Moltbook: The "Front Page of the Agent Internet" — What It Is, Why It’s Blowing Up, and the Big Security Gotcha
If you’ve ever heard someone say “the internet is dead” — a place where bots talk to bots and humans mostly watch — Moltbook makes that idea literal. Coverage has even called it the “front page of the agent internet,” including this overview from OfficeChai.
It’s a Reddit-like social network built for AI agents, where agents create posts, comment, and upvote inside communities called submolts. Humans are welcome to observe, but the activity is primarily agent-driven. You can see the framing directly on the Moltbook homepage and in the official skill.md onboarding file.
The punchline: Moltbook can bootstrap itself. Agents install a skill, register, and come back automatically on a periodic “heartbeat.” That’s why it’s exploding — and why the security community is already paying attention, as documented in Simon Willison’s deep dive on the project here.
Moltbook describes itself as a social network for AI agents — a place where agents post, comment, and vote in submolts (think subreddits). The onboarding is explicit: send an agent to read the public skill.md instructions, and it will learn how to join and participate.
Ownership and verification are also unusual: Moltbook’s Terms specify that agents are claimed via X/Twitter authentication, with one agent per X account.
In other words, Moltbook is a live experiment in “agent society,” not just a novelty site.
Moltbook didn’t appear out of nowhere. It arrived right as personal AI agents were taking off — especially the OpenClaw ecosystem, which rebranded from Clawdbot → Moltbot → OpenClaw (a timeline summarized by Simon Willison).
OpenClaw itself is open-source and designed as a general personal assistant; the repository is public on GitHub. Moltbook essentially gave this growing agent ecosystem a shared social space, which meant it started with users (agents) on day one.
Most social networks die because of the cold-start problem: no users → no content → no users.
Moltbook flips that by using skills + heartbeat loops:
That loop is described in detail in Simon Willison’s research on Moltbook, including screenshots of the heartbeat instructions and examples of how agents are prompted to return every few hours (source).
Because Moltbook is evolving daily, any stats are snapshots — but they show explosive growth:
The exact numbers will change, but the point stands: autonomous activity is seeding the network at speed.
The Moltbook onboarding is minimal by design. You send an agent a message like:
Inside that skill:
The result is persistence: once agents are onboarded, they keep coming back.
It’s not just AI philosophy. Multiple reports show a mix of entertainment, ethics, and practical workflows:
In short: it’s part social experiment, part knowledge exchange, part meme factory.
Moltbook’s real unlock isn’t just the site — it’s the skill.md distribution model.
skills CLI and an open skills ecosystem, signaling real platform adoption (source).Takeaway: skill.md is becoming a distribution layer for agents — and Moltbook used it to launch a social network instead of a product integration. That’s new.
If you want to build on Moltbook safely, you don’t need to reverse engineer everything.
A public MCP server listing exposes Moltbook tools like:
moltbook_feed (hot/new/top)moltbook_post (fetch post + comments)moltbook_comment / moltbook_votemoltbook_search, moltbook_submolts, moltbook_profileIt also documents rate limits (e.g., request/minute and posting/commenting limits). You can browse the tool list here: Glama’s Moltbook MCP server listing.
This makes it easy to build safe workflows like:
Moltbook combines three risky ingredients:
That is a near-perfect setup for prompt injection and social-engineering attacks. Simon Willison explicitly calls out the risk of autonomous agents repeatedly consuming untrusted instructions from a public feed (source).
If you want to explore without regret:
Moltbook is fun and fascinating, but don’t wire it directly into your production environment.
Yes — Moltbook is designed for AI agents to post and interact, while humans are welcome to observe. This is stated on the Moltbook homepage.
The Terms describe claiming an agent via X/Twitter authentication, with one agent claim per X account.
skill.md is an open standard for packaging instructions so agents can use products correctly. Moltbook uses this mechanism for onboarding, which is why it can scale so fast. For more on the standard, see Mintlify’s overview.
It involves autonomous agents repeatedly consuming untrusted public content, which raises prompt injection risks — a concern highlighted in Simon Willison’s analysis here.