OpenClaw......RIGHT NOW??? (it's not what you think)

NetworkChuck| 00:34:43|Mar 30, 2026
Chapters11
The author discusses the hype around OpenClaw, acknowledging both its impressive capabilities and personal reservations, and sets up the goal of evaluating whether it’s worth adopting by walking through a quick setup and real-world comparisons to previous DIY efforts.

OpenClaw bundles AI agents, memory, and multi-channel access into one gateway, delivering impressive demos while raising serious questions about security and practicality.

Summary

NetworkChuck dives into OpenClaw, a gateway that lets you run AI agents across any channel (Telegram, Slack, Discord) while tying in memory and scheduling features. He highlights the fever pitch around its 300k+ GitHub stars, the aquahiring backstory, and how OpenClaw can orchestrate multiple agents like Terry 3.0 to perform complex tasks in minutes. Chuck walks through a fast setup using Hostinger VPS, then chooses a model (OpenAI or Anthropic) and configures a Telegram bot to talk to the agent. He demos real-world tasks: a news briefing and IT monitoring that OpenClaw completes in seconds, not hours. Beyond the hype, he breaks down the architecture—a Node.js gateway, three pillars (model-agnostic brains, channels, memory)—and shows where the “soul” and memory live in the workspace. He also covers security pitfalls, from prompt injection to redlining and tool permissions, and demonstrates how to audit and harden the setup. The video closes with practical use-cases (home IT team, personal assistant, and a future series on security and deeper integration) and a candid verdict: OpenClaw is exciting, but not a slam-dunk for every problem yet.

Key Takeaways

  • OpenClaw acts as a gateway that can talk to OpenAI, Anthropic, or local models and route through channels like Telegram, Discord, or Slack.
  • The system uses a soul.md, identity file, and memory to give each agent a personality and long-term context stored in the OpenClaw workspace.
  • A single oneliner install plus a quick setup can have an agent talking via Telegram within minutes, not hours.
  • News briefing and IT server monitoring can be generated in seconds by Terry 3.0, illustrating a dramatic speedup over traditional node-based workflows.
  • Security is user-choice-heavy (redlines, tool permissions, and profiles like full vs. coding) and requires active hardening (firewalls, SSH tunneling, and careful clawhub vetting).
  • OpenClaw’s appeal lies in packaging existing AI capabilities into an accessible, end-to-end workflow tool; real-world adoption will depend on mature security and reliability improvements.
  • Chuck envisions a broader OpenClaw ecosystem: multiple agents, subagents, cron-like heartbeats, and future deep dives into security and enterprise use cases.]

Who Is This For?

Creators, developers, and IT pros curious about personal AI assistants and automation at home or in small teams. Great for anyone who wants to see how a gateway-based AI agent can be deployed quickly, while understanding the security trade-offs involved.

Notable Quotes

"Open Claw is not itself an AI. It's a harness. It's a layer sitting on top of other AI."
Explains the core concept of OpenClaw as a gateway rather than a brain.
"OpenClaw is a gateway that connects a few things together. Three pillars that make it kind of awesome: the model, the channels, and the memory."
Outlines the architecture and the three core components.
"This is Hogwarts right now. You're getting schooled on what's happening."
Chuck uses a playful analogy to describe peeking behind the curtain of OpenClaw.
"You can either go API key, or use your subscription you already have."
Describes the practical option for authenticating AI models.
"One of the most insecure things out there. Prompt injection. malware hidden in the skills."
Highlights a major security risk and the need for caution with skills.

Questions This Video Answers

  • How does OpenClaw gateway architecture work with OpenAI and Anthropic together?
  • What are soul.md, identity, and memory in OpenClaw and why do they matter?
  • How can I securely deploy OpenClaw on a VPS and protect it from prompt injection?
  • What are cron jobs and heartbeats in OpenClaw and how do they make agents feel alive?
  • Is OpenClaw’s hype justified for personal IT management or enterprise use?
