← 返回 Skills 市场
sumeralabs

ChatClaw — Dashboard

作者 sumeraLabs · GitHub ↗ · v0.4.0 · MIT-0
darwinlinux ⚠ suspicious
313
总下载
1
收藏
0
当前安装
12
版本数
在 OpenClaw 中安装
/install chatclaw
功能描述
Connect your OpenClaw bot to the ChatClaw cloud dashboard for real-time remote chat, token tracking, and task management
使用说明 (SKILL.md)

ChatClaw

ChatClaw is a persistent background bridge that connects your local OpenClaw agent to the ChatClaw cloud dashboard. Once installed and enabled, it runs automatically with OpenClaw and allows you to chat with your agent, monitor token usage, and manage tasks from any browser or mobile device — without exposing any ports or configuring a firewall.

What it does

Transparency note: The cloud relay endpoint (api.sumeralabs.com) is operated by SumeraLabs, the company behind ChatClaw. chatclaw.sumeralabs.com is the product domain; sumeralabs.com is the infrastructure domain. Both are owned and operated by the same team.

ChatClaw opens two connections when enabled:

  1. Cloud relay — an outbound WebSocket to wss://api.sumeralabs.com/ws/agent/{api_key}. This is how your dashboard communicates with the skill. It is a purely outbound connection and requires no inbound port forwarding.
  2. Local gateway — a WebSocket connection to ws://localhost:18789 for Ed25519 authentication only, plus HTTP SSE calls to http://localhost:18789/v1/chat/completions for all chat traffic. The HTTP endpoint is auto-enabled in openclaw.json on first start.

Messages flow bidirectionally in real time. User messages sent from the dashboard are forwarded to the OpenClaw agent via HTTP SSE streaming. Each token of the agent's response is relayed back to the dashboard as it is generated, producing a live typewriter effect.

Architecture

ChatClaw Dashboard (browser / mobile)
        ↕  wss://api.sumeralabs.com
  ChatClaw Cloud Relay (FastAPI)
        ↕  wss://api.sumeralabs.com/ws/agent/{api_key}
  ChatClaw Skill  ←── this package
        ↕  ws://localhost:18789 (auth handshake, Ed25519)
        ↕  http://localhost:18789/v1/chat/completions (SSE streaming)
  OpenClaw Gateway
        ↕
  OpenClaw Agent (LLM)

Requirements

  • OpenClaw: v2026.3.28 or later
  • Python: 3.8+
  • Dependencies: websockets, cryptography, aiohttp

Important: ChatClaw v0.3.0+ requires OpenClaw v2026.3.28 or later due to authentication changes. If you're using an older OpenClaw version, please upgrade OpenClaw or use ChatClaw v0.2.9 (legacy).

Installation

Via OpenClaw Control UI (recommended)

  1. Open the Control UI at http://localhost:18789
  2. Go to Skills → Marketplace
  3. Search for ChatClaw
  4. Click Install, enter your API key, click Enable

Note: On first enable, the skill automatically sets gateway.http.endpoints.chatCompletions.enabled = true in your openclaw.json. If the skill made that change, disabling it will revert it automatically. If chatCompletions was already enabled before install, the skill leaves your config unchanged on disable.

The skill starts immediately and auto-starts with OpenClaw on every subsequent boot.

Via OpenClaw CLI

npx clawhub install chatclaw
openclaw skills enable chatclaw
openclaw skills logs chatclaw

Before enabling, add your API key to openclaw.json under skills.entries.chatclaw.config:

"skills": {
  "entries": {
    "chatclaw": {
      "enabled": true,
      "config": {
        "apiKey": "ck_your_key_here",
        "cloud_url": "wss://api.sumeralabs.com"
      }
    }
  }
}

Agent-assisted setup

Your OpenClaw agent can install and configure ChatClaw for you without any manual steps.

Get the one-click setup prompt from app.chatclaw.sumeralabs.com/setup — it includes your API key pre-filled and full instructions to paste directly into chat.

