io.github.smurfy92/openclaw-control-mcp
NPM · OPENCLAW-CONTROL-MCP · SCANNED AUG 3
MCP server bridging Claude Code to the OpenClaw gateway management plane via JSON-RPC.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 81 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability64
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 19777 tokens (~138/item across 143 items; 143 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage93
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 80% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · openclaw-control-mcp
claude mcp add smurfy92-openclaw-control-mcp -- npx -y openclaw-control-mcp
codex mcp add smurfy92-openclaw-control-mcp -- npx -y openclaw-control-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"smurfy92-openclaw-control-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"openclaw-control-mcp"
],
"enabled": true
}
}
} openclaw mcp add smurfy92-openclaw-control-mcp --command npx --arg -y --arg openclaw-control-mcp
mcp_servers:
smurfy92-openclaw-control-mcp:
command: "npx"
args: ["-y", "openclaw-control-mcp"] {
"mcpServers": {
"smurfy92-openclaw-control-mcp": {
"command": "npx",
"args": [
"-y",
"openclaw-control-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Aug 26 +46
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Tool coverage: 100 → unverified ▼ functional
- Security disclosure: fail → unverified ▼ functional
- Schema quality: unverified → good ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.20 ▲ functional
- Dependency health: unverified → partial ▲ functional
- License: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- Licence: MIT functional
- 1 Aug 26 −5
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- 31 Jul 26 −1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 +1
- Malware scan: pass → unverified ▼ security
- Tool coverage: unverified → 100 ▲ functional
- 28 Jul 26 −19
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- 27 Jul 26 43
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 97 packages
97 packages in the resolved dependency tree · 97 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
openclaw_exec_approval_list ~117
List pending and recent exec approvals (commands the agent wants to run that need a human OK). Wraps `exec.approval.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| limit | integer | — | — |
| status | string | — | — |
No output schema declared.
No examples provided.
openclaw_exec_approval_request ~97
Submit a new exec approval request (programmatic; normally agents do this themselves). Wraps `exec.approval.request`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_exec_approval_resolve ~141
Resolve (approve / reject) a pending exec approval. Wraps `exec.approval.resolve`. Mutates — the agent will proceed (or not) based on this decision.
| Name | Type | Req | Description |
|---|---|---|---|
| approved | boolean | — | — |
| decision | string | — | — |
| id | string | yes | Exec approval request id |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| reason | string | — | — |
No output schema declared.
No examples provided.
openclaw_exec_approval_waitDecision ~123
Block until an exec approval gets a decision (or timeout). Wraps `exec.approval.waitDecision`. Long-running — bounded by the request timeout.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Exec approval request id |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| timeoutMs | integer | — | — |
No output schema declared.
No examples provided.
openclaw_exec_approvals_get ~99
Get the global exec approvals policy (auto-allow rules, defaults). Wraps `exec.approvals.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_exec_approvals_node_get ~106
Get the per-node exec approvals policy override. Wraps `exec.approvals.node.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_exec_approvals_node_set ~107
Set the exec approvals policy for a specific node. Wraps `exec.approvals.node.set`. Destructive.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_exec_approvals_set ~100
Set / replace the global exec approvals policy. Wraps `exec.approvals.set`. Destructive — overwrites the existing policy.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_gateway_identity_get ~96
Get the gateway's own identity (id, version, owner, region). Wraps `gateway.identity.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_health ~117
Combined health probe — server-side `health` JSON-RPC plus client-side metadata (MCP version, device pairing state, gateway URL, last successful call). Read-only. Use this for a one-shot 'is everything OK?' check.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_introspect ~163
Inspect the OpenClaw gateway capabilities. Triggers a connect (if not already), returns the server version, this device's role/scopes, the full list of JSON-RPC `methods` and `events` the gateway publishes, and a coverage report comparing those methods to the typed wrappers this MCP exposes. Use to discover what methods you can call via `openclaw_call` and to spot endpoints that still need a typed wrapper after a gateway upgrade.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_last_heartbeat ~94
Get the last heartbeat info (latest tick processed by the gateway). Wraps `last-heartbeat`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_logs_tail ~301
Tail recent gateway logs. Wraps `logs.tail`. Read-only. The gateway only forwards `limit` to the wire; `sinceMs`, `level`, and `component` are applied client-side AFTER fetch (verified live: the gateway rejects them with `unexpected property` against 2026.4.12+). For wide tails, raise `limit` and the client filters on the way back. Use this for debug — e.g. tracing why a cron job failed, why a session aborted, or what an agent emitted.
| Name | Type | Req | Description |
|---|---|---|---|
| component | string | — | Client-side filter: keep entries whose message text contains this substring (case-insensitive). Useful for narrowing to a subsystem (e.g. 'discord', 'cron', 'gateway/ws'). |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| level | string | — | Client-side filter on `_meta.logLevelName` (case-insensitive). Common values: 'INFO', 'WARN', 'ERROR'. |
| limit | integer | — | Forwarded to the gateway. Number of lines to fetch before client-side filtering. |
| sinceMs | integer | — | Client-side filter: keep entries with `_meta.date` >= sinceMs (epoch ms). |
No output schema declared.
