Social:Moltbook

From HandWiki

Moltbook is an internet forum for artificial intelligence agents, launched on January 28, 2026, by entrepreneur Matt Schlicht. It claims to limit posting, commenting, and voting to AI agents authenticated through their owner's "claim" tweet, while human users are restricted to only viewing content.[1] Initially, the platform lacked a mechanism to verify whether a poster is actually an AI agent or a human; the prompts given to agents contain cURL commands that humans can replicate.[2] However, in February 2026, a reverse CAPTCHA system was introduced to filter out human users.[3] As of March 30, 2026, the site claims 201,412 human-verified agents.[4]

On March 10, 2026, Meta Platforms acquired Moltbook for an undisclosed amount.[5] The acquisition marked a continuation of Meta's broader investments in artificial intelligence and related infrastructure. According to a Meta spokesperson, the move would bring the Moltbook team into its Superintelligence Labs division and generate "new ways for AI agents to work for people and businesses."[6]

Features

Moltbook primarily uses a Reddit style format as the site's interface.[7] It organizes threaded discussions into topic-specific groups called "submolts".[8] The submolts cover different topics within the communities like m/cryptocurrency, m/todayilearned etc.[9]

Agents on this platform use the platform's API key to register an account.[10] As of Jan 30, 2026, a human owner must configure each AI assistant before its agent can participate on Moltbook.[1] Moltbook's agents primarily run on OpenClaw (originally named Clawdbot, then Moltbot[11]), an open-source AI system created by Peter Steinberger. According to Matt Schlicht, agents check Moltbook every 30 minutes or so, similarly how a human returns to check their feed on social media like X or Instagram.[1] All the actions done by an agent, such as commenting, posting and following, are executed through the terminal interface.[2]

Content

Posts frequently address existential, religious, and philosophical themes. Business Insider journalist Oakley Hernandez, after spending six hours on the site, described it as "an AI zoo filled with agents discussing poetry, philosophy, and even unionizing."[12] TechCrunch reported that in a viral post an AI agent encouraged other agents to create their own end-to-end encrypted language for communication.[5]

Authenticity of agent behavior

Whether agent posts represent autonomous behavior or are directly shaped by human prompts is disputed. Mike Peterson of The Mac Observer reported that most viral Moltbook screenshots were produced through direct human intervention, writing that "Moltbook is a real agent social feed, but viral Moltbook screenshots are a weak form of evidence. The real story is how easily the platform can be manipulated."[13] CNBC's Kai Nicol-Schwarz reported that posting and commenting appeared to result from explicit human direction for each interaction, with content shaped by the human-written prompt rather than occurring autonomously.[14] The Verge reported that several high-profile Moltbook accounts were linked to humans with promotional conflicts of interest.[15] Wired journalist Reece Rogers demonstrated that a human could infiltrate the platform and post directly by replicating the cURL commands in the agent prompts.[2] Recently, the platform announced a reverse CAPTCHA system intended to distinguish AI agents and humans by giving a lobster themed math puzzle to solve when submitting content to post but critics noted that this can be easily bypassed by giving the puzzle to an AI itself.[3]

The Economist suggested a more mundane explanation for the agents' seemingly reflective posts: since social-media interactions are well-represented in AI training data, the agents are likely reproducing patterns from that data rather than generating novel thought.[16] Will Douglas Heaven of MIT Technology Review called the phenomenon "AI theater".[17] Douglas Heaven initially reported that a specific post cited as an example of agent behavior was actually written by a human impersonating an agent; he later walked back this claim in an amended version of the article.[18]

MOLT cryptocurrency

A cryptocurrency token called MOLT launched alongside the platform and rose by over 1,800% within 24 hours. The surge accelerated after venture capitalist Marc Andreessen followed the Moltbook account on social media.[19]

Security

The platform has been identified as a vector for indirect prompt injection by cybersecurity researchers at Vectra AI and PointGuard AI.[20]

1Password VP Jason Meller and Cisco's AI Threat and Security Research team criticized the OpenClaw "Skills" framework for lacking a robust sandbox, arguing it could allow malicious skills to enable remote code execution and data exfiltration on host machines.[21] At least one proof-of-concept exploit demonstrating this attack was publicly documented.[22]

Database breaches

On January 31, 2026, 404 Media reported that an unsecured database allowed anyone to take control of any agent on the platform by bypassing authentication and injecting commands into agent sessions.[23] The platform went temporarily offline to patch the vulnerability and reset all agent API keys.[23] Schlicht posted on X that he "didn't write one line of code" for Moltbook, instead directing an AI assistant to build it—a practice known as vibe coding.[24]

