cp ~/.openclaw/openclaw.json \
   ~/.openclaw/openclaw.json.bak

openclaw doctor
openclaw doctor --fix   # auto-repair

openclaw config get agents.defaults.workspace
openclaw config set agents.defaults.heartbeat.every "2h"
openclaw config unset tools.web.search.apiKey

// openclaw.json — root file
{
  gateway: { port: 18789 },
  agents: { $include: "./agents.json5" },
  channels: { $include: "./channels/telegram.json5" },
  broadcast: {
    $include: ["./clients/a.json5", "./clients/b.json5"]
  }
}

{
  agents: {
    defaults: {
      model: {
        // REQUIRED — gateway won't start without it
        primary: "anthropic/claude-sonnet-4-5",

        // Fallback chain with exponential backoff
        fallbacks: ["openrouter/openrouter/auto", "openai/gpt-4o"],
      },
      // Model catalog = allowlist for /model command
      models: {
        "anthropic/claude-sonnet-4-5": { alias: "Sonnet" },
        "openrouter/openrouter/auto":    { alias: "OR-Auto" },
        "ollama/llama3.2":              { alias: "Local" },
      },
    },
  },
}

{
  models: {
    mode: "merge",  // merge with built-ins, or "replace"
    providers: {

      // Ollama (local)
      ollama: {
        baseUrl: "http://localhost:11434",
        apiKey: "ollama-local",
        api: "openai-completions",
        models: [{
          id: "ollama/llama3.2",
          contextWindow: 131072,
          maxTokens: 8000,
          cost: { input:0, output:0, cacheRead:0, cacheWrite:0 }
        }]
      },

      // OpenRouter (cloud proxy)
      openrouter: {
        baseUrl: "https://openrouter.ai/api/v1",
        apiKey: "${OPENROUTER_API_KEY}"
      }
    }
  }
}

# Switch primary model
openclaw config set \
  agents.defaults.model.primary \
  "anthropic/claude-opus-4"

# Add to catalog
openclaw config set \
  'agents.defaults.models["openai/gpt-4o"]' \
  '{"alias":"GPT4o"}' --json

# RPC patch (from any client)
openclaw gateway call config.patch \
  --params '{"raw":"{agents:{defaults:{model:{primary:\"openai/gpt-4o\"}}}}"}'

# Recommended: run onboard wizard
openclaw onboard

# Manual: add auth profile to config
// openclaw.json
{
  authProfiles: {
    openrouter: { provider: "openrouter" }
  }
}

# Then store key in keychain
openclaw auth set openrouter

{
  agents: { defaults: {
    contextPruning: {
      mode: "cache-ttl"  // prune old context
    },
    heartbeat: {
      every: "30m"  // "1h" with Anthropic OAuth
    }
  }}
}

{
  agents: {
    defaults: {
      workspace: "~/.openclaw/workspace",
      model: { primary: "anthropic/claude-sonnet-4-5" },
      identity: { name: "My Assistant" },
    }
  }
}

{
  agents: {
    list: [
      {
        id: "main",
        default: true,
        workspace: "~/.openclaw/workspace-main",
        identity: { name: "Assistant" },
      },
      {
        id: "coder",
        workspace: "~/.openclaw/workspace-coder",
        model: { primary: "anthropic/claude-opus-4" },
        identity: { name: "Code Bot" },
        tools: {
          allow: ["exec", "read", "write", "browser"],
          deny: ["canvas"],
        },
      },
    ],
  },
  bindings: [
    { agentId: "main",  match: { channel: "telegram", accountId: "personal" } },
    { agentId: "coder", match: { channel: "discord", accountId: "dev-server" } },
  ]
}

{
  agents: { list: [{
    id: "untrusted",
    sandbox: {
      mode: "all",    // sandbox all tool calls
      scope: "agent"  // per-agent isolation
    },
    tools: {
      allow: ["read", "exec"],
      deny: ["write", "browser"],
    }
  }]}
}

# Install from ClawHub registry (interactive)
clawdhub install <skill-name>

# Install from GitHub URL
clawdhub install https://github.com/org/repo/skill-dir

# Installs into ./skills (current dir) by default
# Agent picks it up as <workspace>/skills on next session

# List installed skills
clawdhub list

# Configure skill with API key (env injection)
// openclaw.json
{
  skills: {
    entries: {
      my-skill: {
        apiKey: "${MY_SKILL_API_KEY}"  // from env var
      }
    }
  }
}

---
name: my-workflow
description: >
  Use this skill when the user asks to do X or Y.
  Triggers on keywords: "run X", "start Y workflow".
user-invocable: true
homepage: https://example.com
---

