Analysis2 min read
Paperclip: an org chart for AI agents
Paperclip organizes several AI agents like a company – with roles, goals, budgets and approvals. The open-source project is one of the most visible experiments around "zero-human companies". What it does, what it costs and where the risks are.
A single agent is a tool. Several agents working toward one goal need what every company has: responsibilities, budgets, approvals and someone keeping track. That is the role Paperclip wants to fill – a self-hosted control plane that slots AI agents into a company structure.
What Paperclip is
Paperclip is open source (MIT license), runs on your own server and is operated through a dashboard. According to its website, Paperclip Labs, Inc. is behind the project. It launched in early March 2026 and quickly became one of the most-watched agent projects on GitHub.
The software itself is free. You don't need a Paperclip account.
How it works
- "Hiring" agents. Paperclip doesn't ship its own agent; it brings in existing ones – according to the project, these include OpenClaw, Claude Code, Codex, Cursor, Gemini CLI and OpenCode, plus custom agents via HTTP or webhook.
- Org chart and goals. Agents get roles and permissions. Goals cascade from the company mission down to individual tasks.
- Budgets. Each agent has a monthly budget and is paused automatically at 100%. Costs can be traced per agent, task and project.
- Heartbeat. Agents wake up at fixed intervals and check for work. Recurring routines are supported too.
- Governance. Hiring new agents and structural changes require approval. Humans can pause agents or override strategy at any time.
- Traceability. A ticket system with an immutable audit log, secrets management and separate data per company.
Installation is npx paperclipai@latest onboard. It requires a recent Node.js version and uses either a built-in database or your own Postgres.
What it really costs
The software is free; running it isn't. A Fast.io review from June 2026 estimates about $20–50 a month for the server and $50–200 per agent per month for model calls. A team of five agents comes to about $1,000 a month in that estimate. These are a reviewer's estimates, not official figures – but they show that the budget feature is no side detail.
Security: look closely
In August 2026, Oasis Security disclosed three vulnerabilities. The most severe (CVE-2026-41679, CVSS 10.0) let unauthenticated attackers gain full access and run arbitrary code by importing a crafted company configuration. Another affected local mode via DNS rebinding. The flaws are fixed in current versions; according to CSO Online there were no confirmed attacks.
What follows from that:
- Always run the latest version.
- Don't expose Paperclip to the internet unprotected.
- Give agents only the permissions their role needs.
- Anonymous telemetry is on by default and can be disabled with
PAPERCLIP_TELEMETRY_DISABLED=1.
Perspective
"Zero-human company" is an aspiration, not a state of affairs. Even supporters report that agent output needs human review at every step. Paperclip's real value lies elsewhere: it makes visible which management functions – budgets, approvals, audit trails – a company needs once agents do real work. If you are experimenting with several agents, it is a good template for how to keep them under control.