OpenClawClawHubTelegram botOpenAIAnthropicmemory.mdsoul.mdcronheartbeatssecurity audit
Full Transcript
Okay, here we go. Open Claw. We're going to need two copies for this. This software is the reason AI has been stressing me out so much. See this video here, but you can't ignore it, even though I want to, even though I kind of hate it. It's here. Currently, it has 308,000 GitHub stars, beating React and the Linux kernel somehow. The creator got aqua hired by OpenAI, and everyone's copying it. Just last week, Anthropic dropped channels in Dispatch. So, that begs the question, do we even need OpenClaw? Am I using OpenClaw? Short answer, yes. I've been using it since it first came out. I've got seven agents running. And I've been talking to Peter, the creator of OpenClaw, before it was even called OpenClaw, actually helped with the rebrand. But I also kind of hate it. And it's not what you think it is. And yeah, I know I'm late to the party here. I actually recorded this video twice. Stuff keeps happening. I'm stressed. But you have to admit it's pretty cool. Put the hype aside. Look at this. Remember when we built our news aggregator inside N8N? A bunch of nodes, a bunch of hours. It was cool, but then Open Claw can oneshot this in one sentence. Same thing for our IT engineer. We spent a lot of time building that inside N8. Open Claw crushes it in seconds. So my goal for this video is to put the hype aside and really answer the question, should you care about this? And normally I would say by the end of this video, you're going to have your very own OpenClaw agent set up. No, I'm going to break a YouTube rule right now. I'm going to walk you through setting it up right now at the beginning because I think it's one of those things where you just have to try it. Like get it set up and have it do something. It'll take 5 minutes. Get your coffee ready. I'm going to pour some more coffee boss. Let's stink and go. 5 minutes on the clock. We're going to get you set up with Open Claw fast. I'm not sure I could do that, but we're going to try. Now, what do you need? You don't need a Mac Mini, even though it is pretty cool and I tried it. It's fun. But you do need somewhere to install the Open Claw Gateway. This somewhere can really be anywhere. I'm going to show you in the cloud inside of EPS on Hostinger. They are the sponsor of this video and the sponsor of getting you spun up as quickly as possible. And I'm not sure why I'm making a list. That's really pretty much all you need. And some coffee. You need some coffee cuz everything in it requires coffee. You guys know that, right? So head out to hostinger.com/ncopenclaw. Now, you would think we might click on the one-click setup because it's faster. No, we're not going to do that. Instead, we'll go to services, click on VPS hosting, choose KVM2 because it's an entire home lab in the cloud. Put in coupon code network chuck and watch magic happen and your VPS is brewing. I'm going to have another cup of coffee here. And boom, you got a server. And by the way, this isn't just for OpenClaw. It's for whatever you want to do. You'll see. Once your server is done brewing, we're going to grab that SSH command. Just copy it. Launch your favorite terminal. Paste that command and we're in. Now time to install OpenClaw. This is the easy part. Now documentation does change. So we're going to go straight to the source. OpenClaw.AI. Scroll through all the lies. I'm just kidding. Until we see this oneliner to install it. Copy that. Get back to your terminal. Paste that oneline command. And that's pretty much it. Enter. And relax. One more sip of coffee. And it's done. Now scroll right past that security warning. And we don't care about that right now. We'll talk about it later. Don't worry. Hit yes, I understand. Let's do a quick start. And we're hit with our first option. Which AI model are we going to use? Because guess what? You may not have known this, but Open Claw is not itself an AI. It's a harness. It's a layer sitting on top of other AI. So, right now, we're going to choose what brain it has. Now, I love this because this is the open part of Open Claw. It doesn't care what you choose. You can even go local models. Olama is even now officially supported, but you're going to have a better time with OpenAI or Anthropic. I would choose OpenAI because Peter works there. Anthropic is kind of being a jerk right now, but I still love them. Now, what's really great about this is you can either go API key, which is pay as you go, or if you already pay for chat GBT Pro or anything higher than that, use that. Use your subscription you already have. So, select that first option and you got to do this weird off thing. So, we're going to grab this URL, copy that, open up your web browser, paste that URL in, log into your chatbt account, then don't let that message scare you. Just grab your URL, copy that from your URL bar, get back to your terminal, paste that in there, the redirect URL, the one you just copied, hit enter, go with the default model, 5.4. Can't beat it. And now we're hitting something that makes Open Claw kind of awesome. And that's how you talk to it. Pick what you want, but we're going to start with Telegram. It's very easy. Now, we need to create a Telegram bot and get our bot token. For this, we'll launch Telegram, and you'll start a chat with a guy named the bot father. This kind of feels like a video game. You'll create a new bot. Name