by chrysb
The ultimate setup harness for OpenClaw. Deploy in minutes. Stay running for months. No CLI required.
# Add to your Claude Code skills
git clone https://github.com/chrysb/alphaclawLast scanned: 4/29/2026
{
"issues": [
{
"type": "npm-audit",
"message": "basic-ftp: basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-04-29T06:25:56.569Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
Platform: AlphaClaw currently targets Docker/Linux deployments. macOS local development is not yet supported.
openclaw doctor --fix), Telegram/Discord/Slack notifications, and a live interactive terminal for monitoring gateway output directly from the browser.AGENTS.md, TOOLS.md) injected into your agent's system prompt on every message — enforcing safe practices, commit discipline, and change summaries out of the box.AlphaClaw simply wraps OpenClaw, it's not a dependency. Remove AlphaClaw and your agent keeps running. Nothing proprietary, nothing to migrate.
Set SETUP_PASSWORD at deploy time and visit your deployment URL. The welcome wizard handles the rest.
Railway users: after deploying, upgrade to the Hobby plan and redeploy to ensure your service has at least 8 GB of RAM. The Trial plan's memory limit can cause out-of-memory crashes during normal operation.
npm install @chrysb/alphaclaw
npx alphaclaw start
Or with Docker:
FROM node:22-slim
RUN apt-get update && apt-get install -y git curl procps cron tini && rm -rf /var/lib/apt/lists/*
WORKDIR /app
COPY package.json ./
RUN npm install --omit=dev
ENV PATH="/app/node_modules/.bin:$PATH"
ENV ALPHACLAW_ROOT_DIR=/data
EXPOSE 3000
ENTRYPOINT ["/usr/bin/tini", "--"]
CMD ["alphaclaw", "start"]
| Tab | What it manages |
|---|---|
| General | Gateway status, channel health, pending pairings, Google Workspace, repo sync schedule, OpenClaw dashboard |
| Browse | File explorer for workspace visibility, inline edits, diff review, and Git-backed sync |
| Usage | Token summaries, per-session and per-agent cost and token breakdown with source/agent dimension comparisons |
| Cron | Cron job management, interactive rolling calendar, run-history drilldowns, trend analytics, and per-run usage breakdowns |
| Nodes | Guided local-node setup for VPS deployments, per-node browser attach, reconnect commands, and routing/pairing controls |
| Watchdog | Health monitoring, crash-loop status, auto-repair toggle, notifications, event log, live log tail, interactive terminal |
| Providers | AI provider credentials (Anthropic, OpenAI, Gemini, Mistral, Voyage, Groq, Deepgram) and model selection |
| Envars | Environment variables — view, edit, add — with gateway restart prompts |
| Webhooks | Webhook endpoints, transform modules, request history, payload inspection, OAuth callbacks, Gmail watch delivery flows |
| Command | Description |
|---|---|
alphaclaw start |
Start the server (Setup UI + gateway manager) |
alphaclaw git-sync -m "message" |
Commit and push the OpenClaw workspace |
alphaclaw telegram topic add --thread <id> --name <text> |
Register a Telegram topic mapping |
alphaclaw version |
Print version |
alphaclaw help |
Show help |
graph TD
subgraph AlphaClaw
UI["Setup UI<br/><small>Preact + htm + Wouter</small>"]
WD["Watchdog<br/><small>Crash recovery · Notifications</small>"]
WH["Webhooks<br/><small>Transforms · Request logging</small>"]
UI --> API
WD --> API
WH --> API
API["Express Server<br/><small>JSON APIs · Auth · Proxy</small>"]
end
API -- "proxy" --> GW["OpenClaw Gateway<br/><small>Child process · 127.0.0.1:18789</small>"]
GW --> DATA["ALPHACLAW_ROOT_DIR<br/><small>.openclaw/ · .env · logs · SQLite</small>"]
The built-in watchdog monitors gateway health and recovers from failures automatically.
| Capability | Details |
|---|---|
| Health checks | Periodic openclaw health with configurable interval |
| Crash detection | Listens for gateway exit events |
| Crash-loop detection | Threshold-based (default: 3 crashes in 300s) |