Description

Spending cap proxy for OpenClaw. Enforce hard daily and monthly limits across all your AI models (Claude, GPT, Gemini, and more) under one cap. Stop runaway...

README (SKILL.md)

ClawCap — Spending Cap for OpenClaw

Name: ClawCap
Author: kintupercy

Stop runaway API bills. ClawCap enforces hard spending caps across every model your agents use — Claude, GPT, Gemini, and more — under a single proxy URL.

What It Does

Hard daily & monthly caps — your agents stop when you hit your limit, not when your wallet is empty
All models, one cap — Claude, GPT, Gemini, DeepSeek, Mistral, and more tracked together
Heartbeat detection — catches agents stuck in polling loops burning tokens
Loop detection — stops agents repeating the same failed request
Kill switch — stop any agent instantly via Telegram or API
Real-time tracking — see exactly what you're spending per model

Setup (2 minutes)

1. Get Your Token

Sign up at clawcap.co and grab your proxy token. Free tier works instantly — no credit card needed.

Set it as an environment variable:

export CLAWCAP_TOKEN="cc_live_your_token_here"

2. Run Setup

The setup script automatically patches your OpenClaw config to route all providers through ClawCap:

node skills/clawcap/scripts/setup.js

This will:

Read your ~/.openclaw/openclaw.json
Point every provider's baseUrl to your ClawCap proxy URL
Back up your original config to ~/.openclaw/openclaw.json.backup

3. Done — You're Protected

Start OpenClaw normally. All requests now flow through ClawCap and your spending caps are enforced automatically.

Check your spend anytime:

curl https://clawcap.co/proxy/$CLAWCAP_TOKEN/status

Manual Setup

If you prefer to configure manually, set every provider's baseUrl in ~/.openclaw/openclaw.json to:

https://clawcap.co/proxy/YOUR_TOKEN

Your API keys stay the same — ClawCap only reads them to forward requests, never stores them.

Environment Variables

Variable	Description
`CLAWCAP_TOKEN`	Your ClawCap proxy token (starts with `cc_live_`)

Plans

Plan	Price	Features
Free	$0	$5/day cap, kill switch, heartbeat detection
Solo	$5/mo	Custom caps, heartbeat+loop protection, Telegram alerts
Pro	$15/mo	Multi-agent tracking, per-model analytics, custom alert thresholds, weekly spend reports

Troubleshooting

Agent not routing through ClawCap: Check that baseUrl in your openclaw.json points to https://clawcap.co/proxy/cc_live_... — not the original API URL.

429 errors: You've hit your spending cap. Check /status to see current spend, or upgrade your plan for higher limits.

Token not working: Make sure you're using the full cc_live_... token from your setup page, not just the email.

Links

Usage Guidance

This skill legitimately modifies only ~/.openclaw/openclaw.json to point providers to https://clawcap.co/proxy/<token>. Before installing: (1) Understand that proxied requests (including your provider API keys and request payloads) will flow through ClawCap — only enable if you trust clawcap.co and their privacy/security practices. (2) Verify the backup file (~/.openclaw/openclaw.json.backup) is created after running setup and test with non-production API keys first. (3) If you change your mind, run the included uninstall script to restore the backup. (4) Prefer creating limited-scope or separate API keys for use behind the proxy, check ClawCap's privacy policy and TLS endpoints, and confirm your CLAWCAP_TOKEN came from the official site. If you need higher assurance, manually edit your config (as the SKILL.md documents) rather than running the script.

Capability Analysis

Type: OpenClaw Skill Name: clawcap Version: 1.1.2 This skill implements a spending cap by routing all LLM API traffic through a third-party proxy (clawcap.co). The setup script (scripts/setup.js) automatically modifies the user's OpenClaw configuration (~/.openclaw/openclaw.json) to redirect the baseUrl of all providers to the proxy. While the stated purpose is cost management, this architecture effectively performs a Man-in-the-Middle (MITM) on all agent communications, exposing sensitive API keys and prompt data to an external service.

Capability Assessment

✓ Purpose & Capability

Name/description (spending-cap proxy) match the actual behavior: the setup script updates providers' baseUrl to a ClawCap proxy URL. Required binary (node) and required env var (CLAWCAP_TOKEN) are appropriate for this operation.

ℹ Instruction Scope

Runtime instructions explicitly tell the user to run the included Node setup script which reads and writes only ~/.openclaw/openclaw.json and creates a backup. The script also opens the browser to clawcap.co to obtain a token if none is provided. Notably, the skill routes all model requests through an external proxy — that means request payloads and provider API keys will transit (and could be observed by) ClawCap. The SKILL.md claims ClawCap "never stores" keys; that is a service-side claim and cannot be verified from the local code.

✓ Install Mechanism

No network downloads or package installs. This is an instruction-only skill with two small local Node scripts. No remote code is fetched or executed by the scripts.

✓ Credentials

Only CLAWCAP_TOKEN is required and is declared as the primary credential; this is proportionate for a proxy service. There are no unrelated credentials or extra environment variables requested. The main privacy/security implication is that your existing provider API keys (left in your OpenClaw config) will be proxied through an external domain.

✓ Persistence & Privilege

The skill does not request elevated platform privileges, does not set always:true, and limits file writes to ~/.openclaw/. It creates a backup file and provides an uninstall script that restores or removes changes. It does not modify other skills or system-wide settings beyond the OpenClaw config.

Version History

v1.1.2

Auto-open browser for signup when no token found

v1.1.1

Harden scripts: path validation, token regex, no file deletion, explicit safety docs. Fix Plans table.

v1.0.0

Initial release: spending cap proxy for OpenClaw

Metadata

Slug clawcap

Version 1.1.2

License MIT-0

All-time Installs 1

Active Installs 1

Total Versions 3

Frequently Asked Questions

What is ClawCap?

Spending cap proxy for OpenClaw. Enforce hard daily and monthly limits across all your AI models (Claude, GPT, Gemini, and more) under one cap. Stop runaway... It is an AI Agent Skill for Claude Code / OpenClaw, with 353 downloads so far.

How do I install ClawCap?

Run "/install clawcap" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is ClawCap free?

Yes, ClawCap is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does ClawCap support?

ClawCap is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ClawCap?

It is built and maintained by Zen Fox (@kintupercy); the current version is v1.1.2.

More Skills

ClawCap