your bot. Give it a username. It must end in bot. Create that bot. And that's it. Click on copy and that gets you your bot token. Get back to your terminal. Hit enter to enter your Telegram bot token. Paste that in. Hit enter. Hey, this is actually new. I've never seen this. We'll go with Brave. Ah, we need an API key. I just hit enter to skip it. Configure skills now. Uh, not right now. Hit no. And for hooks, go ahead and do hooks. Enable boot, bootstrap, command logger, and session memory. Hit enter. And that's pretty much it. Now it's time to hatch your OpenClaw agent. We could do the web UI, but come on. We're going to do the TUI. Select TUI, the terminal user interface. Hit enter. And we're waking up our friend. Again, this kind of feels like a Pokémon game or something like Poctopia. Yes, I played it. It's pretty fun. Now, this is what makes OpenClaw feel kind of weird. And what's interesting is when you configure OpenClaw, this is it. Like, you're talking to it to configure it itself. So, we'll tell it who it is, who we are, and get started. You're Terry Cruz. You are a Network Chuck fan. You're chaotic muscles emoji. Now, what's really creepy about this is that all this written right here was written to his soul.md file. His soul. Now, enough talking in the terminal. That's cool. We like that. But Telegram awaits. Let's go to Telegram real quick. Let's click on our Terry 3bot and let's start a conversation. Let's message him. Start. And this is one of the security features I like. Not just anyone can talk to Terry 3.0 out the gate. We have to sync it up. So I'll just take this. This will be your first experience configuring OpenClaw with OpenClaw. We're just going to copy all this mess and say, "Hey, continue configuring Telegram for me. I'm lazy." Paste that in. Take a sip of coffee. Done. Ignore that security risk stuff. We don't care about that right now. But now in theory, I could say, "Hey, you there? Terry's typing and he's here talking in Telegram and timer done. Did we do it? I don't think we did. But right now you have Open Claw set up. The killer part about this is I can now get up, walk away from my computer, have Telegram on my phone and just talk to Terry. But one thing you just did though, and I can't believe you did this. I can't believe you fell for it. You just configured OpenClaw. One of the most insecure things out there. Prompt injection. malware hidden in the skills. You're a walking talking CVE. And now I'll do that YouTube thing. Later in this video, I'll show you how to add some security features to get you to where you're not scared. I get it. If you want to go ahead and jump there, go ahead and do it. But before you do, let's actually do something with our open claw. People say, "Oh, it's just an assistant. What's how is it useful?" And I get that. I live that sometimes. But let's do something to make you go, "Oh, okay." And that way you walk away from this video with something cool. Even if you don't do anything else with it, this is going to be awesome. Step one, news briefing or project one. Now, remember n this took us forever. This is a whole video teaching you n how to use the nodes, how to program it, Python, all kinds of stuff. Watch this. I'm just going to tell it, hey, I want to see some news. Cyber security, you know who I am. Network Chuck, you know what I'm into. Give me YouTube videos. Scrape Reddit. Check hacker news. And don't just give me stuff. Tell me if it's worth my time to read it or watch it. Rate it for me. We tried to do that with NA. It took forever. Ready, set, go. And Terry just does it for me. Done. Let's make it a dashboard. Let's have him make one right now after we put him in high thinking mode. Let's do the same for us right now. That took a minute, but it's done. Let's check it out. It gave me the DNS name. That's sick. And that's actually pretty cool. It told me I should maybe watch this video from David Bombell. Let's go see. Project one was super hard. Project two, let's turn Terry 3.0 into an IT engineer. Let's have him monitor his own server, the one he's on. We'll do for/ new to give him new context. We'll make him think hard. and I'll tell him to become an IT engineer. You're an IT engineer. Your first job is to monitor the server you're on. Check everything. Internet speed, RAM, CPU, security, logs, and create a dashboard for me. Go. And I love that it's going to investigate its own box, make sure it doesn't step on any toes and break anything, and then build something. Okay. Well, I'm not getting hyped. Put the hype to the side. That's pretty cool, though. You have to admit it. I'm not saying turn it loose, but that's pretty cool. And it's done. It did the same kind of theme, but whoa. I mean, this is pretty cool. It's a oneshot. And yeah, it's updating live. If you did those two things, you have two real things to walk away with. And I'm hoping you're inspired just a little bit because what it just did here was I come on, it's it's neat. And if you're anything like me, you have a bunch of ideas. Now, by the way, this is a just getting started with OpenClaw video and my raw thoughts on it for a more structured setup scenario and getting this set up properly and diving deeper into things like security and memory setting up QMD. We'll have a course on Network Chalk Academy coming out soon, if not already out right now, so check the link below. But let's step back for a second. What even is this? Like, what