OpenClaw

Personal AI Agent

An AI assistant that works for you: it reads and writes your files, runs commands and handles tasks, using models on your own server

On this page

At a glance
What the install asks
Addresses and ports
Settings
In its config file
Tools
Works with
Privacy and security
What leaves this server
What LibrePortal turns off
Sources
Under the hood

Good to know before you install

It acts for you, so it stays private, asks before each command and holds skill installs for review, as skills are untrusted code; without a GPU, replies take minutes.

At a glance#

What it is: Personal AI Agent AI
Where it opens: Control UI On its own port at http://your-server:port, or openclaw.your-domain once you have a domain
Updates: Automatic A backup is taken first, and it rolls back if the update fails
Backups: Included Part of the daily backup when that's switched on
Copies: One per server

There's no step-by-step guide for OpenClaw here yet. Everything below comes straight from the app catalogue, so it's what LibrePortal really does when you install it. For using OpenClaw itself, its own documentation is the place to go: github.com/openclaw/openclaw.

What the install asks#

When you install OpenClaw, LibrePortal asks for a little more than usual before it starts:

Model. It runs in Ollama on this server, so nothing you say leaves it. Without a graphics card even a short reply takes several minutes. Any other Ollama model with tool calling can be set under Settings later.

Addresses and ports#

OpenClaw has one port. LibrePortal picks a free port number for each when you install, so yours will differ from anyone else's. The Config tab's Network section shows them, and the app's Open button uses the right one.

What it is	Who can reach it	With a domain
Control UI	Trusted places only	`openclaw.your-domain`

Settings#

In its config file#

OpenClaw's own settings aren't on the Config tab yet. They live in the app's config file, described here so you know they exist. How to change them.

Setting	What it does	Starts as
Name `CFG_OPENCLAW_DISPLAY_NAME`	What this app is called on your dashboards. Leave empty to use its usual name	Empty
Show on the LibrePortal Dashboard `CFG_OPENCLAW_SHOW_ON_DASHBOARD`	Whether this app gets a shortcut on the front page of the LibrePortal WebUI, separate from any Dashy dashboard Choices: true, false	`true`
Update Check `CFG_OPENCLAW_UPDATE_CHECK`	Whether OpenClaw may check for and apply its own updates, which tells openclaw.ai its version and platform Choices: true, false	`false`
Model `CFG_OPENCLAW_MODEL`	The Ollama model the agent thinks with; it must support tool calling	`qwen3:4b`
Context Size Advanced `CFG_OPENCLAW_CONTEXT`	Tokens the model reads at once; the agent needs about 16K	`16384`
Ollama Address Advanced `CFG_OPENCLAW_OLLAMA_URL`	Where the model runs; this server's Ollama app unless you point it elsewhere	`http://ollama-service:11434`
Extra Addresses Advanced `CFG_OPENCLAW_EXTRA_ADDRESSES`	Other addresses you open the Control UI from, e.g. http://myserver.lan:12345	Empty
Shell Commands `CFG_OPENCLAW_COMMANDS`	Whether the agent may run commands, and if each one asks you first Choices: ask, off, full	`ask`
Web Access `CFG_OPENCLAW_WEB`	Let the agent search and read web pages; risky with a small local model Choices: true, false	`false`
Skill & Plugin Installs `CFG_OPENCLAW_SKILL_INSTALLS`	Third-party code: stop each install for review, refuse all, or allow Choices: warn, block, allow	`warn`

Tools#

OpenClaw's Tools tab has 4 buttons for jobs you'd otherwise need a terminal for. Each one runs as a task, so you can watch it on the Tasks page and read what it did. More about Tools.

Sign In a BrowserTested on 2026.9.7

A one-time link that signs in the browser that opens it, with no token to paste. Works once, for ten minutes.

Approve a Browser

Let in a browser that pasted the gateway token and is waiting for approval. Blank approves the only one waiting.

Asks for: Request (its start, from List Browsers) (optional)

List Browsers

Browsers and devices waiting for approval, and the ones already let in.

Remove a BrowserCan't be undone

Take away a browser's or device's access. It needs the token and a new approval to come back.

Asks for: Device (its start, from List Browsers)

Works with#

These are the other apps OpenClaw knows how to work with. Once it's installed, its page shows the same list with whether each one is connected. How this works.

Grafana: Shows dashboards for the apps that have one. works with every app
Prometheus: Collects metrics from the apps that can export them. works with every app
Uptime Kuma: Watches your apps and shows when one goes down. works with every app

Privacy and security#

All clear OpenClaw is an AI assistant that runs on your own models. LibrePortal turns off its daily update check with its makers.

What leaves this server#

Skill and plugin installs contact ClawHub, and are held for your review
A cloud model provider, only if you add a key

What LibrePortal turns off#

Daily update check that shares your version and system type (switchable in Config)

Licence: MIT. Audited: 21 October 2026. See the privacy of every app and the Promise.

Sources#

Under the hood#

It runs this image: openclaw/openclaw:2026.9.7@sha256:0da12cd49983fcb5e4915fd3135ce7a33d82f93649b1df6964946d2c1d1dbcfc.
It can sit behind Authelia's sign-in once Authelia is installed.
Its own project and documentation: github.com/openclaw/openclaw

Ports, settings, tools and connections on this page are read from LibrePortal v0.10.97's app catalogue each time the guide is built.

Next steps

Every appAll the apps in the App Center, with search and categories.App settingsEvery app page has the same tabs for settings, tools and backups.Tools and add-onsButtons for each app's everyday jobs, like adding users.