, then, because that “never quite rolled off the tongue,” settled on OpenClaw. The lobster stayed.

The product is a locally hosted AI agent that connects to major language models , Claude, GPT, DeepSeek, and others , and operates through messaging apps people already use: WhatsApp, Telegram, Signal, Discord, Slack, iMessage, and Microsoft Teams. It manages calendars, sends emails, organizes files, writes code, browses the web, and executes multi-step workflows autonomously. Data stays on the user’s machine, and the agent runs continuously in the background. At Nvidia’s GTC conference in March, Jensen Huang called it “the most popular open-source project in the history of humanity.” It surpassed React’s ten-year GitHub record in just 60 days.

In February, Altman announced that Steinberger was joining OpenAI to “drive the next generation of personal agents” and that OpenClaw would move to an independent foundation with OpenAI’s continued support and funding. Sequoia distributed 200 engraved Mac Minis at an AI event as OpenClaw became the infrastructure layer that venture capitalists could not own. The signal from Silicon Valley’s most influential firms was clear: the agent layer would be open, and business models would have to be built around it, not on top of it.

The Opposite Bets

On April 4, Anthropic blocked Claude Pro and Max subscribers from using their flat-rate plans with OpenClaw and other third-party agent frameworks. The reason was cost. OpenClaw agents running autonomously can generate thousands of API calls per day, consuming far more compute than a human typing queries into a chat window. Anthropic decided that unlimited subscription access through an agent framework was economically unsustainable and shut it down.

Anthropic’s decision to ban OpenClaw from Claude subscriptions was a defensive move to protect margins. OpenAI’s decision to do the opposite , to open ChatGPT subscriptions to OpenClaw , is an offensive one. By making ChatGPT the default backend for the world’s most popular agent framework, OpenAI is betting that the volume of new subscribers will more than compensate for the increased compute cost per user. The economics only work if OpenClaw converts a significant number of its 3.2 million users into paying ChatGPT subscribers. If it does, OpenAI will have acquired a distribution channel for its subscription product that no amount of marketing could have built.

The competitive dynamics are stark. Anthropic looked at OpenClaw and saw a cost problem. OpenAI looked at the same product and saw a distribution opportunity. One company locked the door. The other opened it and handed out the keys.

The Risks

OpenClaw’s rapid growth has been accompanied by equally rapid security failures. In late January, a critical remote code execution vulnerability, CVE-2026-25253, was disclosed: any website a user visited could silently connect to the agent’s local server through an unvalidated WebSocket, chaining a cross-site hijack into full code execution on the user’s machine. Security researchers audited ClawHub, OpenClaw’s skills marketplace, and found 824 confirmed malicious entries out of 10,700 available skills, with 335 traced to a single coordinated attack operation. More than 30,000 OpenClaw instances were found exposed on the public internet without authentication. Moltbook, the social layer for agents, suffered a breach that exposed 1.5 million API tokens and thousands of private conversations.

The vulnerabilities have been patched in current versions. The problem is that a significant portion of the installed base is running older, unpatched versions. Anything before version 2026.1.30 remains vulnerable to at least some of the disclosed exploits, and attackers are still targeting them. OpenAI’s decision to tie its ChatGPT subscription to OpenClaw means that OpenAI’s brand, its billing system, and its user credentials are now flowing through an open-source platform that has had more security incidents in four months than most enterprise software accumulates in a decade.

The Ecosystem

Nvidia turned OpenClaw into an enterprise platform with NemoClaw, adding security hardening, compliance features, and integration with Nvidia’s inference infrastructure. Tencent launched ClawPro, an enterprise AI agent platform built on OpenClaw’s architecture and optimized for the Chinese market. Meta launched Manus AI as a desktop agent, a competing approach that runs as a native application rather than through messaging apps. The agent layer is now a battlefield where every major technology company is staking a position.

The ChatGPT subscription integration positions OpenAI at the center of this ecosystem without requiring it to own or control the agent framework itself. OpenClaw remains open source, governed by an independent foundation, and compatible with multiple language model providers. But with Anthropic blocking access and OpenAI enabling it, the practical effect is that OpenClaw’s three million users are being funneled toward ChatGPT as their default model. The foundation structure gives OpenAI deniability. The subscription integration gives it distribution.

The Model

The economics are unusual. A ChatGPT Plus subscription costs $20 per month. OpenClaw Launch Lite, a hosted management layer, costs $3 per month. For $23, a user gets access to GPT-5.4 through OpenClaw’s agent framework without per-token API charges. This is substantially cheaper than using the OpenAI API directly, which would cost hundreds of dollars per month at the volume an autonomous agent generates. OpenAI is subsidizing agent usage through its subscription tier, betting that the lifetime value of a subscriber who uses ChatGPT through OpenClaw is higher than the compute cost of serving their agent’s requests.

This is the same logic that drove mobile carriers to subsidize smartphones: give away the hardware economics to lock in the subscription revenue. OpenAI is giving away the agent access to lock in the ChatGPT subscription. If the bet works, ChatGPT becomes not just a chatbot but the default intelligence layer for a generation of autonomous AI agents that manage people’s digital lives. If it does not work, OpenAI will have opened its most valuable product to a compute-intensive use case that burns through inference capacity without generating proportional revenue.

Altman’s tweet was seven words and a lobster joke. The decision behind it is one of the most consequential distribution bets OpenAI has made since launching ChatGPT. The most popular open-source project in history now runs on your ChatGPT subscription. Whether that is a masterstroke or a margin trap depends entirely on whether three million lobster enthusiasts convert into paying customers, and whether the agent they are running on their laptops is secure enough to deserve the trust that both OpenAI and its subscribers are placing in it.