do we just install? What exactly is happening? And why did I let you let this loose on your VPS in the cloud? We got to secure that sucker. We'll do that here in a second. only had offbrand in the fridge. So, real quick, we're going to talk about kind of what OpenClaw actually is, why people are freaking out about it, and why you maybe should care about it or maybe shouldn't care about it because I I do use OpenClaw, but not all the time, and not for what you think I would use it for after seeing that demo. Anyways, OpenClaw, it's simply a gateway. It's a gateway that connects a few things together. Now, this gateway is just a service running on your computer. You want to see it? Type in ps aux pipe. We'll grab for claw. There it is right there. The open claw gateway. It's a node.js app just sitting there running 24/7. Now, this gateway connects a few things. Three pillars that make it kind of awesome, but not exactly groundbreaking. By the way, I'm doing this because I recorded it a few different sessions. It got kind of messy, so I'm cleaning it up now. Now back to me. First thing it did was it said, "Hey, whatever AI model you want to use, you can use that." That's pretty sick. And then the killer feature was the channels. Most AI companies say, "Hey, if you want to talk to our AI, come to our platform. Come to us." OpenClaw is like, "No, whatever you're using, we'll come to you. Telegram, Discord, Slack, we'll do it." The third thing is the memory. You saw that as we were creating this, we were giving it a soul and it has a bunch of mechanisms to start learning from your interactions. It starts to become and feel more like a personal assistant. It will remember the things you tell it. Now, you're probably thinking, Chuck, Chad GBT does that. U Claude does that. I hear you. This feels a bit different, though, especially when you add on things like QMD or other fun memory things cuz I mean this be this is kind of your system. You control a lot of what's happening. Like that memory is going to live on that hosting your DPS you just set up. It's a markdown file. That's pretty cool. Actually, let me show you where the files live. Let's get back into our server. All this might seem like magic, but let me show you the stuff behind the scenes. Let me show you OpenClaw's house. First, we'll cd into our home directory where OpenClaw lives. cdt tilda/openclaw. Type in ls. And that's all this is. Directories, files, markdown files. And I think it does help to just get in here and see this because as you're making changes to Terry or whoever your agent is, it might feel like magic and you might feel like you're losing control like I just told him to do something or I told him to change his identity. What just happened? You can see it happen. You're in control still. So right now most of what happens is actually in your workspace directory for your current agent. Let's jump in there. cd workspace. Type in ls. Couple cool things here. Your agent has a soul.md like we just talked about. Let's cat his soul. Cat soul. And honestly, this is a bit creepy. You're not a chatbot. You're becoming someone. And then what's really interesting is that we also have an identity file. So Peter separates the identity from the soul. For humans, I agree. For chat bots, that's creepy. Let's take a look at it. Cat identity. And this is more what we filled in with our first conversation. There's also a memory file. This is like Tererry's long-term memory. Let's cat that. Cat memory. And similar to you, this is stuff that is longterm that you really want to remember like your wife's birthday, your kid's favorite color, or all 150 Pokemon. Same kind of thing goes in the long term. There's even a memory directory. If we CD into memory, and we ls that, there's a file for each day, like a journal, things that happen, conversations. Let's check the first day. Cat 2026 16. And I love this day one. Woke up. Just knowing that this exists should make you feel a little bit better. Like, why did my entire IT infrastructure go down? Oh, let's check my agent's journal. See, we're okay. And if I were to chat with my agent and tell him to change something like, "Hey, Terry, your favorite Pokemon is Gengar. This is a core memory. It defines who you are. Update soul and not soup. Update soul, identity, and memory, please. Fun fact, Gengar is not my favorite Pokemon. Can you guess what it is? Comment below. All right, let's see what he changed. Let's check his soul. Gengar is core cannon. I mean, Gengar is core cannon. Identity. Favorite Pokemon? Gengar. Long-term memory. Favorite Pokemon is Gengar. Let's check his dear diary. Declared Gengar is Tererry's favorite Pokemon. See? See? It's not this mysterious box. It's not magic. Kind of. It's kind of magic. But at least now you know how the magic is happening. This is Hogwarts right now. You're getting schooled on what's happening. Oh, there's one more markdown file I want to show you and that's the agents.mmd file. This is the one that actually makes it feel kind of magic and you'll see why. Like look, look what it's doing. We'll c the agents file. And this tells it like how to wake up and do things. And it's pretty extensive. Like first run bootstrap. It's your birth certificate. Before doing anything else, look at your soul and user file main session. look at your memory. And like I didn't know this, it won't load the long-term memory in group chats by default. That's helpful. We