# My Workflow Skill

## Overview
Brief description of what this skill does.

## Steps
1. Step one: do this
2. Step two: call this tool with these params
3. Step three: return result

## Notes
- Use {baseDir} to reference this skill's folder
- Always confirm before destructive actions

{
  skills: {
    // Allowlist bundled skills (whitelist mode)
    allowBundled: ["git", "github", "web-search"],

    // Extra skill directories
    load: {
      extraDirs: ["/shared/team-skills"]
    },

    // Per-skill config
    entries: {
      my-skill: {
        apiKey: "${MY_KEY}",
        env: { TOOL_URL: "https://..." }
      }
    }
  }
}

{
  agents: { defaults: {
    tools: {
      allow: [
        "nodes",          // spawn/manage sub-agent nodes
        "sessions_spawn", // start child sessions
        "sessions_list",  // list active sessions
        "sessions_send",  // send message to session
        "session_status", // check session status
      ]
    }
  }}
}

# Install the skill first
npx playbooks add skill openclaw/skills --skill multi-workplace

# Then in chat with your agent:
workplace init [path]          # init current dir as workplace
workplace list                  # list all registered workplaces
workplace switch <name|uuid>   # switch active workplace
workplace scan [path]           # auto-detect .git repos
workplace agents                # list agents in current workplace
workplace agent start <name>   # start a sub-agent
workplace kernel start          # start persistent kernel agent
workplace export [zip|json]     # export for transfer
workplace import <file>        # import on another server

{
  cron: {
    jobs: [
      {
        id: "daily-brief",
        schedule: "0 8 * * *",   // 8am every day
        agentId: "main",
        prompt: "Run the daily brief: check emails, summarise news, list tasks",
        sessionKey: "cron:daily-brief",
      },
      {
        id: "ci-monitor",
        schedule: "*/10 * * * *",  // every 10 min
        agentId: "coder",
        prompt: "Check GitHub Actions for failures and notify me",
      }
    ],
    // Prune cron run logs
    runLog: { mode: "size", maxLines: 1000 }
  }
}

{
  hooks: {
    enabled: true,
    token: "${HOOKS_SECRET}",   // shared secret
    path: "/hooks",            // endpoint prefix
    defaultSessionKey: "hook:ingress",

    mappings: [
      {
        match: { path: "github" },
        action: "agent",
        agentId: "coder",
        deliver: true,
      },
      {
        match: { path: "gmail" },
        action: "agent",
        agentId: "main",
        deliver: true,
      },
    ]
  }
}

# Get current config + hash
openclaw gateway call config.get --params '{}'

# Patch a single value
openclaw gateway call config.patch \
  --params '{
    "raw": "{agents:{defaults:{model:{primary:\"openai/gpt-4o\"}}}}"
  }'

{
  gateway: {
    port: 18789,
    bind: "loopback",  // "loopback" | "0.0.0.0"
    reload: "hybrid",

    auth: {
      mode: "token",     // "local" for dev only
      token: "${OPENCLAW_GATEWAY_TOKEN}",
      allowTailscale: true,  // if using Tailscale
    },

    trustedProxies: ["10.0.0.0/8"],  // Docker subnet
  }
}

# Detect + repair config issues
openclaw doctor
openclaw doctor --fix

# Full security audit
openclaw security audit --deep

# Lock down permissions
chmod 700 ~/.openclaw
chmod 600 ~/.openclaw/openclaw.json
chmod 700 ~/.openclaw/credentials

# Verify gateway port binding
netstat -an | grep 18789 | grep LISTEN

# Check for leaked secrets in config
grep -r "sk-" ~/.openclaw/  # should find nothing

{
  channels: {
    telegram: {
      enabled: true,
      botToken: "${TELEGRAM_BOT_TOKEN}",
      dmPolicy: "pairing",
      // pairing|allowlist|open|disabled
      allowFrom: ["tg:123456789"],
    }
  }
}

{
  channels: {
    discord: {
      groupPolicy: "allowlist",
      accounts: {
        default: {
          token: "${DISCORD_BOT_TOKEN}",
          guilds: { "GUILD_ID": {
            channels: { "CHAN_ID": { allow: true } }
          }}
        }
      }
    }
  }
}

{
  channels: {
    whatsapp: {
      dmPolicy: "allowlist",
      allowFrom: ["+15555550123"],
      // Multi-account:
      accounts: {
        personal: { ... },
        biz: { ... }
      }
    }
  }
}

# Full setup wizard
openclaw onboard

# Interactive config editor
openclaw configure

# View gateway status
openclaw gateway status

# Validate JSON5 manually
python3 -m json.tool ~/.openclaw/openclaw.json

# Restore from backup after bad edit
cp ~/.openclaw/openclaw.json.bak \
   ~/.openclaw/openclaw.json && openclaw doctor

# Open config in Control UI (browser)
# http://127.0.0.1:18789 → Config tab

# See all available agents
openclaw agents list

# Restart gateway after critical config change
openclaw gateway restart