OpenClaw Operations

Comprehensive reference for administering OpenClaw via CLI. Covers channels, agents, models, config, gateway, security, and maintenance.

Golden Rules

Never edit openclaw.json directly. Use openclaw config set/get/unset or dedicated subcommands.
Always restart gateway after config changes: openclaw gateway restart
Telegram accounts: NO agent field inside account config. Route via bindings array instead.
Telegram streaming: must be string "off", not boolean false.
JSON values in config set need --strict-json.
Verify after every change. Run openclaw status or the relevant status command.

Quick Diagnostics

openclaw status              # overview
openclaw status --deep       # detailed
openclaw doctor              # find problems
openclaw doctor --fix        # auto-fix what it can
openclaw gateway health      # gateway health check
openclaw security audit      # security scan
openclaw security audit --deep --fix  # deep scan + auto-fix

Deep Audit with Claude Code

Load the docs before turning it loose — the difference is night and day.

cd ~/.openclaw
claude
# "Read https://docs.openclaw.ai/cli — the full CLI reference.
#  Now read the config and architecture pages too."
# Then: "Audit this workspace for security issues."

CLI Reference

For the full CLI cheatsheet covering all commands, config paths, and examples: → Read references/cli-cheatsheet.md

Security Audit Reference

For security findings, applied fixes, and remaining remediation items: → Read references/security-audit.md

Common Pitfalls

| Mistake | Fix | |---------|-----| | Put agent field in Telegram account config | Use bindings array at top level | | Set streaming: false (boolean) | Must be streaming: "off" (string) | | Edited openclaw.json directly | Use CLI commands; openclaw config set | | Forgot gateway restart after config | Always openclaw gateway restart | | Used jared@ for VPS SSH | Must use root@clawdbot | | Set dmPolicy: "open" with allowFrom: ["*"] | Use "pairing" or explicit user IDs | | Set controlUi.allowedOrigins: ["*"] | Restrict to ["http://localhost:PORT"] |

Online Docs

Full docs: https://docs.openclaw.ai
CLI: https://docs.openclaw.ai/cli
Channels: https://docs.openclaw.ai/cli/channels
Agents: https://docs.openclaw.ai/cli/agents
Models: https://docs.openclaw.ai/cli/models
Config: https://docs.openclaw.ai/cli/config