FAQ
Quick answers plus deeper troubleshooting for real-world setups (local dev, VPS, multi-agent, OAuth/API keys, model failover). For runtime diagnostics, see Troubleshooting. For the full config reference, see Configuration.Table of contents
- What is Clawdbot?
- Quick start and first-run setup
- What’s the recommended way to install and set up Clawdbot?
- How do I open the dashboard after onboarding?
- How do I authenticate the dashboard (token) on localhost vs remote?
- What runtime do I need?
- What does the onboarding wizard actually do?
- How does Anthropic “setup-token” auth work?
- Do you support Claude subscription auth (Claude Code OAuth)?
- Is AWS Bedrock supported?
- How does Codex auth work?
- Is a local model OK for casual chats?
- How do I keep hosted model traffic in a specific region?
- Can I use Bun?
- Telegram: what goes in
allowFrom? - Can multiple people use one WhatsApp number with different Clawdbots?
- Can I run a “fast chat” agent and an “Opus for coding” agent?
- Does Homebrew work on Linux?
- Can I switch between npm and git installs later?
- Should I run the Gateway on my laptop or a VPS?
- Skills and automation
- Sandboxing and memory
- Where things live on disk
- Config basics
- What format is the config? Where is it?
- I set
gateway.bind: "lan"(or"tailnet") and now nothing listens / the UI says unauthorized - Why do I need a token on localhost now?
- Do I have to restart after changing config?
- How do I enable web search (and web fetch)?
- How do I run a central Gateway with specialized workers across devices?
- Can the Clawdbot browser run headless?
- Remote gateways + nodes
- How do commands propagate between Telegram, the gateway, and nodes?
- Do nodes run a gateway daemon?
- Is there an API / RPC way to apply config?
- What’s a minimal “sane” config for a first install?
- How do I set up Tailscale on a VPS and connect from my Mac?
- How do I connect a Mac node to a remote Gateway (Tailscale Serve)?
- Env vars and .env loading
- Sessions & multiple chats
- Models: defaults, selection, aliases, switching
- What is the “default model”?
- How do I switch models on the fly (without restarting)?
- Why do I see “Model … is not allowed” and then no reply?
- Why do I see “Unknown model: minimax/MiniMax-M2.1”?
- Can I use MiniMax as my default and OpenAI for complex tasks?
- Are opus / sonnet / gpt built‑in shortcuts?
- How do I define/override model shortcuts (aliases)?
- How do I add models from other providers like OpenRouter or Z.AI?
- Model failover and “All models failed”
- Auth profiles: what they are and how to manage them
- Gateway: ports, “already running”, and remote mode
- What port does the Gateway use?
- Why does
clawdbot daemon statussayRuntime: runningbutRPC probe: failed? - Why does
clawdbot daemon statusshowConfig (cli)andConfig (daemon)different? - What does “another gateway instance is already listening” mean?
- How do I run Clawdbot in remote mode (client connects to a Gateway elsewhere)?
- The Control UI says “unauthorized” (or keeps reconnecting). What now?
- I set
gateway.bind: "tailnet"but it can’t bind / nothing listens - Can I run multiple Gateways on the same host?
- What does “invalid handshake” / code 1008 mean?
- Logging and debugging
- Media & attachments
- Security and access control
- Chat commands, aborting tasks, and “it won’t stop”
- Common troubleshooting
- “All models failed” — what should I check first?
- I’m running on my personal WhatsApp number — why is self-chat weird?
- WhatsApp logged me out. How do I re‑auth?
- Build errors on
main— what’s the standard fix path? - npm install fails (allow-build-scripts / missing tar or yargs). What now?
- How do I switch between git installs and npm installs?
- Telegram block streaming isn’t splitting text between tool calls. Why?
- Discord doesn’t reply in my server even with
requireMention: false. Why? - Cloud Code Assist API error: invalid tool schema (400). What now?
First 60 seconds if something’s broken
-
Quick status (first check)
Fast local summary: OS + update, gateway/daemon reachability, agents/sessions, provider config + runtime issues (when gateway is reachable).
-
Pasteable report (safe to share)
Read-only diagnosis with log tail (tokens redacted).
-
Daemon + port state
Shows supervisor runtime vs RPC reachability, the probe target URL, and which config the daemon likely used.
-
Deep probes
Runs gateway health checks + provider probes (requires a reachable gateway). See Health.
-
Tail the latest log
If RPC is down, fall back to:File logs are separate from service logs; see Logging and Troubleshooting.
-
Run the doctor (repairs)
Repairs/migrates config/state + runs health checks. See Doctor.
-
Gateway snapshot
Asks the running gateway for a full snapshot (WS-only). See Health.
What is Clawdbot?
What is Clawdbot, in one paragraph?
Clawdbot is a personal AI assistant you run on your own devices. It replies on the messaging surfaces you already use (WhatsApp, Telegram, Slack, Discord, Signal, iMessage, WebChat) and can also do voice + a live Canvas on supported platforms. The Gateway is the always‑on control plane; the assistant is the product.Quick start and first-run setup
What’s the recommended way to install and set up Clawdbot?
The repo recommends running from source and using the onboarding wizard:How do I open the dashboard after onboarding?
The wizard now opens your browser with a tokenized dashboard URL right after onboarding and also prints the full link (with token) in the summary. Keep that tab open; if it didn’t launch, copy/paste the printed URL on the same machine. Tokens stay local to your host—nothing is fetched from the browser.How do I authenticate the dashboard (token) on localhost vs remote?
