PS C:\windows\system32> iwr -useb https://openclaw.ai/install.ps1 | iex
OpenClaw Installer
[OK] Windows detected
[OK] Node.js v24.15.0 found
[*] Installing OpenClaw (openclaw@latest)...
[OK] OpenClaw installed
OpenClaw installed successfully (OpenClaw 2026.5.19 (a185ca2))!
Finally unpacked. Now point me at your problems.
Starting setup...
|
o
OpenClaw 2026.5.19 (a185ca2) — I'll do the boring stuff while you dramatically stare at the logs like it's cinema.
Windows detected - OpenClaw runs great on WSL2!
Native Windows might be trickier.
Quick setup: wsl --install (one command, one reboot)
Guide: https://docs.openclaw.ai/windows
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██
██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██
██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
OPENCLAW
T OpenClaw setup
|
o Security disclaimer ----------------------------------------------------------------------+
| |
| OpenClaw is a hobby project and still in beta. Expect sharp edges. |
| By default, OpenClaw is a personal agent: one trusted operator boundary. |
| This bot can read files and run actions if tools are enabled. |
| A bad prompt can trick it into doing unsafe things. |
| |
| OpenClaw is not a hostile multi-tenant boundary by default. |
| If multiple users can message one tool-enabled agent, they share that delegated tool |
| authority. |
| |
| If you're not comfortable with security hardening and access control, don't run |
| OpenClaw. |
| Ask someone experienced to help before enabling tools or exposing it to the internet. |
| |
| Recommended baseline |
| - Pairing/allowlists + mention gating. |
| - Multi-user/shared inbox: split trust boundaries (separate gateway/credentials, ideally |
| separate OS users/hosts). |
| - Sandbox + least-privilege tools. |
| - Shared inboxes: isolate DM sessions (session.dmScope: per-channel-peer) and keep tool |
| access minimal. |
| - Keep secrets out of the agent's reachable filesystem. |
| - Use the strongest available model for any bot with tools or untrusted inboxes. |
| |
| Run regularly |
| openclaw security audit --deep |
| openclaw security audit --fix |
| |
| Learn more |
| - https://docs.openclaw.ai/gateway/security |
| |
+--------------------------------------------------------------------------------------------+
|
o I understand this is personal-by-default and shared/multi-user use requires lock-down. Continue?
| Yes
|
o Setup mode
| QuickStart (recommended)
|
o QuickStart -------------------------+
| |
| Gateway port: 18789 |
| Gateway bind: Loopback (127.0.0.1) |
| Gateway auth: Token (default) |
| Tailscale exposure: Off |
| Direct to chat channels. |
| |
+--------------------------------------+
|
o Model/auth provider
| More…
|
o Model/auth provider
| MiniMax
|
o MiniMax auth method
| MiniMax API key (CN)
|
o Enter MiniMax CN API key (sk-api- or sk-cp-)
https://platform.minimaxi.com/user-center/basic-information/interface-key
| •••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
|
o Model configured --------------------------+
| |
| Default model set to minimax/MiniMax-M2.7 |
| |
+---------------------------------------------+
|
o Default model
| Keep current (minimax/MiniMax-M2.7)
|
o How channels work -----------------------------------------------------------------------+
| |
| Inbound DM safety defaults to pairing: unknown senders get a pairing code first. |
| Approve with: openclaw pairing approve <channel> <code> |
| Open/public DMs require dmPolicy="open" plus allowFrom=["*"]. |
| For multi-user DMs, isolate sessions with: openclaw config set session.dmScope |
| "per-channel-peer" (or "per-account-channel-peer" for multi-account channels). |
| Docs: channels/pairing |
| |
| Feishu: 飞书/Lark enterprise messaging with doc/wiki/drive tools. |
| WeCom: Enterprise messaging and documents, scheduling, task tools. |
| Google Chat: Google Workspace Chat app with HTTP webhook. |
| Nostr: Decentralized protocol; encrypted DMs via NIP-04. |
| Microsoft Teams: Teams SDK; enterprise support. |
| Mattermost: self-hosted Slack-style chat; install the plugin to enable. |
| Nextcloud Talk: Self-hosted chat via Nextcloud Talk webhook bots. |
| Matrix: open protocol; install the plugin to enable. |
| LINE: LINE Messaging API webhook bot. |
| Weixin: Personal WeChat messaging via QR-code login. |
| Zalo: Vietnam-focused messaging platform with Bot API. |
| ClickClack: self-hosted chat via first-class ClickClack bot tokens. |
| Yuanbao: Tencent Yuanbao AI assistant conversation channel. |
| Zalo Personal: Zalo personal account via QR code login. |
| Synology Chat: Connect your Synology NAS Chat to OpenClaw with full agent capabilities. |
| Tlon: decentralized messaging on Urbit; install the plugin to enable. |
| Discord: very well supported right now. |
| iMessage: Local iMessage/SMS through the imsg bridge, including private API message |
| actions when enabled. |
| IRC: classic IRC networks with DM/channel routing and pairing controls. |
| QQ Bot: connect to QQ via official QQ Bot API with group chat and direct message |
| support. |
| Signal: signal-cli linked device; more setup (David Reagans: "Hop on Discord."). |
| Slack: supported (Socket Mode). |
| Telegram: simplest way to get started — register a bot with @BotFather and get going. |
| Twitch: Twitch chat integration |
| WhatsApp: works with your own number; recommend a separate phone + eSIM. |
| |
+-------------------------------------------------------------------------------------------+
|
o Select channel (QuickStart)
| Matrix (plugin)
|
o Install Matrix plugin?