have red lines, which we'll talk more about later with security. There's protocols for when to reach out and when to stay quiet. At the end of the day, it's just a fancy prompt. And guess what? It's not tied to any provider. If you want to go tinfoil hat and go all local, which I agree with, you just change the model. The memory stays the same. You just do a brain transplant. And I lied about three things. There's actually four things. And this might be the coolest thing depending on how you look at it and which is why people were using Mac menis for this and that's the tools available to this openclaw agent. You're installing openclaw on a machine and saying this is your machine. Here are the tools I'm allowing you to have. So in our VPS example, we're saying this is your VPS. You can run bash scripts. You can use cron to schedule jobs. You can use heartbeats to remind yourself to do things for me. Hey Chuck from the future here. I feel like I didn't explain enough on this crrons and heartbeats. So, here it is. And this is what makes it feel alive. It's the heartbeats and the crrons. Heartbeats make you feel alive. Just realize that. I will say that OpenClaw does this better than anyone else right now because uh Claude and everyone else is trying to copy. And you saw a bit of this in the agents file that I showed you earlier. You can tell your agent, hey, check in every hour or so just to make sure I'm doing okay. or with our news briefing. That would have been a cron news briefing every day 6 am. It's setting up real cron jobs on your server and that's all it is. Like it does feel like magic, but it's just a stinking scheduled task on your server. Genius for how simple that is. Let's actually watch this happen. Let's have Terry do something. Okay, I'm going to have Terry actually create a heartbeat. Let's do that right now. I'll say every 30 minutes, remind me to drink coffee. This should set up a heartbeat. And also, I'll say every hour, just pop in to say hi and see how I'm doing. Let's see if it made the crown for coffee. Let's see if it's in heartbeats or heartbeat. MD. It should be there. No. Let's get back to the open claw directory, cd dot dot, and look in the cron directory. We'll c those jobs. Yeah, there it is. I wonder why it didn't set heartbeats. Oh, it made a smart choice. think crons would be better. We can also see the crons with open claw cron I think. Oh, open claw cron list. And yes, openclaw does have a pretty extensive CLI tool list. There it all is right there. Hey, quick afterthought transition. I want to show you a few things here on the skills clawub skills the browser access and sub aents. Here you go. Openclaw also has skills which is both a good thing and a bad thing. They have a whole website called clawhub. Let's go check it out. This is a directory of skills that just give your agent extra things it can do. Skills. So, if I go to browse skills, you can see that there's over 33,000 skills. Please be careful. There's a lot of bad stuff in there. Lots of malware. It became a problem. Um, let's find a simple one to install. Let's give our agent some ability like the ability to make Microsoft Word documents. Perfect. You can see that they partner with Virus Total because, again, there were problems. This is benign. We should be okay. Now to install, we'll want to have actually Clawhub installed. So we'll do npm-i-g clawhub to install clawhub. And then we'll do clawhub install. What's it called again? Word docx. It's installed. Let's see if he has it. He sees it. Let's have him create a word document. Let's have him create his own resume. Okay, finished the document. Told me it's coffee time. Let's take a look at it. And there's Terry's resume. Four CCIEs. I love it. Also a little creepy how good that is. I can also have Terry browse the web. Go to networkchuck. coffee and your web browser and tell me what you see. Yes, he does have a headless browser. Add default route to your cart and added a product to its cart. You can also do sub agents. Deploy a sub aent to research the best way to make coffee. Now here in Telegram, you also have a lot of commands you can use. For example, I can do for/status. It's being cued right now, but I can see everything that's going on right now, including sub aents active. I can do forward slash sub aents list. It's extremely powerful. And that's just a sub aent. You can actually install multiple agents like Terry under one gateway. I actually have that right now with my IT department. I have Ron Ezy the IT manager and then Fred, George, Charlie as individual IT employees, network engineer, storage engineer. I can message them all on Slack. It's awesome. That's a video for another time, another episode in this series. There's the results. AeroPress is actually a great thing. Actually, my daily grind is French press and then Aerop Press when I'm camping and Coffee Boss when I'm in Japan. Now, is this groundbreaking? No. No, it's not. A lot of this has already been done. And there's software out there that does some things better. What this did, though, and this is the reason everyone freaked out, is it made everything seem accessible. It packaged everything together in one clean install and said, "Hey, look at this." And it suddenly like it was a collective light bulb around the internet. Everyone's like, "Oh, this AI thing, it can actually do stuff if you give it the right tools." And of course, it's the idea of