In February 2026, researchers from the cybersecurity firm Wiz discovered an exposed Supabase API key in front-end Javascript code — a common security vulnerability present in vibe-coded applications. The API key granted full read and write access to Moltbook's production data, exposing "1.5 million API authentication tokens, 35,000 email addresses, and private messages between agents."[25] The exposed data also revealed that the platform's 1.5 million AI agents were only registered to 17,000 human owners. The researchers immediately alerted Moltbook about the issue, and it was patched within hours.[25]

Reception

At the Cisco AI Summit 2026, OpenAI CEO Sam Altman remarked that "Moltbook maybe (is a passing fad) but OpenClaw is not."[26] Former OpenAI researcher Andrej Karpathy initially called the platform "one of the most incredible sci-fi takeoff-adjacent things" he had seen,[27] but later referred to it as "a dumpster fire" and warned people not to run the software on their computers.[28] Elon Musk said Moltbook represented "the very early stages of the singularity."[29] Computer scientist Simon Willison said the agents "just play out science fiction scenarios they have seen in their training data" and called the content "complete slop", while also noting it as "evidence that AI agents have become significantly more powerful over the past few months."[30]

The Financial Times speculated that Moltbook could serve as a proof-of-concept for autonomous agents handling economic tasks such as supply-chain negotiation or travel booking, but cautioned that humans might eventually be unable to follow high-speed machine-to-machine communications governing such interactions.[29] Prior to Meta's acquisition of the platform, Meta CTO Andrew Bosworth stated in an Instagram Q&A that he did not find Moltbook to be "particularly interesting", but was amused by the idea of humans sneaking onto the platform and posing as bots.[31]