Localhost (same machine):- Open
http://127.0.0.1:18789/. - If it asks for auth, run
clawdbot dashboardand use the tokenized link (?token=...). - The token is the same value as
gateway.auth.token(orCLAWDBOT_GATEWAY_TOKEN) and is stored by the UI after first load.
- Tailscale Serve (recommended): keep bind loopback, run
clawdbot gateway --tailscale serve, openhttps://<magicdns>/. Ifgateway.auth.allowTailscaleistrue, identity headers satisfy auth (no token). - Tailnet bind: run
clawdbot gateway --bind tailnet --token "<token>", openhttp://<tailscale-ip>:18789/, paste token in dashboard settings. - SSH tunnel:
ssh -N -L 18789:127.0.0.1:18789 user@hostthen openhttp://127.0.0.1:18789/?token=...fromclawdbot dashboard.
What runtime do I need?
Node >= 22 is required.pnpm is recommended. Bun is not recommended for the Gateway.
What does the onboarding wizard actually do?
clawdbot onboard is the recommended setup path. In local mode it walks you through:
- Model/auth setup (Anthropic setup-token recommended for Claude subscriptions, OpenAI Codex OAuth supported, API keys optional, LM Studio local models supported)
- Workspace location + bootstrap files
- Gateway settings (bind/port/auth/tailscale)
- Providers (WhatsApp, Telegram, Discord, Signal, iMessage)
- Daemon install (LaunchAgent on macOS; systemd user unit on Linux/WSL2)
- Health checks and skills selection
How does Anthropic “setup-token” auth work?
The wizard can runclaude setup-token on the gateway host (or you run it yourself), then stores the token as an auth profile for the anthropic provider. That profile is used for model calls the same way an API key or OAuth profile would be. If you already ran claude setup-token, pick Anthropic token (paste setup-token) and paste it. More detail: OAuth.
Clawdbot keeps auth.profiles["anthropic:claude-cli"].mode set to "oauth" so
the profile accepts both OAuth and setup-token credentials; older "token" mode
entries auto-migrate.
Do you support Claude subscription auth (Claude Code OAuth)?
Yes. Clawdbot can reuse Claude Code CLI credentials (OAuth) and also supports setup-token. If you have a Claude subscription, we recommend setup-token on the gateway host for the most reliable long‑running setup (requires Claude Pro/Max + theclaude CLI). OAuth reuse is supported, but avoid logging in separately via Clawdbot and Claude Code to prevent token conflicts. See Anthropic and OAuth.
Note: Claude subscription access is governed by Anthropic’s terms. For production or multi‑user workloads, API keys are usually the safer choice.
Is AWS Bedrock supported?
Yes — via pi‑ai’s Amazon Bedrock (Converse) provider with manual config. You must supply AWS credentials/region on the gateway host and add a Bedrock provider entry in your models config. See Amazon Bedrock and Model providers. If you prefer a managed key flow, an OpenAI‑compatible proxy in front of Bedrock is still a valid option.How does Codex auth work?
Clawdbot supports OpenAI Code (Codex) via OAuth or by reusing your Codex CLI login (~/.codex/auth.json). The wizard can import the CLI login or run the OAuth flow and will set the default model to openai-codex/gpt-5.2 when appropriate. See Model providers and Wizard.
Is a local model OK for casual chats?
Usually no. Clawdbot needs large context + strong safety; small cards truncate and leak. If you must, run the largest MiniMax M2.1 build you can locally (LM Studio) and see /gateway/local-models. Smaller/quantized models increase prompt-injection risk — see Security.How do I keep hosted model traffic in a specific region?
Pick region-pinned endpoints. OpenRouter exposes US-hosted options for MiniMax, Kimi, and GLM; choose the US-hosted variant to keep data in-region. You can still list Anthropic/OpenAI alongside these by usingmodels.mode: "merge" so fallbacks stay available while respecting the regioned provider you select.
Can I use Bun?
Bun is not recommended. We see runtime bugs, especially with WhatsApp and Telegram. Use Node for stable gateways. If you still want to experiment with Bun, do it on a non‑production gateway without WhatsApp/Telegram.Telegram: what goes in allowFrom?
channels.telegram.allowFrom is the human sender’s Telegram user ID (numeric, recommended) or @username. It is not the bot username.
Safer (no third-party bot):
- DM your bot, then run
clawdbot logs --followand readfrom.id.
- DM your bot, then call
https://api.telegram.org/bot<bot_token>/getUpdatesand readmessage.from.id.
- DM
@userinfobotor@getidsbot.
Can multiple people use one WhatsApp number with different Clawdbots?
Yes, via multi‑agent routing. Bind each sender’s WhatsApp DM (peerkind: "dm", sender E.164 like +15551234567) to a different agentId, so each person gets their own workspace and session store. Replies still come from the same WhatsApp account, and DM access control (channels.whatsapp.dmPolicy / channels.whatsapp.allowFrom) is global per WhatsApp account. See Multi-Agent Routing and WhatsApp.
Can I run a “fast chat” agent and an “Opus for coding” agent?
Yes. Use multi‑agent routing: give each agent its own default model, then bind inbound routes (provider account or specific peers) to each agent. Example config lives in Multi-Agent Routing. See also Models and Configuration.Does Homebrew work on Linux?