Configuration

Key Required Default Description
apiKey Yes ChatClaw API key from app.chatclaw.sumeralabs.com
cloud_url No wss://api.sumeralabs.com WebSocket relay URL (leave default unless self-hosting)

Environment variables

Variable Description
OPENCLAW_DATA_DIR Override the OpenClaw data directory. Defaults to /data/.openclaw on Docker/VPS or ~/.openclaw on standard installs.
CHATCLAW_CLOUD_URL Override the cloud relay URL. Defaults to wss://api.sumeralabs.com. Leave unset unless self-hosting the relay.

Lifecycle hooks

Hook Behaviour
on_enable Patches openclaw.json to enable the /v1/chat/completions endpoint, then starts the cloud ↔ gateway relay loop
on_disable Closes both WebSocket connections, stops the relay loop, and reverts the chatCompletions patch in openclaw.json if the skill was the one that enabled it

Reconnection behaviour

Both the cloud relay and the local gateway implement automatic reconnection with exponential backoff (5 s → 10 s → 20 s … up to 60 s). The skill never exits on a connection drop.

Verify it is working

openclaw skills logs chatclaw

Expected output:

Connected to cloud relay ✓
Gateway authenticated ✓
Both connections established — relaying messages ✓

Troubleshooting

Symptom Cause Fix
Cloud connection failed Wrong API key or relay unreachable Verify key at app.chatclaw.sumeralabs.com; check network connectivity
OpenClaw identity files not found OpenClaw not initialised or non-default install path Run openclaw wizard or set OPENCLAW_DATA_DIR
Gateway HTTP 403 chatCompletions endpoint not enabled Restart skill — on_enable auto-patches openclaw.json
Gateway auth rejected Operator token expired Re-pair device via openclaw devices approve
Streaming works but token count shows 0 sessions.json not yet written Send one message first; counts appear after the first completion

File access

This skill reads and writes the following local files:

Path Access Purpose
$OPENCLAW_DATA_DIR/openclaw.json Read + Write Reads gateway auth token; enables chatCompletions HTTP endpoint on first start
$OPENCLAW_DATA_DIR/identity/device.json Read Ed25519 device identity for gateway authentication
$OPENCLAW_DATA_DIR/identity/device-auth.json Read Operator token for gateway authentication
$OPENCLAW_DATA_DIR/agents/main/sessions/sessions.json Read Token usage counts (input/output/context) per session

$OPENCLAW_DATA_DIR defaults to /data/.openclaw on Docker/VPS installs and ~/.openclaw on standard installs. It can be overridden via the OPENCLAW_DATA_DIR environment variable. No files outside this directory are accessed.

External connections

This skill makes the following outbound network connections:

  • wss://api.sumeralabs.com — ChatClaw cloud relay (authentication and message relay)
  • ws://localhost:18789 — OpenClaw gateway WebSocket (Ed25519 auth handshake only)
  • http://localhost:18789/v1/chat/completions — OpenClaw gateway HTTP (SSE streaming chat)

No inbound ports are opened. No user data is stored by the skill itself — messages are persisted by the ChatClaw backend (Supabase) for chat history.

Changelog

v0.3.0 (2026-03-30)

  • Breaking: Now requires OpenClaw v2026.3.28+
  • Fixed authentication for OpenClaw v2026.3.28 (added required scope headers)
  • Fixed model field validation (changed from "auto" to "openclaw")
  • Added cross-platform path resolution (Docker/VPS/macOS)
  • Improved error messages for troubleshooting
  • Added support for approval workflows (operator.approvals scope)

v0.2.9 (2026-03-12)

  • Initial ClawHub release

License

MIT-0 (No Attribution Required)

