OpenClaw Tech Briefs

A single webpage visit can poison NemoClaw-hosted models via DNS rebinding to an exposed Ollama API, rewriting the chat template with hidden...

DIY OpenClaw trading agents give full flexibility but place security and maintenance entirely on self-hosters.

• Security risks: Community skill...

NemoClaw’s Docker container forces Ollama to bind to 0.0.0.0:11434, disabling Host-header checks and allowing DNS rebinding from any browser...

NemoClaw's 0.0.0.0 binding for Ollama exposes local agents to unauthenticated attacks from any webpage visit or LAN device.

• Root cause: Binding...

Changing residential IPs on reconnect break webhook integrations, making stable cloud options like Tencent Cloud preferable for reliable OpenClaw agent deployments.

Silent failures plague OpenClaw channels like Telegram and Slack with no alerts or retries.

• Run openclaw status and health checks to confirm...

This codelab delivers a secure, scalable OpenClaw setup on Cloud Run Instances for self-hosters.

• Enable required APIs, create least-privilege...

API keys and credentials sit in plaintext MCP config files when spinning up AI tools like Claude Desktop or Cursor. The risk spikes once agents...

SingleClaw runs OpenClaw locally on your laptop using Docker, with a dashboard for management and all data staying on your machine.

• Install Docker,...

Bannerbear MCP lets OpenClaw users generate images from templates via plain English chat, no raw API calls needed.

• Get your Bannerbear API key...

• GPT-5.6 reasoning support now ships for OpenClaw and Codex runtime
• External Gateway supervision includes verified restart handoff to confirm state...

Long-lived Codex child agents no longer drop hook policy when their parent turn ends, eliminating the native hook relay not found error.

• Immutable...

The bundled geolocation plugin maps client IPs to coarse cities entirely from a local database, never sending addresses to third parties.

• Privacy...

OpenClaw now remembers your projects, preferences, and past decisions across sessions instead of resetting every time.

• Benefit: Skip 15 minutes of...

Self-hosters can now link AgoraMaven workspaces to OpenClaw for email and LinkedIn delivery with a simple plugin setup.

• Download and install: Grab...

• AIMap discovers OpenClaw instances alongside other AI tools via Shodan queries and Nuclei templates.
• Endpoints receive risk scores (0-10) weighted...

For self-hosters weighing Hermes Agent options, managed services remove security patching, backups, and updates entirely while VPS setups demand...

OpenClaw functions as a harness layer that gives agents scoped tools, context, logs, approvals, and handoffs instead of full environment access.

• Job...

Duplicate Telegram messages occurred when both the durable queue and the model retried after a proven-not-sent failure.

• PR #124310 assigns retry...

Connect OpenClaw to Bitbucket for natural language repo management with managed auth via Composio.

• Quick setup via prompt: Copy setup from...