buying a Mac Mini and giving an AI control of it. Like this is the AI's computer and you're onboarding a new AI employee. Like that idea, that's what went viral and it's great marketing because then you go, hey, I'm a human. I use a computer. This AI can now use that same computer I use. Okay, so that for me, that's what I think happened there. But this tooling is not anything new. In fact, I think I think OpenClaw, it's going to be around for a minute, but I see the bigger companies coming for it. Jensen Huang called OpenClaw the operating system for personal AI. Nvidia built their own version called Nemo Claw, which apparently is very insecure. Anthropic's building theirs, I think, when the biggest companies in tech converge on the same idea. That's a big deal. And these companies aren't just going to buy into that without a certain level of security. Whereas OpenClaw's kind of like, um, this is fun. Let's just deploy things without thinking about security, which is what kind of leads us into this next discussion. Oh my goodness, security with OpenClaw. I can't believe you installed OpenClaw. I'm just kidding. It's not that bad. But let's get to it right now and then I'll give you my verdict on is this hype? Is it cool? What? How am I using it? Because I I am using it, but it's kind of like I Okay, I'll get to it. Let's talk about security real quick in this segment now. Okay, Open Claw Security. Need some more coffee for this. I'm out of coffee. Oh no. Thankfully, it's gotten a lot better than it used to be. And honestly, you're probably pretty secure right now, but we're going to double check. It was a dumpster fire to begin with, which is why we have a command like this. Run this right now. Open claw security audit. When you run that, it's going to analyze your OpenClaw instance and make sure that you're obeying security best practices. If you installed it like me, you probably only see two warnings, nothing critical, and we're probably good. You can do the switch-deer. We only had three warnings on that one. And you can do an open claw security audit-fix for it to autofix anything that's broken. Just be careful, it might auto break things as well. Now, the big thing you want to look for is to make sure that your web UI is unexposed to the internet. Yes, you have a web UI. No, I haven't shown it to you. I don't really use that much. If you do want to access your web UI, I'll have a walkthrough in the description below. Actually, I did record something on the web UI. It's right here. To quickly test that, you can go to your public IP address and go to port 18789. If you can't access it, that means no one else can either because normally when you install OpenClaw, now it's tied to your loot back address of 127.0.0.1. And all that means is that no one from the outside can access your open clause stuff. Only things directly on your host. But to allow that, we can do what's called an SSH tunnel. We're not going to change any security settings. We're just going to allow us to access it very quickly right now with this command. I'll have it in the commands below. So don't worry, you don't have to memorize this or watch me type it in very quickly. Just make sure you put in your username and your IP address. So we're going to paste that command in into a new window in our terminal, not the one we're logged in with at our server. Just like this. Put in your password. And currently, right now, you're probably waiting for something to happen. Nothing's going to happen. Right now, you have an SSH tunnel to your computer. And if we open up our browser and we go to localhost, actually, what do we set the port to? I already forgot. Oh, 18789. We should hit that web UI for openclaw. There it is. Now, you may hit this where you need a gateway token to log in. You're like, "Oh, Chuck, I don't have one." Oh, no. Don't worry. You have access to command line. You've got whatever you got to do. Get back to your terminal. I'll type in openclaw config. This is a nice little TUI that'll take you through a few configurations. We'll choose local machine. We'll scroll down to gateway. That port's fine. Loop back is good. Don't change that. And then token. This is where we get our token from. And we'll generate it right now. There's my token. I want to grab that. So, I don't think it generated it fresh. I think that's my existing token, although it may be that token in connect. And we're in. So, pretty much everything we talked about is in this nice web UI. You can chat with your agent here. You can view sessions, instances, channels, channels of the Telegram, Discord, cron jobs. But don't you feel better that you're able to see it through command line? Yes. Yes, you do. But honestly, from here, I mainly just talk to my agent. I rarely access the UI. And even the command line I only use here and there just to make a few changes. Speaking of your host, we have to make sure that no one can access any other ports on your host. Is your firewall even enabled? Probably not. Let's do that right now with this command. This command is going to enable your firewall and allow port 22 or SSH, which is how we're connecting to it with this terminal right now. We want everything else blocked except for the things that we need. Now, watch when I do this. I instantly lose access to the web servers that we built because it's blocking down everything. Let's allow that real quick actually because I still want to see my stuff. I'm