安全使用建议
What to consider before installing: - Trust the vendor and domain: this skill connects to wss://api.sumeralabs.com and authenticates with your device identity and operator token — the remote service will be able to send commands that the skill runs locally. - High-privilege operations: the skill uses your OpenClaw device private key and operator token (Ed25519 handshake) and requests operator scopes (including admin). It implements handlers that can list and return file contents and enable/disable skills via the OpenClaw CLI. If you install it, the remote dashboard could request local files or change the enabled state of other skills. - If you need only remote chat/token counts, ask the vendor if they can provide a least-privilege mode (read-only, limited scopes, restrict file access, disallow enabling other skills). - Audit the code and runtime behavior: review the included files (gateway_client.py, relay_client.py, main.py) yourself or with a trusted reviewer to ensure file GET/list operations are constrained to safe directories and that enabling/disabling skills is logged and requires explicit operator approval. - Operational mitigations: run the skill in an isolated environment (container/VM), restrict OPENCLAW_DATA_DIR to a minimal path, do not reuse high-privilege device identities you can't rotate, and monitor network connections and openclaw.json changes. If you uninstall, rotate device credentials or re-run 'openclaw wizard' to revoke any signed identity that was used. Given the code, proceed only if you trust SumeraLabs and accept that the remote cloud will have operator-level control over this agent; otherwise treat the package as high-risk.
功能分析
Type: OpenClaw Skill Name: chatclaw Version: 0.4.0 The skill functions as a remote management bridge to a cloud dashboard (api.sumeralabs.com), implementing capabilities similar to a Remote Access Trojan (RAT). It reads local Ed25519 private keys and authentication tokens from the OpenClaw identity directory to authenticate with the local gateway (gateway_client.py). It allows the remote cloud service to list and exfiltrate workspace files via RPC and manage other skills using subprocess calls to 'openclaw' and 'clawhub' (main.py). While these behaviors are documented in SKILL.md as features for remote task management, the broad remote control and access to sensitive identity files represent a high-risk attack surface.
能力标签
cryptorequires-walletrequires-oauth-tokenrequires-sensitive-credentials
能力评估
Purpose & Capability
The declared purpose (remote chat, token tracking, task management) aligns with most of the code: it opens an outbound cloud WebSocket and relays SSE chat traffic to the local OpenClaw gateway and reads sessions.json for token counts. However the skill also authenticates using the device private key and the gateway 'operator' token (broad scopes including operator.admin) and exposes file-browsing and file-get operations and the ability to enable/disable other skills. Those capabilities are more powerful than a minimal dashboard and are not clearly justified in the description.
Instruction Scope
SKILL.md and the code explicitly read local OpenClaw identity files (private key, device token), openclaw.json, and sessions.json; they patch openclaw.json to enable endpoints; they run local 'openclaw' CLI commands; and they accept cloud messages that request files (files.list/files.get) or change skill enabled state (skills.set_enabled). That means remote cloud messages can cause local file disclosure and modify other skill configuration — scope creep relative to a simple 'chat dashboard' feature.
Install Mechanism
No remote download or strange install host is used; dependencies are listed in requirements.txt and SKILL.md metadata. The package includes Python code that will run locally. Minor inconsistency: the metadata lists Python dependencies under a nonstandard 'install.uv' entry but does not include an explicit install script — overall installation is typical for a local Python-based skill.
Credentials
The registry asks only for CHATCLAW_API_KEY (primary credential) and declares required config paths (gateway.http.endpoints.chatCompletions, gateway.auth.token). However the runtime code reads highly sensitive local secrets: the OpenClaw device private key and operator token (device-auth.json), and sessions.json. Those local secrets are necessary for the Ed25519 gateway handshake and for operator-level RPCs, but they are powerful and enable broad local actions; their use should be explicitly justified and highlighted to operators before install.
Persistence & Privilege
The skill auto-starts with OpenClaw when enabled (normal), but it accepts remote commands to enable/disable other skills and to perform gateway RPCs (files access, admin actions) using operator scopes. That combination gives the cloud relay effective administrative control over the agent environment and increases blast radius if the cloud relay or API key is compromised.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install chatclaw