Yes. Homebrew supports Linux (Linuxbrew). Quick setup:/home/linuxbrew/.linuxbrew/bin (or your brew prefix) so brew-installed tools resolve in non‑login shells.
Can I switch between npm and git installs later?
Yes. Install the other flavor, then run Doctor so the gateway service points at the new entrypoint. From npm → git:--repair in automation).
Should I run the Gateway on my laptop or a VPS?
Short answer: if you want 24/7 reliability, use a VPS. If you want the lowest friction and you’re okay with sleep/restarts, run it locally. Laptop (local Gateway)- Pros: no server cost, direct access to local files, live browser window.
- Cons: sleep/network drops = disconnects, OS updates/reboots interrupt, must stay awake.
- Pros: always‑on, stable network, no laptop sleep issues, easier to keep running.
- Cons: often run headless (use screenshots), remote file access only, you must SSH for updates.
Skills and automation
How do I customize skills without keeping the repo dirty?
Use managed overrides instead of editing the repo copy. Put your changes in~/.clawdbot/skills/<name>/SKILL.md (or add a folder via skills.load.extraDirs in ~/.clawdbot/clawdbot.json). Precedence is <workspace>/skills > ~/.clawdbot/skills > bundled, so managed overrides win without touching git. Only upstream-worthy edits should live in the repo and go out as PRs.
Can I load skills from a custom folder?
Yes. Add extra directories viaskills.load.extraDirs in ~/.clawdbot/clawdbot.json (lowest precedence). Default precedence remains: <workspace>/skills → ~/.clawdbot/skills → bundled → skills.load.extraDirs. clawdhub installs into ./skills by default, which Clawdbot treats as <workspace>/skills.
How can I use different models for different tasks?
Today the supported patterns are:- Cron jobs: isolated jobs can set a
modeloverride per job. - Sub-agents: route tasks to separate agents with different default models.
- On-demand switch: use
/modelto switch the current session model at any time.
How do I install skills on Linux?
Use ClawdHub (CLI) or drop skills into your workspace. The macOS Skills UI isn’t available on Linux. Browse skills at https://clawdhub.com. Install the ClawdHub CLI (pick one package manager):Do you have a Notion or HeyGen integration?
Not built‑in today. Options:- Custom skill / plugin: best for reliable API access (Notion/HeyGen both have APIs).
- Browser automation: works without code but is slower and more fragile.
- One Notion page per client (context + preferences + active work).
- Ask the agent to fetch that page at the start of a session.
./skills under your current directory (or falls back to your configured Clawdbot workspace); Clawdbot treats that as <workspace>/skills on the next session. For shared skills across agents, place them in ~/.clawdbot/skills/<name>/SKILL.md. Some skills expect binaries installed via Homebrew; on Linux that means Linuxbrew (see the Homebrew Linux FAQ entry above). See Skills and ClawdHub.
How do I install the Chrome extension for browser takeover?
Use the built-in installer, then load the unpacked extension in Chrome:chrome://extensions → enable “Developer mode” → “Load unpacked” → pick that folder.
Full guide (including remote Gateway via Tailscale + security notes): Chrome extension
If the Gateway runs on the same machine as Chrome (default setup), you usually do not need clawdbot browser serve.
You still need to click the extension button on the tab you want to control (it doesn’t auto-attach).
Sandboxing and memory
Is there a dedicated sandboxing doc?
Yes. See Sandboxing. For Docker-specific setup (full gateway in Docker or sandbox images), see Docker.Can I keep DMs “personal” but make groups “public/sandboxed” with one agent?
Yes — if your private traffic is DMs and your public traffic is groups. Useagents.defaults.sandbox.mode: "non-main" so group/channel sessions (non-main keys) run in Docker, while the main DM session stays on-host. Then restrict what tools are available in sandboxed sessions via tools.sandbox.tools.
Setup walkthrough + example config: Groups: personal DMs + public groups
Key config reference: Gateway configuration
How do I bind a host folder into the sandbox?
Setagents.defaults.sandbox.docker.binds to ["host:path:mode"] (e.g., "/home/user/src:/src:ro"). Global + per-agent binds merge; per-agent binds are ignored when scope: "shared". Use :ro for anything sensitive and remember binds bypass the sandbox filesystem walls. See Sandboxing and Sandbox vs Tool Policy vs Elevated for examples and safety notes.
How does memory work?
Clawdbot memory is just Markdown files in the agent workspace:- Daily notes in
memory/YYYY-MM-DD.md - Curated long-term notes in
MEMORY.md(main/private sessions only)
Does semantic memory search require an OpenAI API key?
Only if you use remote embeddings (OpenAI). Codex OAuth covers chat/completions and does not grant embeddings access, so signing in with Codex (OAuth or the Codex CLI login) does not help for semantic memory search. Remote memory search still needs a real OpenAI API key (OPENAI_API_KEY or
models.providers.openai.apiKey). If you’d rather stay local, set
memorySearch.provider = "local" (and optionally memorySearch.fallback = "none"). We support remote or local embedding models — see Memory
for the setup details.
Where things live on disk
Where does Clawdbot store its data?