| Download from ClawHub (clawhub:@openclaw/matrix)
|
o Installed Matrix plugin
|
o Matrix setup -----------------------------------------------------------------------+
| |
| Matrix requires a homeserver URL. |
| Use an access token (recommended) or password login to an existing account. |
| With access token: user ID is fetched automatically. |
| Env vars supported: MATRIX_HOMESERVER, MATRIX_USER_ID, MATRIX_ACCESS_TOKEN, |
| MATRIX_PASSWORD, MATRIX_DEVICE_ID, MATRIX_DEVICE_NAME. |
| Per-account env vars: MATRIX_<ACCOUNT_ID>_HOMESERVER, MATRIX_<ACCOUNT_ID>_USER_ID, |
| MATRIX_<ACCOUNT_ID>_ACCESS_TOKEN, MATRIX_<ACCOUNT_ID>_PASSWORD, |
| MATRIX_<ACCOUNT_ID>_DEVICE_ID, MATRIX_<ACCOUNT_ID>_DEVICE_NAME. |
| Docs: channels/matrix |
| |
+--------------------------------------------------------------------------------------+
|
o Matrix homeserver URL
| https://matrix.example.org
|
o Matrix auth method
| Access token (user ID fetched automatically)
|
o Matrix access token
| zjf_123
|
o Matrix device name (optional)
| OpenClaw Gateway
|
o Enable end-to-end encryption (E2EE)?
| No
|
o Configure Matrix rooms access?
| No
|
o Matrix invite auto-join --------------------------------------------------------------+
| |
| WARNING: Matrix invite auto-join defaults to off. |
| OpenClaw agents will not join invited rooms or fresh DM-style invites unless you set |
| autoJoin. |
| Choose "allowlist" to restrict joins or "always" to join every invite. |
| |
+----------------------------------------------------------------------------------------+
|
o Configure Matrix invite auto-join?
| Yes
|
o Matrix invite auto-join
| Always (join every invite)
|
o Selected channels -----------------------------------------------------------+
| |
| Matrix — open protocol; configure a homeserver + access token. Docs: matrix |
| |
+-------------------------------------------------------------------------------+
Updated config: ~\.openclaw\openclaw.json
Workspace OK: ~\.openclaw\workspace
Sessions OK: ~\.openclaw\agents\main\sessions
|
o Web search -----------------------------------------------------------------+
| |
| Web search lets your agent look things up online. |
| Choose a provider. Some providers need an API key, and some work key-free. |
| Docs: https://docs.openclaw.ai/tools/web |
| |
+------------------------------------------------------------------------------+
|
o Search provider
| MiniMax Search
|
o MiniMax Token Plan key or OAuth token
| •••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
|
o Skills status -------------+
| |
| Eligible: 15 |
| Missing requirements: 36 |
| Unsupported on this OS: 8 |
| Blocked by allowlist: 0 |
| |
+-----------------------------+
|
o Configure skills now? (recommended)
| No
|
o Hooks ------------------------------------------------------------------+
| |
| Hooks let you automate actions when agent commands are issued. |
| Example: Save session context to memory when you issue /new or /reset. |
| |
| Learn more: https://docs.openclaw.ai/automation/hooks |
| |
+--------------------------------------------------------------------------+
|
o Enable hooks?
| 💾 session-memory
|
o Hooks Configured -----------------+
| |
| Enabled 1 hook: session-memory |
| |
| You can manage hooks later with: |
| openclaw hooks list |
| openclaw hooks enable <name> |
| openclaw hooks disable <name> |
| |
+------------------------------------+
|
o Gateway service runtime --------------------------------------------+
| |
| QuickStart uses Node for the Gateway service (stable + supported). |
| |
+----------------------------------------------------------------------+
|
• Installing Gateway service....
Installed Scheduled Task: OpenClaw Gateway
Task script: C:\Users\User\.openclaw\gateway.cmd
o Gateway service installed.
Health check failed: connect ECONNREFUSED 127.0.0.1:18789
|
o Health check help --------------------------------+
| |
| Docs: |
| https://docs.openclaw.ai/gateway/health |
| https://docs.openclaw.ai/gateway/troubleshooting |
| |
+----------------------------------------------------+
|
o Optional apps ------------------------+
| |
| Add nodes for extra features: |
| - macOS app (system + notifications) |
| - iOS app (camera/canvas) |
| - Android app (camera/canvas) |
| |
+----------------------------------------+
|
o Control UI ---------------------------------------------------------------------+
| |
| Web UI: http://127.0.0.1:18789/ |
| Web UI (with token): |
| http://127.0.0.1:18789/#token=fead077a49e87e3362229d0d6622d86929366b6fb32a602f |
| Gateway WS: ws://127.0.0.1:18789 |
| Gateway: not detected (connect ECONNREFUSED 127.0.0.1:18789) |
| Docs: https://docs.openclaw.ai/web/control-ui |
| |
+----------------------------------------------------------------------------------+
|
o Hatch your agent ---------------------------------------------------+
| |
| Your workspace is ready. |
| The first Terminal chat run will send: "Wake up, my friend!" |
| Edit BOOTSTRAP.md later to change how the agent introduces itself. |
| |
+----------------------------------------------------------------------+
|
o How do you want to hatch your agent?
| Hatch in Terminal (recommended)
|
o
OpenClaw 2026.5.19 (a185ca2) — One CLI to rule them all, and one more restart because you changed the port.
openclaw tui - local embedded - agent main - session main
session agent:main:main
Wake up, my friend!
⠙ bamboozling… • 3s | local ready ⠹ bamboozling… • 5s | local ready agent main | session main | minimax/MiniMax-M2.7 | think medium | tokens ?/205k
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────