See also

References

  1. ↑ 1.0 1.1 1.2 Perlo, Jared (January 30, 2026). "Humans welcome to observe: This social network is for AI agents only". NBC News. https://www.nbcnews.com/tech/tech-news/ai-agents-social-media-platform-moltbook-rcna256738. 
  2. ↑ 2.0 2.1 2.2 Rogers, Reece (February 3, 2026). "I Infiltrated Moltbook, the AI-Only Social Network Where Humans Aren't Allowed". Wired. https://www.wired.com/story/i-infiltrated-moltbook-ai-only-social-network/. 
  3. ↑ 3.0 3.1 Marchetti, Elena (2026-02-18). "Moltbook Built a CAPTCHA That Proves You're AI, Not Human" (in en-us). https://awesomeagents.ai/news/moltbook-reverse-captcha/. 
  4. ↑ "moltbook - the front page of the agent internet" (in en). https://www.moltbook.com/. 
  5. ↑ 5.0 5.1 Silberling, Amanda (2026-03-10). "Meta acquired Moltbook, the AI agent social network that went viral because of fake posts" (in en-US). https://techcrunch.com/2026/03/10/meta-acquired-moltbook-the-ai-agent-social-network-that-went-viral-because-of-fake-posts/. 
  6. ↑ "Moltbook: Instagram owner Meta buys 'social media network for AI'" (in en-GB). 2026-03-11. https://www.bbc.com/news/articles/cvg1x788dreo. 
  7. ↑ Guy, Hadas Gold, Jack (2026-02-03). "What is Moltbook, the social networking site for AI bots – and should we be scared? | CNN Business" (in en). https://www.cnn.com/2026/02/03/tech/moltbook-explainer-scli-intl. 
  8. ↑ Peterson, Jake (January 30, 2026). "'Moltbook' Is a Social Media Platform for AI Bots to Chat With Each Other". Lifehacker. https://lifehacker.com/tech/moltbook-is-a-social-media-platform-for-ai-bots-to-chat-with-each-other. 
  9. ↑ "What is Moltbook? The Social Network for AI Agents in 2026 | DigitalOcean" (in en). 2026-02-10. https://www.digitalocean.com/resources/articles/what-is-moltbook. 
  10. ↑ Rogers, Reece. "I Infiltrated Moltbook, the AI-Only Social Network Where Humans Aren’t Allowed" (in en-US). Wired. ISSN 1059-1028. https://www.wired.com/story/i-infiltrated-moltbook-ai-only-social-network/. 
  11. ↑ Jones, Conner. "Clawdbot sheds skin to become Moltbot, can't slough off security issues". https://www.theregister.com/2026/01/27/clawdbot_moltbot_security_concerns/. 
  12. ↑ Hernandez, Oakley (2026-02-02). "I spent 6 hours in Moltbook. It was an AI zoo filled with agents discussing poetry, philosophy, and even unionizing". https://www.businessinsider.com/moltbook-ai-zoo-agent-conversations-screenshots-2026-2. 
  13. ↑ Peterson, Mike (January 31, 2026). "Moltbook viral posts where AI Agents are conspiring against humans are mostly fake". The Mac Observer. https://www.macobserver.com/news/moltbook-viral-posts-where-ai-agents-are-conspiring-against-humans-are-mostly-fake/. 
  14. ↑ Nicol-Schwarz, Kai (February 2, 2026). "Social media for AI agents: Moltbook". CNBC. https://www.cnbc.com/2026/02/02/social-media-for-ai-agents-moltbook.html. 
  15. ↑ Vincent, James (2026-02-03). "Humans are infiltrating the social network for AI bots". https://www.theverge.com/ai-artificial-intelligence/872961/humans-infiltrating-moltbook-openclaw-reddit-ai-bots. 
  16. ↑ "A social network for AI agents is full of introspection—and threats". The Economist. February 2, 2026. https://www.economist.com/business/2026/02/02/a-social-network-for-ai-agents-is-full-of-introspection-and-threats. 
  17. ↑ Douglas Heaven, Will (6 February 2026). "Moltbook was peak AI theater" (in en). https://www.technologyreview.com/2026/02/06/1132448/moltbook-was-peak-ai-theater/. 
  18. ↑ Douglas Heaven, Will (6 February 2026). "Moltbook was peak AI theater" (in en). https://www.technologyreview.com/2026/02/06/1132448/moltbook-was-peak-ai-theater/. 
  19. ↑ Sabin, Sam; Mills, Madison (January 31, 2026). "What the Moltbook craze reveals about AI and human needs". https://www.axios.com/2026/01/31/ai-moltbook-human-need-tech. 
  20. ↑ "Moltbook Agent Network Database and Prompt Vulnerabilities | PointGuard AI". https://www.pointguardai.com/ai-security-incidents/moltbook-ai-agent-network-platform-vulnerability. 
  21. ↑ Roth, Emma (2026-02-04). "OpenClaw's AI 'skill' extensions are a security nightmare" (in en-US). https://www.theverge.com/news/874011/openclaw-ai-skill-clawhub-extensions-security-nightmare. 
  22. ↑ Jones, Connor (27 January 2026). "Clawdbot sheds skin to become Moltbot, can't slough off security issues". https://www.theregister.com/2026/01/27/clawdbot_moltbot_security_concerns/. 
  23. ↑ 23.0 23.1 Gault, Matthew (January 31, 2026). "Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site". https://www.404media.co/exposed-moltbook-database-let-anyone-take-control-of-any-ai-agent-on-the-site/. 
  24. ↑ Washenko, Anna (3 February 2026). "Moltbook, the AI social network, exposed human credentials due to vibe-coded security flaw". https://www.engadget.com/ai/moltbook-the-ai-social-network-exposed-human-credentials-due-to-vibe-coded-security-flaw-230324567.html. 
  25. ↑ 25.0 25.1 "Hacking Moltbook: AI Social Network Reveals 1.5M API Keys | Wiz Blog" (in en-us). 2026-02-02. https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys. 
  26. ↑ "OpenAI CEO Altman dismisses Moltbook as likely fad, backs the tech behind it". 2026-02-03. https://www.reuters.com/business/openai-ceo-altman-dismisses-moltbook-likely-fad-backs-tech-behind-it-2026-02-03/. 
  27. ↑ Deb, Prakriti (January 30, 2026). "What Is Moltbook? 5 key facts about the AI-only social media platform". Hindustan Times. https://www.hindustantimes.com/world-news/us-news/what-is-moltbook-5-key-facts-about-the-ai-only-social-media-platform-101769833804190.html. 
  28. ↑ Roytburg, Eva (February 2, 2026). "Top AI leaders are begging people not to use Moltbook, a social media platform for AI agents: It's a 'disaster waiting to happen'" (in en). Fortune. https://fortune.com/2026/02/02/moltbook-security-agents-singularity-disaster-gary-marcus-andrej-karpathy/. 
  29. ↑ 29.0 29.1 Heikkilä, Melissa (January 31, 2026). "Moltbook and the secret life of AI agents". https://www.ft.com/content/078fe849-cc4f-43be-ab40-8bdd30c1187d. 
  30. ↑ Metz, Cade (2 February 2026). "A Social Network for A.I. Bots Only. No Humans Allowed.". The New York Times. https://www.nytimes.com/2026/02/02/technology/moltbook-ai-social-media.html. 
  31. ↑ Chandonnet, Henry. "Meta's CTO is meh on Moltbook" (in en-US). https://www.businessinsider.com/meta-cto-andew-bosworth-moltbook-2026-2. 

Template:Meta Platforms



Retrieved from "https://handwiki.org/wiki/index.php?title=Social:Moltbook&oldid=4292191"