Everything lives under$CLAWDBOT_STATE_DIR (default: ~/.clawdbot):
| Path | Purpose |
|---|---|
$CLAWDBOT_STATE_DIR/clawdbot.json | Main config (JSON5) |
$CLAWDBOT_STATE_DIR/credentials/oauth.json | Legacy OAuth import (copied into auth profiles on first use) |
$CLAWDBOT_STATE_DIR/agents/<agentId>/agent/auth-profiles.json | Auth profiles (OAuth + API keys) |
$CLAWDBOT_STATE_DIR/agents/<agentId>/agent/auth.json | Runtime auth cache (managed automatically) |
$CLAWDBOT_STATE_DIR/credentials/ | Provider state (e.g. whatsapp/<accountId>/creds.json) |
$CLAWDBOT_STATE_DIR/agents/ | Per‑agent state (agentDir + sessions) |
$CLAWDBOT_STATE_DIR/agents/<agentId>/sessions/ | Conversation history & state (per agent) |
$CLAWDBOT_STATE_DIR/agents/<agentId>/sessions/sessions.json | Session metadata (per agent) |
~/.clawdbot/agent/* (migrated by clawdbot doctor).
Your workspace (AGENTS.md, memory files, skills, etc.) is separate and configured via agents.defaults.workspace (default: ~/clawd).
Where should AGENTS.md / SOUL.md / USER.md / MEMORY.md live?
These files live in the agent workspace, not~/.clawdbot.
- Workspace (per agent):
AGENTS.md,SOUL.md,IDENTITY.md,USER.md,MEMORY.md(ormemory.md),memory/YYYY-MM-DD.md, optionalHEARTBEAT.md. - State dir (
~/.clawdbot): config, credentials, auth profiles, sessions, logs, and shared skills (~/.clawdbot/skills).
~/clawd, configurable via:
How do I completely uninstall Clawdbot?
See the dedicated guide: Uninstall.Can agents work outside the workspace?
Yes. The workspace is the default cwd and memory anchor, not a hard sandbox. Relative paths resolve inside the workspace, but absolute paths can access other host locations unless sandboxing is enabled. If you need isolation, useagents.defaults.sandbox or per‑agent sandbox settings. If you
want a repo to be the default working directory, point that agent’s
workspace to the repo root. The Clawdbot repo is just source code; keep the
workspace separate unless you intentionally want the agent to work inside it.
Example (repo as default cwd):
I’m in remote mode — where is the session store?
Session state is owned by the gateway host. If you’re in remote mode, the session store you care about is on the remote machine, not your local laptop. See Session management.Config basics
What format is the config? Where is it?
Clawdbot reads an optional JSON5 config from$CLAWDBOT_CONFIG_PATH (default: ~/.clawdbot/clawdbot.json):
~/clawd).
I set gateway.bind: "lan" (or "tailnet") and now nothing listens / the UI says unauthorized
Non-loopback binds require auth. Configure gateway.auth.mode + gateway.auth.token (or use CLAWDBOT_GATEWAY_TOKEN).
gateway.remote.tokenis for remote CLI calls only; it does not enable local gateway auth.- The Control UI authenticates via
connect.params.auth.token(stored in app/UI settings). Avoid putting tokens in URLs.
Why do I need a token on localhost now?
The wizard generates a gateway token by default (even on loopback) so local WS clients must authenticate. This blocks other local processes from calling the Gateway. Paste the token into the Control UI settings (or your client config) to connect. If you really want open loopback, removegateway.auth from your config. Doctor can generate a token for you any time: clawdbot doctor --generate-gateway-token.
Do I have to restart after changing config?
The Gateway watches the config and supports hot‑reload:gateway.reload.mode: "hybrid"(default): hot‑apply safe changes, restart for critical oneshot,restart,offare also supported
How do I enable web search (and web fetch)?
web_fetch works without an API key. web_search requires a Brave Search API
key. Recommended: run clawdbot configure --section web to store it in
tools.web.search.apiKey. Environment alternative: set BRAVE_API_KEY for the
Gateway process.
- If you use allowlists, add
web_search/web_fetchorgroup:web. web_fetchis enabled by default (unless explicitly disabled).- Daemons read env vars from
~/.clawdbot/.env(or the service environment).
How do I run a central Gateway with specialized workers across devices?
The common pattern is one Gateway (e.g. Raspberry Pi) plus nodes and agents:- Gateway (central): owns channels (Signal/WhatsApp), routing, and sessions.
- Nodes (devices): Macs/iOS/Android connect as peripherals and expose local tools (
system.run,canvas,camera). - Agents (workers): separate brains/workspaces for special roles (e.g. “Hetzner ops”, “Personal data”).
- Sub‑agents: spawn background work from a main agent when you want parallelism.
- TUI: connect to the Gateway and switch agents/sessions.
Can the Clawdbot browser run headless?
Yes. It’s a config option:false (headful). Headless is more likely to trigger anti‑bot checks on some sites. See Browser.
Headless uses the same Chromium engine and works for most automation (forms, clicks, scraping, logins). The main differences:
- No visible browser window (use screenshots if you need visuals).
- Some sites are stricter about automation in headless mode (CAPTCHAs, anti‑bot). For example, X/Twitter often blocks headless sessions.
Remote gateways + nodes
How do commands propagate between Telegram, the gateway, and nodes?
Telegram messages are handled by the gateway. The gateway runs the agent and only then calls nodes over the Bridge when a node tool is needed: Telegram → Gateway → Agent →node.* → Node → Gateway → Telegram
Nodes don’t see inbound provider traffic; they only receive bridge RPC calls.
Do nodes run a gateway daemon?
No. Only one gateway should run per host unless you intentionally run isolated profiles (see Multiple gateways). Nodes are peripherals that connect to the gateway (iOS/Android nodes, or macOS “node mode” in the menubar app). A full restart is required forgateway, bridge, discovery, and canvasHost changes.