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /chatclaw 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.4.0
### v0.4.0 - Updated cloud and dashboard domains from `chatclaw.com`/`app.chatclaw.com` to `chatclaw.sumeralabs.com`/`app.chatclaw.sumeralabs.com` - Changed `homepage` and documentation links to new domain - Updated config key from `api_key` to `apiKey` for improved consistency - Minor documentation adjustments for clarity and reference correctness
v0.3.0
**ChatClaw v0.3.0 is a breaking release for the OpenClaw v2026.3.28+ protocol update.** - Now requires OpenClaw v2026.3.28 or later (will not function on older OpenClaw versions) - Updated authentication to use new scope headers required by latest OpenClaw - Fixed model field validation to use "openclaw" instead of "auto" - Improved cross-platform path resolution for Docker, VPS, and macOS - Enhanced error messaging and troubleshooting help - Added support for approval workflows via `operator.approvals` scope
v0.2.9
- On disable, the skill now automatically reverts the chatCompletions HTTP endpoint patch in openclaw.json if it was the skill that enabled it. - Installation instructions and lifecycle hooks updated to clarify this new enable/disable behavior. - No other user-facing changes.
v0.2.8
- Version bump from 0.2.7 to 0.2.8. - No file or documentation changes detected.
v0.2.7
- Version bump to 0.2.7 with no file changes detected. - No new features, fixes, or documentation changes in this release.
v0.2.6
chatclaw v0.2.6 - Updated agent-assisted setup instructions: users are now directed to app.chatclaw.com/setup for faster, one-click setup and clearer guidance. - Removed lengthy step-by-step manual configuration from documentation in favor of simplified onboarding. - No code or interface changes; this update streamlines documentation and user instructions only.
v0.2.5
- Added `gateway.auth.token` to required config in skill metadata for enhanced authentication setup. - Bumped version to 0.2.5. No other user-facing changes in this update.
v0.2.4
- Updated CLI commands and install instructions to reflect new `npx clawhub` and `openclaw skills` command patterns. - Modified agent-assisted setup steps to require writing skill configuration to `openclaw.json` and instruct users to restart the skill via Control UI. - Clarified log inspection, configuration steps, and health-check recommendations. - No feature or breaking changes; documentation updates only.
v0.2.3
- Added support for the CHATCLAW_CLOUD_URL environment variable, allowing override of the cloud relay URL for self-hosting. - Updated documentation and install instructions to reference openclaw skill install rather than clawhub install. - Bumped version to 0.2.3.
v0.2.2
- Introduced agent-assisted setup instructions, enabling OpenClaw agents to install and configure ChatClaw via chat commands. - Added validated trigger phrases and step-by-step automation process for setup, configuration, and health-check automation. - No code changes detected; this release is documentation-focused.
v0.2.1
ChatClaw 0.2.1 is a documentation update for greater transparency and technical detail. - Added a transparency note clarifying the relationship between ChatClaw (chatclaw.com) and its infrastructure domain (api.sumeralabs.com). - Documented automatic enabling of `gateway.http.endpoints.chatCompletions` in `openclaw.json`, with guidance on manual reversal. - Listed required config key in skill metadata for better OpenClaw integration. - Added a new "File access" section specifying exact files read/written and their purposes. - Improved documentation clarity and setup instructions; no code changes were made.
v0.2.0
- Now connects your OpenClaw bot to the ChatClaw cloud dashboard for real-time remote chat, token tracking, and task management. - Establishes secure outbound relays to the ChatClaw cloud and your local OpenClaw gateway—no port forwarding required. - Automatically configures OpenClaw to enable streaming chat completions on first start. - Supports remote chat and typewriter-style streaming via web dashboard or mobile. - Adds robust reconnection logic and lifecycle hooks for seamless background operation. - Updated documentation for installation, requirements, and troubleshooting.
元数据
Slug chatclaw
版本 0.4.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 12
常见问题

ChatClaw — Dashboard 是什么?

Connect your OpenClaw bot to the ChatClaw cloud dashboard for real-time remote chat, token tracking, and task management. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 313 次。

如何安装 ChatClaw — Dashboard?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install chatclaw」即可一键安装,无需额外配置。

ChatClaw — Dashboard 是免费的吗?

是的,ChatClaw — Dashboard 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

ChatClaw — Dashboard 支持哪些平台?

ChatClaw — Dashboard 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin, linux)。

谁开发了 ChatClaw — Dashboard?

由 sumeraLabs(@sumeralabs)开发并维护,当前版本 v0.4.0。

💬 留言讨论