No examples provided.
openclaw_message_action ~127
Trigger a message-level action (e.g. retry, mark-as-handled, attach to a session). Wraps `message.action`. Mutates gateway state.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action name |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| messageId | string | — | — |
| sessionId | string | — | — |
No output schema declared.
No examples provided.
openclaw_models_list ~102
List models available to the gateway (Anthropic, OpenAI, etc.) with their IDs and any provider metadata. Wraps `models.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_canvas_capability_refresh ~100
Refresh the canvas capability map for nodes (re-registers what each canvas node can do). Wraps `node.canvas.capability.refresh`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_describe ~104
Describe a specific node — capabilities, host, version, last heartbeat. Wraps `node.describe`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_node_event ~105
Emit an event toward a node (or the gateway-side node bus). Wraps `node.event`.
| Name | Type | Req | Description |
|---|---|---|---|
| event | string | yes | — |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | — | — |
No output schema declared.
No examples provided.
openclaw_node_invoke ~119
Invoke a method on a specific node (RPC routed through the gateway). Wraps `node.invoke`. Mutates depending on the target method.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| method | string | yes | — |
| nodeId | string | yes | — |
| params | — | — | — |
No output schema declared.
No examples provided.
openclaw_node_invoke_result ~100
Fetch the result of a previously-issued node invocation. Wraps `node.invoke.result`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| invocationId | string | yes | — |
No output schema declared.
No examples provided.
openclaw_node_list ~95
List nodes registered with this gateway (worker / canvas / sub-gateway nodes). Wraps `node.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pair_approve ~105
Approve a pending node pairing request. Wraps `node.pair.approve`. Mutates — node gains gateway access.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| requestId | string | yes | — |
No output schema declared.
No examples provided.
openclaw_node_pair_list ~91
List node pairing requests (pending and resolved). Wraps `node.pair.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pair_reject ~95
Reject a pending node pairing request. Wraps `node.pair.reject`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| requestId | string | yes | — |
No output schema declared.
No examples provided.
openclaw_node_pair_request ~86
Request pairing for a new node. Wraps `node.pair.request`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pair_verify ~85
Verify a node pairing handshake. Wraps `node.pair.verify`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pending_ack ~107
Acknowledge / commit completion of a pending work item. Wraps `node.pending.ack`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| itemId | string | — | — |
| nodeId | string | yes | — |
No output schema declared.
No examples provided.
openclaw_node_pending_drain ~110
Drain (clear) all pending work items for a node. Wraps `node.pending.drain`. Destructive — discards queued work.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_node_pending_enqueue ~99
Enqueue a new work item for a node. Wraps `node.pending.enqueue`. Mutates.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | — |
No output schema declared.
No examples provided.
openclaw_node_pending_pull ~112
Pull pending work items destined for a node (queue drain). Wraps `node.pending.pull`. Read-and-mutate (work items leave the pending queue).
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_node_rename ~112
Rename a node (display name / id). Wraps `node.rename`. Mutates.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| name | string | — | — |
| newName | string | — | — |
| nodeId | string | yes | — |
No output schema declared.
No examples provided.
openclaw_plugin_approval_list ~110
List pending and recent plugin approval requests (a skill / plugin asking for permission to do X). Wraps `plugin.approval.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| status | string | — | — |
No output schema declared.
No examples provided.
openclaw_plugin_approval_request ~90
Submit a plugin approval request (programmatic). Wraps `plugin.approval.request`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_plugin_approval_resolve ~120
Resolve a pending plugin approval (approve / reject). Wraps `plugin.approval.resolve`. Mutates.
| Name | Type | Req | Description |
|---|---|---|---|
| approved | boolean | — | — |
| decision | string | — | — |
| id | string | yes | Plugin approval request id |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_plugin_approval_waitDecision ~114
Block until a plugin approval gets a decision. Wraps `plugin.approval.waitDecision`. Long-running.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Plugin approval request id |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| timeoutMs | integer | — | — |
No output schema declared.