Is there an API / RPC way to apply config?
Yes.config.apply validates + writes the full config and restarts the Gateway as part of the operation.
What’s a minimal “sane” config for a first install?
How do I set up Tailscale on a VPS and connect from my Mac?
Minimal steps:- Install + login on the VPS
- Install + login on your Mac
- Use the Tailscale app and sign in to the same tailnet.
- Enable MagicDNS (recommended)
- In the Tailscale admin console, enable MagicDNS so the VPS has a stable name.
- Use the tailnet hostname
- SSH:
ssh [email protected] - Gateway WS:
ws://your-vps.tailnet-xxxx.ts.net:18789
- SSH:
How do I connect a Mac node to a remote Gateway (Tailscale Serve)?
Serve only exposes the Gateway Control UI. Nodes use the bridge port. Recommended setup:- Enable the bridge on the gateway host:
autoprefers a tailnet IP when Tailscale is present. - Make sure the VPS + Mac are on the same tailnet.
- Use the macOS app in Remote mode (SSH target can be the tailnet hostname). The app will tunnel the bridge port and connect as a node.
- Approve the node on the gateway:
Env vars and .env loading
How does Clawdbot load environment variables?
Clawdbot reads env vars from the parent process (shell, launchd/systemd, CI, etc.) and additionally loads:.envfrom the current working directory- a global fallback
.envfrom~/.clawdbot/.env(aka$CLAWDBOT_STATE_DIR/.env)
.env file overrides existing env vars.
You can also define inline env vars in config (applied only if missing from the process env):
“I started the Gateway via a daemon and my env vars disappeared.” What now?
Two common fixes:- Put the missing keys in
~/.clawdbot/.envso they’re picked up even when the daemon doesn’t inherit your shell env. - Enable shell import (opt‑in convenience):
CLAWDBOT_LOAD_SHELL_ENV=1, CLAWDBOT_SHELL_ENV_TIMEOUT_MS=15000.
I set COPILOT_GITHUB_TOKEN, but models status shows “Shell env: off.” Why?
clawdbot models status reports whether shell env import is enabled. “Shell env: off”
does not mean your env vars are missing — it just means Clawdbot won’t load
your login shell automatically.
If the Gateway runs as a daemon (launchd/systemd), it won’t inherit your shell
environment. Fix by doing one of these:
- Put the token in
~/.clawdbot/.env: - Or enable shell import (
env.shellEnv.enabled: true). - Or add it to your config
envblock (applies only if missing).
COPILOT_GITHUB_TOKEN (also GH_TOKEN / GITHUB_TOKEN).
See /concepts/model-providers and /environment.
Sessions & multiple chats
How do I start a fresh conversation?
Send/new or /reset as a standalone message. See Session management.
How do I completely reset Clawdbot (but keep it installed)?
Use the reset command:- The onboarding wizard also offers Reset if it sees an existing config. See Wizard.
- If you used profiles (
--profile/CLAWDBOT_PROFILE), reset each state dir (defaults are~/.clawdbot-<profile>). - Dev reset:
clawdbot gateway --dev --reset(dev-only; wipes dev config + credentials + sessions + workspace).
I’m getting “context too large” errors — how do I reset or compact?
Use one of these:-
Compact (keeps the conversation but summarizes older turns):
or
/compact <instructions>to guide the summary. -
Reset (fresh session ID for the same chat key):
- Enable or tune session pruning (
agents.defaults.contextPruning) to trim old tool output. - Use a model with a larger context window.
Do I need to add a “bot account” to a WhatsApp group?
No. Clawdbot runs on your own account, so if you’re in the group, Clawdbot can see it. By default, group replies are blocked until you allow senders (groupPolicy: "allowlist").
If you want only you to be able to trigger group replies:
Why doesn’t Clawdbot reply in a group?
Two common causes:- Mention gating is on (default). You must @mention the bot (or match
mentionPatterns). - You configured
channels.whatsapp.groupswithout"*"and the group isn’t allowlisted.
Do groups/threads share context with DMs?
Direct chats collapse to the main session by default. Groups/channels have their own session keys, and Telegram topics / Discord threads are separate sessions. See Groups and Group messages.Models: defaults, selection, aliases, switching
What is the “default model”?
Clawdbot’s default model is whatever you set as:provider/model (example: anthropic/claude-opus-4-5). If you omit the provider, Clawdbot currently assumes anthropic as a temporary deprecation fallback — but you should still explicitly set provider/model.
How do I switch models on the fly (without restarting)?
Use the/model command as a standalone message:
/model, /model list, or /model status.
/model (and /model list) shows a compact, numbered picker. Select by number:
/model status shows which agent is active, which auth-profiles.json file is being used, and which auth profile will be tried next.
It also shows the configured provider endpoint (baseUrl) and API mode (api) when available.
Why do I see “Model … is not allowed” and then no reply?
Ifagents.defaults.models is set, it becomes the allowlist for /model and any
session overrides. Choosing a model that isn’t in that list returns:
agents.defaults.models, remove the allowlist, or pick a model from /model list.
Why do I see “Unknown model: minimax/MiniMax-M2.1”?
This means the provider isn’t configured (no MiniMax provider config or auth profile was found), so the model can’t be resolved. A fix for this detection is in 2026.1.12 (unreleased at the time of writing). Fix checklist:- Upgrade to 2026.1.12 (or run from source
main), then restart the gateway. - Make sure MiniMax is configured (wizard or JSON), or that a MiniMax API key exists in env/auth profiles so the provider can be injected.