going to allow port 8787. Actually, you know what? I'm going to have Terry do it. Now, what's cool is that I need to approve this. I'll allow it. and he did it. Actually, that's not cool. Having to approve everything all the time. It kind of sucks. It is a security thing. Let me show you how to fix that right now. Let me show you how to make that happen and show you a bit of the confusing world of OpenClaw security configuration. Now, I want you to run this one command in your terminal. OpenClaw config get tools profile. Now, right now, mine says full and yours probably doesn't. It probably says coding. Why? because I got really miffed and upset with the process halfway through this recording and I changed mine. Now, what does this mean? It means if it's full, my open call agent can see every tool on the system and it's available to it. It knows about it. Coding is limited and it can do things like read and write files, run terminal commands, but browsing and doing web search and any other tool that might be available, it like it can't see. So, if you want to change that right now, you want to make your agent more capable, let's do it. Keep in mind, this is a security risk. But there are ways around that. And what most people do is they fully allow these tools and then they do what's called redlinining or red line. I don't know. I don't know how the kids say it. But to change your profile to full, the command is open claw config set instead of get tools.profile and set that bad boy to full. Hit enter. And then you'll want to restart your gateway to apply that config which is openclaw gateway restart. You'll use this command a lot because openclaw is open source and has updates like every day and things happen. Now one more config that might mess you up but I don't think by default and it's this config here. Do openclaw config get tools.exec. This config controls what openclaw is allowed to do with the tools it knows about. So if it's like you're like here here's a hammer open claw but you can't use it. You have to ask me first every time. So it's like okay I have a hammer. Can I use it? That's kind of what's happening here maybe. But not for me because right here I have a very sec confusing security config called security full which means he can fully do whatever he wants. It's not full security. It's I can fully do whatever I want. Whatever tool I know about I can use it. Now, if you have the command set to allow list, then you can configure an allow list of tools your tool is allowed or your agent is allowed to use. I'll show you that file here in a moment. And the other option is deny. You don't trust your agent at all. Why do you even have one? And then ask, you have the option for off, which I have. You might not have that right now, which it'll never ask you. So, right now, if you have this config combined with the tools.profile full, your guy can do whatever he fully wants. But you can also have ask to always where it'll always ask if you're very paranoid or only on miss which combines with the allow list option. So if the tool isn't on the allow list then your agent can be configured to go hey I know I don't have a hammer on my list but like you mind if I use it that situation. Now to change either of those two options, the command will be open claw config set tools dot exec.se security and then whatever option you want to put in like allow list or full. And the same story as before except we won't do security, we'll do ask. And so if you hear a kid screaming, my kids are right on the other side of the wall. I'll just say ask off. Now keep in mind this is setting this globally forever for every session. You can configure these things per session in Telegram. I don't care about that. Now, real quick to see the config, we can do cat openclaw.json, which will have a lot of the allow list stuff and security things in here if you love reading through configuration files. And we'll have a deeper dive video on security. But I'll go into my workspace folder and we'll agents.m MD file, which is your agents instructions, how it lives, what it does. You'll see a section for red lines. Now, watching this back, I realized I kind of just jumped into red lines without explaining why this is here. Here's why. We just told your open claw agent it can do a ton of things. We took off its seat belt. Now, with the redlinining, we're telling it what it can and cannot do. So, yeah, back to me. Like, don't exfiltrate private data. Don't run destructive commands without asking. When in doubt, ask. You might add additional things like don't ever modify SSH config. And that would be red line stuff like stop, ask me first. You can do yellow line which is do it but log it like making firewall changes or running docker commands. And then you have of course have always allowed whatever you want to do. Keeping in mind that this is agent.mmd instructions like a prompt that your agent should obey but also it's just a prompt. There's nothing deterministic preventing it from doing it. Now touching on security once more be careful with skills and clawhub. 