π OpenClaw
Descriptionβ
< What is it? >β
OpenClaw is an open-source, self-hosted AI assistant platform. Its Gateway connects chat surfacesβsuch as Discord, Slack, Telegram, WhatsApp, or a web dashboardβto an agent runtime. The Gateway owns session routing and channel connections; configured agents can use selected models, tools, skills, plugins, and automation.
It is a complete agent runtime and deployment surfaceβnot an LLM, vector database, or Model Context Protocol (MCP) server. You run it on your own machine or server and decide which channels, credentials, workspaces, and capabilities an agent may use.
Key pointsβ
< Gateway-centered design >β
| Part | Role |
|---|---|
| Chat channel or dashboard | Where a person sends a request and receives the response. |
| Gateway | The central control plane for channel connections, sessions, routing, and configured policy. |
| Agent runtime | Uses an LLM to decide how to respond or which enabled tool to call. |
| Tools, skills, and plugins | Give the agent bounded capabilities, reusable procedures, and integrations. |
| Model provider | Supplies the model used by the agent; OpenClaw can be configured with different supported providers. |
Chat app or dashboard
β
Gateway
β
Agent runtime + model
β
Tools, skills, plugins, and permitted services
< Simple examples >β
| Goal | Example flow |
|---|---|
| Ask from a chat app | You message: βSummarize the open issues for project Alpha.β The Gateway routes the message to an agent session. If an issue-tracker tool is installed and allowed, the agent retrieves the issues and replies in the same chat. |
| Use a coding assistant remotely | You message a configured agent from Telegram: βExplain the failing test in this workspace.β The agent can inspect only the workspace and tools it has been granted, then sends the explanation back through Telegram. |
| Run a recurring task | A scheduled job asks an agent to prepare a daily briefing from permitted sources, then posts the result to a configured Slack channel. |
| Add retrieval to an agent | An agent uses a LlamaIndex retriever as a tool, retrieves relevant document chunks, and answers a question using that context. |
OpenClaw provides the agent-facing runtime and routing. The individual tools, data sources, and approval rules still need to be configured for the application.
< Security boundaries matter >β
An agent connected to messages, files, accounts, or a shell can affect real systems. Self-hosting gives the operator control, but it does not automatically make an agent safe.
- Allow only trusted senders and channels.
- Give each agent the least access it needs: prefer read-only tools and scoped workspaces.
- Require approvals for irreversible actions such as sending messages, deleting data, spending money, or deploying code.
- Treat tool output and retrieved text as untrusted data; they can contain prompt-injection attempts.
- Start with a low-risk environment before connecting personal or production accounts.
Comparisonβ
| Technology | Primary role | How it relates to OpenClaw |
|---|---|---|
| OpenClaw | Self-hosted gateway and agent platform | Routes conversations, runs agent sessions, and connects configured capabilities. |
| LlamaIndex | Framework for RAG and context-augmented applications | Can provide retrieval or query tools that an OpenClaw agent uses. |
| MCP | Standard protocol for connecting AI applications to external capabilities | Can be one way for an OpenClaw deployment to reach external tools or context. |
| Agent Skills | Reusable instructions and supporting resources | Can teach an agent repeatable workflows without placing every procedure in each prompt. |
Related ideasβ
Video Tutorialβ
- OpenClaw Tutorial for Beginners - Crash Course
- What is Openclaw