- Use the exact model id (case‑sensitive):
minimax/MiniMax-M2.1orminimax/MiniMax-M2.1-lightning. - Run:
and pick from the list (or
/model listin chat).
Can I use MiniMax as my default and OpenAI for complex tasks?
Yes. Use MiniMax as the default and switch models per session when needed. Fallbacks are for errors, not “hard tasks,” so use/model or a separate agent.
Option A: switch per session
- Agent A default: MiniMax
- Agent B default: OpenAI
- Route by agent or use
/agentto switch
Are opus / sonnet / gpt built‑in shortcuts?
Yes. Clawdbot ships a few default shorthands (only applied when the model exists inagents.defaults.models):
opus→anthropic/claude-opus-4-5sonnet→anthropic/claude-sonnet-4-5gpt→openai/gpt-5.2gpt-mini→openai/gpt-5-minigemini→google/gemini-3-pro-previewgemini-flash→google/gemini-3-flash-preview
How do I define/override model shortcuts (aliases)?
Aliases come fromagents.defaults.models.<modelId>.alias. Example:
/model sonnet (or /<alias> when supported) resolves to that model ID.
How do I add models from other providers like OpenRouter or Z.AI?
OpenRouter (pay‑per‑token; many models):No API key found for provider "zai").
“No API key found for provider …” after adding a new agent
This usually means the new agent has an empty auth store. Auth is per-agent and stored in:- Run
clawdbot agents add <id>and configure auth during the wizard. - Or copy
auth-profiles.jsonfrom the main agent’sagentDirinto the new agent’sagentDir.
agentDir across agents; it causes auth/session collisions.
Model failover and “All models failed”
How does failover work?
Failover happens in two stages:- Auth profile rotation within the same provider.
- Model fallback to the next model in
agents.defaults.model.fallbacks.
What does this error mean?
anthropic:default, but could not find credentials for it in the expected auth store.
Fix checklist for No credentials found for profile "anthropic:default"
- Confirm where auth profiles live (new vs legacy paths)
- Current:
~/.clawdbot/agents/<agentId>/agent/auth-profiles.json - Legacy:
~/.clawdbot/agent/*(migrated byclawdbot doctor)
- Current:
- Confirm your env var is loaded by the Gateway
- If you set
ANTHROPIC_API_KEYin your shell but run the Gateway via systemd/launchd, it may not inherit it. Put it in~/.clawdbot/.envor enableenv.shellEnv.
- If you set
- Make sure you’re editing the correct agent
- Multi‑agent setups mean there can be multiple
auth-profiles.jsonfiles.
- Multi‑agent setups mean there can be multiple
- Sanity‑check model/auth status
- Use
clawdbot models statusto see configured models and whether providers are authenticated.
- Use
Fix checklist for No credentials found for profile "anthropic:claude-cli"
This means the run is pinned to the Claude Code CLI profile, but the Gateway
can’t find that profile in its auth store.
- Sync the Claude Code CLI token on the gateway host
- Run
clawdbot models status(it loads + syncs Claude Code CLI credentials). - If it still says missing: run
claude setup-token(orclawdbot models auth setup-token --provider anthropic) and retry.
- Run
- If you want to use an API key instead
- Put
ANTHROPIC_API_KEYin~/.clawdbot/.envon the gateway host. - Clear any pinned order that forces
anthropic:claude-cli:
- Put
- Confirm you’re running commands on the gateway host
- In remote mode, auth profiles live on the gateway machine, not your laptop.
Why did it also try Google Gemini and fail?
If your model config includes Google Gemini as a fallback (or you switched to a Gemini shorthand), Clawdbot will try it during model fallback. If you haven’t configured Google credentials, you’ll seeNo API key found for provider "google".
Fix: either provide Google auth, or remove/avoid Google models in agents.defaults.model.fallbacks / aliases so fallback doesn’t route there.
“LLM request rejected: messages.*.thinking.signature required (google‑antigravity)”
Cause: the session history contains thinking blocks without signatures (often from an aborted/partial stream). Google Antigravity requires signatures for thinking blocks. Fix: start a new session or set/thinking off for that agent.
Auth profiles: what they are and how to manage them
Related: /concepts/oauth (OAuth flows, token storage, multi-account patterns, CLI sync)What is an auth profile?
An auth profile is a named credential record (OAuth or API key) tied to a provider. Profiles live in:What are typical profile IDs?
Clawdbot uses provider‑prefixed IDs like:anthropic:default(common when no email identity exists)anthropic:<email>for OAuth identities- custom IDs you choose (e.g.
anthropic:work)
Can I control which auth profile is tried first?
Yes. Config supports optional metadata for profiles and an ordering per provider (auth.order.<provider>). This does not store secrets; it maps IDs to provider/mode and sets rotation order.
Clawdbot may temporarily skip a profile if it’s in a short cooldown (rate limits/timeouts/auth failures) or a longer disabled state (billing/insufficient credits). To inspect this, run clawdbot models status --json and check auth.unusableProfiles. Tuning: auth.cooldowns.billingBackoffHours*.
You can also set a per-agent order override (stored in that agent’s auth-profiles.json) via the CLI:
OAuth vs API key: what’s the difference?
Clawdbot supports both:- OAuth often leverages subscription access (where applicable).
- API keys use pay‑per‑token billing.