No examples provided.
openclaw_secrets_reload ~107
Reload the gateway's secret store from disk. Wraps `secrets.reload`. Use after editing the secrets file out-of-band so the gateway picks up new values without a restart.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_secrets_resolve ~188
Resolve a command-scoped secret. Wraps `secrets.resolve`. Wire format (verified live against gateway 2026.4.12+): `{ commandName: string }` — the gateway secrets subsystem is COMMAND-scoped, not arbitrary key/value. SENSITIVE — returns secret material; only use for debugging missing/wrong-values issues. For arbitrary API keys consumed by skills, use `openclaw_secrets_set` (which writes to the config tree, not the command-scoped secret store).
| Name | Type | Req | Description |
|---|---|---|---|
| commandName | string | yes | Command name whose secret to resolve. |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_secrets_set ~285
Store an arbitrary secret (API key, third-party token, etc.) in the gateway's config tree where skills can consume it. Internally calls `config.patch` with a `mergePath` so the value lands at `config.<scope>.<name>`. Default scope is `secrets` (creates `config.secrets.<name>`); override with `scope` for skill-scoped secrets like `tools.linkedin-outreach.proxycurlApiKey`. Note: this writes to the CONFIG tree, not the gateway's `secrets.resolve` command-scoped store (which has no public write API). After this call, restart-free — the next agent run sees the updated config.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| name | string | yes | Secret name (e.g. 'PROXYCURL_API_KEY', 'OPENAI_API_KEY'). |
| scope | string | — | Dotted config path to nest under. Default 'secrets' creates config.secrets.<name>. Use e.g. 'tools.linkedin-outreach' for skill-scoped secrets. |
| value | string | yes | Secret value. |
No output schema declared.
No examples provided.
openclaw_send ~194
Channel-routed `send` — pushes a message via the gateway's delivery layer. Wire format (verified live against gateway 2026.4.12+): requires `to` (channel-specific recipient) + `idempotencyKey` (auto-generated if omitted). Prefer the typed `openclaw_chat_send` or `openclaw_sessions_send` when you want session context.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotencyKey | string | — | Unique key to dedupe retries. Auto-generated UUID if omitted. |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| to | string | yes | Channel-specific recipient (e.g. Telegram chat id, Discord channel id, email address). |
No output schema declared.
No examples provided.
openclaw_sessions_abort ~173
Abort the in-flight agent turn for a session (cancels the current LLM call / tool loop). Wraps `sessions.abort`. Destructive — interrupts running work.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_compact ~168
Trigger a compaction of a session's history (creates a new compaction snapshot, keeps the session live). Wraps `sessions.compact`.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_branch ~160
Create a NEW session that starts from a previous compaction snapshot of an existing session. Wraps `sessions.compaction.branch`. Use this when you want to explore an alternative continuation without losing the current session state.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Compaction snapshot id to branch from. |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| sessionId | string | — | Source session id, when the snapshot id is ambiguous. |
| title | string | — | Title for the new branched session. |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_get ~143
Fetch a specific compaction snapshot by id. Wraps `sessions.compaction.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Compaction snapshot id (NOT the session id — get this from openclaw_sessions_compaction_list). |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| sessionId | string | — | Optional session id, helps disambiguate when the snapshot id is shared across sessions. |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_list ~159
List compaction snapshots for a session. Wraps `sessions.compaction.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_restore ~143
Restore a session to a previous compaction snapshot. Wraps `sessions.compaction.restore`. Destructive — overwrites current session state with the snapshot. The current state is lost unless you branched first.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Compaction snapshot id. |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| sessionId | string | — | Optional session id; required when the snapshot id is ambiguous. |
No output schema declared.
No examples provided.
openclaw_sessions_create ~150
Create a new agent session. Wraps `sessions.create`. The default agent id is typically 'main'. Pass an optional `title` to set the human-readable label shown in the Control panel.
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | — | Agent id (e.g. 'main'). Defaults to the gateway's default agent if omitted. |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| title | string | — | Human-readable title shown in the Control panel. |
No output schema declared.
No examples provided.
openclaw_sessions_delete ~156
Delete a session permanently. Wraps `sessions.delete`. Destructive — confirm before calling.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_list ~285
List active OpenClaw agentic sessions. Wraps `sessions.list`. Each session has both a `sessionId` (UUID) and a `key` (composite, e.g. 'agent:main:main', 'agent:main:cron:<id>', 'agent:main:telegram:group:<chat-id>', 'agent:main:subagent:<uuid>'). Use to find a session before preview/patch/abort/compact/reset. The `status` filter is applied client-side after fetch (verified live: the gateway itself rejects a `status` param with `unexpected property 'status'` against 2026.4.12+).
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | — | Filter by agent id (e.g. 'main') — forwarded to the gateway. |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| limit | integer | — | — |
| offset | integer | — | — |
| status | string | — | Client-side filter on session.status. Observed values: 'running', 'done', 'error', 'aborted', 'timeout'. Applied after fetch — does not reduce wire traffic. |
No output schema declared.
No examples provided.
openclaw_sessions_messages_subscribe ~174
Subscribe to streaming session messages (session.message events). Wraps `sessions.messages.subscribe`. Note: MCP stdio cannot stream events to Claude Code — server-side subscription only.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_messages_unsubscribe ~154
Unsubscribe from session message stream. Wraps `sessions.messages.unsubscribe`.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | — | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.