OpenAI Opens ChatGPT to OpenClaw's 3.2M Users While Anthropic Blocks Access

At 2:33 a.m. on May 2, Sam Altman posted on X, TNW reports: "you can sign in to openclaw with your chatgpt account now and use your subscription there! happy lobstering." The casual delivery masked what TNW calls anything but a minor update: OpenAI has made its ChatGPT subscription the authentication and billing layer for OpenClaw, the fastest‑growing open‑source project in GitHub history.

OpenClaw — created by Austrian developer Peter Steinberger in November 2025 — accumulated 346,000 GitHub stars in under five months, surpassing React's ten‑year record in 60 days. It now has 3.2 million users. Nvidia CEO Jensen Huang called it "the most popular open‑source project in the history of humanity" at GTC in March, as quoted by TNW.

ChatGPT Plus subscribers can now log in via OAuth, access GPT‑5.4 through the Codex endpoint, and run autonomous AI agents on their own hardware for $23 per month total ($20 for ChatGPT Plus + $3 for OpenClaw Launch Lite). The agents operate through messaging apps people already use — WhatsApp, Telegram, Signal, Discord, Slack, iMessage, Teams — managing calendars, sending emails, organizing files, writing code, and executing multi‑step workflows autonomously.

On April 4, Anthropic blocked Claude Pro and Max subscribers from using their flat‑rate subscription plans with OpenClaw and other third‑party AI agent frameworks. The reason was straightforward economics: OpenClaw agents running autonomously can generate thousands of API calls per day, consuming far more compute than a human typing queries into a chat window. Anthropic decided flat‑rate subscription access through an agent framework was unsustainable, TNW reports.

OpenAI made the opposite bet. TNW describes it as the difference between seeing a cost problem and seeing a distribution opportunity. By making ChatGPT the default backend for the world's most popular agent framework, OpenAI is betting that the volume of new subscribers will more than compensate for the increased compute cost per user.

The economics only work if OpenClaw converts a significant portion of its 3.2 million users into paying ChatGPT subscribers. If it does, OpenAI will have acquired a distribution channel that no amount of marketing could have built. Anthropic looked at OpenClaw and saw a threat to margins. OpenAI looked at the same product and saw a growth engine.

OpenClaw's rapid growth has been accompanied by equally rapid security failures. In late January, a critical remote code execution vulnerability (CVE‑2026‑25253) was disclosed: any website a user visited could silently connect to the agent's local server through an unvalidated WebSocket, chaining a cross‑site hijack into full code execution.

Security researchers audited ClawHub, OpenClaw's skills marketplace, and found 824 confirmed malicious entries out of 10,700 available skills, with 335 traced to a single coordinated attack operation, per TNW. More than 30,000 OpenClaw instances were found exposed on the public internet without authentication. Moltbook, the social layer for agents, suffered a breach that exposed 1.5 million API tokens and thousands of private conversations.

The vulnerabilities have been patched in current versions, but a significant portion of the installed base runs older, unpatched versions. OpenAI's decision to tie its ChatGPT subscription — and by extension its brand, billing system, and user credentials — to OpenClaw means those credentials now flow through an open‑source platform that has had more security incidents in four months than most enterprise software accumulates in a decade.

OpenAI didn't build the most popular AI agent in the world. It hired the developer, backed the foundation, and opened the login. Steinberger joined OpenAI in February to drive the next generation of personal agents, and OpenClaw was moved to an independent foundation with OpenAI's continued support and funding.

The ecosystem is expanding rapidly. Nvidia turned OpenClaw into an enterprise platform with NemoClaw, adding security hardening and compliance features. Tencent launched ClawPro for the Chinese market. Meta launched Manus AI as a desktop agent, a competing approach that runs as a native application rather than through messaging apps.

The foundation structure gives OpenAI deniability — OpenClaw remains open source and compatible with multiple model providers. But with Anthropic blocking access and OpenAI enabling it, TNW notes the practical effect is that OpenClaw's three million users are being funnelled toward ChatGPT as their default model. The foundation creates distance. The subscription integration creates lock‑in.

The OpenClaw split reveals the two opposing strategies that will define the AI agent era. Anthropic's approach is margin‑first: protect per‑token economics, block flat‑rate abuse through agent frameworks, and grow revenue through enterprise contracts and API usage. OpenAI's approach is distribution‑first: subsidize agent usage through the subscription tier, acquire users at negative marginal cost, and bet that lifetime value justifies the near‑term compute expense.

For builders using agent frameworks, the practical implications are immediate. If you're building on OpenClaw, ChatGPT is now the path of least resistance — one login, $23 per month, no per‑token charges. Meanwhile, Motley Fool notes that OpenAI is under pressure to grow revenue after missing internal targets — making the OpenClaw distribution play even more strategically important. If you want Claude as your agent backend, you'll need to pay per‑token API rates, which can be significantly more expensive for autonomous agents that make thousands of calls.

The split also raises a strategic question: which model wins? The distribution play gives OpenAI a massive user base but depends on converting free users to paid subscribers. The margin play gives Anthropic sustainable unit economics but cedes the consumer agent market to OpenAI. In the agent era, the company that owns the distribution layer may have more influence than the company with the better model.