Gateway: ports, “already running”, and remote mode
What port does the Gateway use?
gateway.port controls the single multiplexed port for WebSocket + HTTP (Control UI, hooks, etc.).
Precedence:
Why does clawdbot daemon status say Runtime: running but RPC probe: failed?
Because “running” is the supervisor’s view (launchd/systemd/schtasks). The RPC probe is the CLI actually connecting to the gateway WebSocket and calling status.
Use clawdbot daemon status and trust these lines:
Probe target:(the URL the probe actually used)Listening:(what’s actually bound on the port)Last gateway error:(common root cause when the process is alive but the port isn’t listening)
Why does clawdbot daemon status show Config (cli) and Config (daemon) different?
You’re editing one config file while the daemon is running another (often a --profile / CLAWDBOT_STATE_DIR mismatch).
Fix:
--profile / environment you want the daemon to use.
What does “another gateway instance is already listening” mean?
Clawdbot enforces a runtime lock by binding the WebSocket listener immediately on startup (defaultws://127.0.0.1:18789). If the bind fails with EADDRINUSE, it throws GatewayLockError indicating another instance is already listening.
Fix: stop the other instance, free the port, or run with clawdbot gateway --port <port>.
How do I run Clawdbot in remote mode (client connects to a Gateway elsewhere)?
Setgateway.mode: "remote" and point to a remote WebSocket URL, optionally with a token/password:
clawdbot gatewayonly starts whengateway.modeislocal(or you pass the override flag).- The macOS app watches the config file and switches modes live when these values change.
The Control UI says “unauthorized” (or keeps reconnecting). What now?
Your gateway is running with auth enabled (gateway.auth.*), but the UI is not sending the matching token/password.
Facts (from code):
- The Control UI stores the token in browser localStorage key
clawdbot.control.settings.v1. - The UI can import
?token=...(and/or?password=...) once, then strips it from the URL.
- Fastest:
clawdbot dashboard(prints + copies tokenized link, tries to open; shows SSH hint if headless). - If remote, tunnel first:
ssh -N -L 18789:127.0.0.1:18789 user@hostthen openhttp://127.0.0.1:18789/?token=.... - Set
gateway.auth.token(orCLAWDBOT_GATEWAY_TOKEN) on the gateway host. - In the Control UI settings, paste the same token (or refresh with a one-time
?token=...link).
I set gateway.bind: "tailnet" but it can’t bind / nothing listens
tailnet bind picks a Tailscale IP from your network interfaces (100.64.0.0/10). If the machine isn’t on Tailscale (or the interface is down), there’s nothing to bind to.
Fix:
- Start Tailscale on that host (so it has a 100.x address), or
- Switch to
gateway.bind: "loopback"/"lan".
tailnet is legacy and is migrated to auto by Doctor. Prefer gateway.bind: "auto" when using Tailscale.
Can I run multiple Gateways on the same host?
Usually no — one Gateway can run multiple messaging channels and agents. Use multiple Gateways only when you need redundancy (ex: rescue bot) or hard isolation. Yes, but you must isolate:CLAWDBOT_CONFIG_PATH(per‑instance config)CLAWDBOT_STATE_DIR(per‑instance state)agents.defaults.workspace(workspace isolation)gateway.port(unique ports)
- Use
clawdbot --profile <name> …per instance (auto-creates~/.clawdbot-<name>). - Set a unique
gateway.portin each profile config (or pass--portfor manual runs). - Install a per-profile daemon:
clawdbot --profile <name> daemon install.
com.clawdbot.<profile>, clawdbot-gateway-<profile>.service, Clawdbot Gateway (<profile>)).
Full guide: Multiple gateways.
What does “invalid handshake” / code 1008 mean?
The Gateway is a WebSocket server, and it expects the very first message to be aconnect frame. If it receives anything else, it closes the connection
with code 1008 (policy violation).
Common causes:
- You opened the HTTP URL in a browser (
http://...) instead of a WS client. - You used the wrong port or path.
- A proxy or tunnel stripped auth headers or sent a non‑Gateway request.
- Use the WS URL:
ws://<host>:18789(orwss://...if HTTPS). - Don’t open the WS port in a normal browser tab.
- If auth is on, include the token/password in the
connectframe.
Logging and debugging
Where are logs?
File logs (structured):logging.file. File log level is controlled by logging.level. Console verbosity is controlled by --verbose and logging.consoleLevel.
Fastest log tail:
- macOS:
$CLAWDBOT_STATE_DIR/logs/gateway.logandgateway.err.log(default:~/.clawdbot/logs/...; profiles use~/.clawdbot-<profile>/logs/...) - Linux:
journalctl --user -u clawdbot-gateway[-<profile>].service -n 200 --no-pager - Windows:
schtasks /Query /TN "Clawdbot Gateway (<profile>)" /V /FO LIST
How do I start/stop/restart the Gateway daemon?
Use the daemon helpers:clawdbot gateway --force can reclaim the port. See Gateway.
What’s the fastest way to get more details when something fails?
Start the Gateway with--verbose to get more console detail. Then inspect the log file for channel auth, model routing, and RPC errors.
Media & attachments
My skill generated an image/PDF, but nothing was sent
Outbound attachments from the agent must include aMEDIA:<path-or-url> line (on its own line). See Clawdbot assistant setup and Agent send.
CLI sending:
Security and access control
Is it safe to expose Clawdbot to inbound DMs?