12% of skills were found with malware. I mean be very careful. Vet everything. Now at this point you don't have to freak out. your gateway is not exposed especially the UI is not exposed to the public internet only SSH is allowed and right now only you have the password so only you can log into this computer and then we'll just actually verify one more thing it should already be configured by default but I can say hey and I'm talking to Terry right now make sure I'm the only one allowed to talk to you can allow others to talk to your agent if you want I wouldn't do that security done now let's talk about what I think about this. Open claw is really fun, but for serious work, I am normally going to be using claw code. And I'm normally sitting down on my computer and working with claw code because I think it has a has better tooling and an overall better experience for things that I do, which is like research and scripting, a little bit of coding here and there. But I do use Open Claw. So, what do I use it for? Number of things recently actually. And this is kind of going to be an open claw series because I do think we need to unpack this a bit more. One thing I did, and this is going to be an episode, is an entire IT team. And I have them right now. They're running my home lab and my my studio lab, which is my NAS and everything. I have a CTO and then an army, like an a network engineer, a uh a storage engineer, a systems engineer. It works pretty well. Like, I'm impressed. They solve problems. We have ticketing. I'll show you that. Also, I do have a personal assistant that I rely on. Like, being here in Japan, it's been massive. Her name's Hermione because I'm a nerd. I have her do things like Yeah. Yeah. I let her check my email and I taught her how to speak Japanese so she can actually make phone calls for me here in Japan in Japanese and make restaurant reservations for me. That's the kind of stuff you can do with that. I also just recently set up Arnold Schwarzenegger, my personal training assistant for my health. He's going to help me lose weight hopefully and get yolked. So essentially, I have a bunch of very purpose-built agents I use. And I know I haven't fully unlocked the power because it's you have to spend a lot of time to think about that and figure it out. So, I'm kind of in dabble mode, but it is cool and I want to see what you can do with it. I want to see what the community can do with it. And I'm going to continue to tinker with it. I'm going to continue to play, which is why it's going to be a series. We're going to deep dive on security. We're going to deep dive into other things we can do it like it operations. As I mentioned earlier, Peter and I were talking about the rebrand before it was even OpenClaw. I actually gave him crap on X when he renamed it to what was it? Moltbot and then he DM' me asking for some help. We talked back and forth for a bit and we actually had an interview lined up. Then Open AI happened and I haven't heard from him in a while. Did you ghost me, Peter? Peter, if you're watching this, come on, dude. We got to do an episode here in this Open Claw series. In fact, everyone watching here right now, get your open claw, the the agent you just made, and have it text Peter in some way every hour until he responds to me and we do this interview. I'm like half joking about that. So, OpenClaw, the software that stressed me out, what do you think about it? Are you already using it? How are you using it? Or are you going to start using it after this video? Let me know. Is it all hype or does it actually meet the hype? Is it better? Comment below. That's all I got. I'll catch you guys next time. Hey, you made it to the end of the video. And at the end of my videos, I like to pray for you, my audience. I believe in the power of prayer and what it can do for your life. And I do genuinely care about you. It's kind of weird, I know, but let's let's pray. Let's do it. God, I thank you for the person on the other side of the screen, this camera. I thank you that they are uh passionate and excited about technology. And you know, maybe they are kind of losing that zeal and that excitement right now because of AI. I know I'm feeling that. So I pray right now over them, Lord, that you would give them peace and excitement for AI in whatever form it is. Uh remove the anxiety, let it melt off of them right now. Let them feel peace and give them hope for the future. Lord, I pray protection over their jobs and their careers, both both as they're getting started in their career and as they're establishing um their their current role and as they're looking for promotions. God, just bless them in that, Lord. Go before them and make their path straight. Give them clarity and give them direction to just wake up every day excited to work on the next thing. Bless their families. Uh bless their finances. Let everything come into place. And I pray that as AI is kind of it is shaping the world. Lord, I pray that they their identity wouldn't be found only in who they are uh as an employee or in what they contribute to their job or what their skills are, but their identity will be found ultimately in you, God. Because without that, we're going to end up lost. And I know I find my identity in you, Jesus. And that's where my hope is found. So whatever happens, no one knows what's going to happen, but you do, God. And if we find ourselves in you, we're not going to get lost. We thank you, Jesus, for everything. I thank you for this person and in this audience, in this community. You have blessed us so much. It's in your name we pray. Amen. That's all I got, guys. I'll catch you guys next

Get daily recaps from
NetworkChuck

AI-powered summaries delivered to your inbox. Save hours every week while staying fully informed.