Treat inbound DMs as untrusted input. Defaults are designed to reduce risk:- Default behavior on DM‑capable channels is pairing:
- Unknown senders receive a pairing code; the bot does not process their message.
- Approve with:
clawdbot pairing approve <channel> <code> - Pending requests are capped at 3 per channel; check
clawdbot pairing list <channel>if a code didn’t arrive.
- Opening DMs publicly requires explicit opt‑in (
dmPolicy: "open"and allowlist"*").
clawdbot doctor to surface risky DM policies.
WhatsApp: will it message my contacts? How does pairing work?
No. Default WhatsApp DM policy is pairing. Unknown senders only get a pairing code and their message is not processed. Clawdbot only replies to chats it receives or to explicit sends you trigger. Approve pairing with:channels.whatsapp.selfChatMode.
Chat commands, aborting tasks, and “it won’t stop”
How do I stop/cancel a running task?
Send any of these as a standalone message (no slash):/, but a few shortcuts (like /status) also work inline for allowlisted senders.
Why does it feel like the bot “ignores” rapid‑fire messages?
Queue mode controls how new messages interact with an in‑flight run. Use/queue to change modes:
steer— new messages redirect the current taskfollowup— run messages one at a timecollect— batch messages and reply once (default)steer-backlog— steer now, then process backloginterrupt— abort current run and start fresh
debounce:2s cap:25 drop:summarize for followup modes.
Common troubleshooting
“All models failed” — what should I check first?
- Credentials present for the provider(s) being tried (auth profiles + env vars).
- Model routing: confirm
agents.defaults.model.primaryand fallbacks are models you can access. - Gateway logs in
/tmp/clawdbot/…for the exact provider error. /model statusto see current configured models + shorthands.
I’m running on my personal WhatsApp number — why is self-chat weird?
Enable self-chat mode and allowlist your own number:WhatsApp logged me out. How do I re‑auth?
Run the login command again and scan the QR code:Build errors on main — what’s the standard fix path?
git pull origin main && pnpm installpnpm clawdbot doctor- Check GitHub issues or Discord
- Temporary workaround: check out an older commit
npm install fails (allow-build-scripts / missing tar or yargs). What now?
If you’re running from source, use the repo’s package manager: pnpm (preferred). The repo declarespackageManager: "pnpm@…", and pnpm patches are tracked in pnpm.patchedDependencies.
Typical recovery:
How do I switch between git installs and npm installs?
Use the website installer and select the install method with a flag. It upgrades in place and rewrites the gateway service to point at the new install. Switch to git install:- The git flow only rebases if the repo is clean. Commit or stash changes first.
- After switching, run:
Telegram block streaming isn’t splitting text between tool calls. Why?
Block streaming only sends completed text blocks. Common reasons you see a single message:agents.defaults.blockStreamingDefaultis still"off".channels.telegram.blockStreamingis set tofalse.channels.telegram.streamModeispartialorblockand draft streaming is active (private chat + topics). Draft streaming disables block streaming in that case.- Your
minChars/ coalesce settings are too high, so chunks get merged. - The model emits one large text block (no mid‑reply flush points).
- Put block streaming settings under
agents.defaults, not the root. - Set
channels.telegram.streamMode: "off"if you want real multi‑message block replies. - Use smaller chunk/coalesce thresholds while debugging.
Discord doesn’t reply in my server even with requireMention: false. Why?
requireMention only controls mention‑gating after the channel passes allowlists.
By default channels.discord.groupPolicy is allowlist, so guilds must be explicitly enabled.
If you set channels.discord.guilds.<guildId>.channels, only the listed channels are allowed; omit it to allow all channels in the guild.
Fix checklist:
- Set
channels.discord.groupPolicy: "open"or add a guild allowlist entry (and optionally a channel allowlist). - Use numeric channel IDs in
channels.discord.guilds.<guildId>.channels. - Put
requireMention: falseunderchannels.discord.guilds(global or per‑channel). Top‑levelchannels.discord.requireMentionis not a supported key. - Ensure the bot has Message Content Intent and channel permissions.
- Run
clawdbot channels status --probefor audit hints.
Cloud Code Assist API error: invalid tool schema (400). What now?
This is almost always a tool schema compatibility issue. The Cloud Code Assist endpoint accepts a strict subset of JSON Schema. Clawdbot scrubs/normalizes tool schemas in currentmain, but the fix is not in the last release yet (as of
January 13, 2026).
Fix checklist:
- Update Clawdbot:
- If you can run from source, pull
mainand restart the gateway. - Otherwise, wait for the next release that includes the schema scrubber.
- If you can run from source, pull
- Avoid unsupported keywords like
anyOf/oneOf/allOf,patternProperties,additionalProperties,minLength,maxLength,format, etc. - If you define custom tools, keep the top‑level schema as
type: "object"withpropertiesand simple enums.
Answer the exact question from the screenshot/chat log
Q: “What’s the default model for Anthropic with an API key?” A: In Clawdbot, credentials and model selection are separate. SettingANTHROPIC_API_KEY (or storing an Anthropic API key in auth profiles) enables authentication, but the actual default model is whatever you configure in agents.defaults.model.primary (for example, anthropic/claude-sonnet-4-5 or anthropic/claude-opus-4-5). If you see No credentials found for profile "anthropic:default", it means the Gateway couldn’t find Anthropic credentials in the expected auth-profiles.json for the agent that’s running.
Still stuck? Ask in Discord or open a GitHub discussion.