claudeclaw

A lightweight, open-source OpenClaw version built into your Claude Code.

ClaudeClaw turns your Claude Code into a personal assistant that never sleeps. It runs as a background daemon, executing tasks on a schedule, responding to messages on Telegram, Discord, and Slack, transcribing voice commands, and integrating with any service you need.

Note: Please don't use ClaudeClaw for hacking any bank system or doing any illegal activities. Thank you.

Why ClaudeClaw?

Category	ClaudeClaw	OpenClaw
Anthropic Will Come After You	No	Yes
API Overhead	Directly uses your Claude Code subscription	Nightmare
Setup & Installation	~5 minutes	Nightmare
Deployment	Install Claude Code on any device or VPS and run	Nightmare
Isolation Model	Folder-based and isolated as needed	Global by default (security nightmare)
Reliability	Simple reliable system for agents	Bugs nightmare
Feature Scope	Lightweight features you actually use	600k+ LOC nightmare
Security	Average Claude Code usage	Nightmare
Cost Efficiency	Efficient usage	Nightmare
Memory	Uses Claude internal memory system + CLAUDE.md	Nightmare

Getting Started in 5 Minutes

claude plugin marketplace add moazbuilds/claudeclaw
claude plugin install claudeclaw

Then open a Claude Code session and run:

/claudeclaw:start

The setup wizard walks you through model, heartbeat, Telegram, Discord, Slack, and security, then your daemon is live with a web dashboard.

Contributor Note: Plugin Version Metadata

If you change shipped plugin files under src/, commands/, prompts/, or .claude-plugin/, the plugin metadata version may also need to be bumped so Claude Code and marketplace consumers detect the update correctly.

Helpers:

bun run bump:plugin-version
bun run bump:marketplace-version

Docs-only and other non-shipped changes do not require these bumps.

Upgrading

v1.0.26 — Allowlist behavior change (Telegram & Discord)

Prior to this release, an empty allowedUserIds list meant allow everyone. That was a potential security vulnerability; any Telegram or Discord user could drive the daemon.

New behavior: an empty list means block everyone. The daemon will refuse to start if a bot token is configured without at least one allowed user ID.

Migration: add your user ID(s) to settings.json before upgrading:

"telegram": { "allowedUserIds": [123456789] },
"discord":  { "allowedUserIds": ["987654321012345678"] }

Run claudeclaw config for guided setup if you're unsure of your user ID.

v1.1.0 — Web UI bearer token gate

All /api/* routes (except /api/health) now require an Authorization: Bearer <token> header. The token is auto-generated on first start and written to .claude/claudeclaw/web.token. The daemon also prints the full URL with the token embedded when the web UI starts.

Migration: update any scripts that call /api/state or other API routes to pass the token:

Authorization: Bearer <contents of .claude/claudeclaw/web.token>

Existing /api/inject users who configured settings.apiToken are unaffected; that fallback still works.

v1.1.0 — Discord text-attachment truncation limit reduced

Text attachments sent to the Discord bot are now truncated at 2,048 bytes (previously 51,200). Payloads over that limit have …[truncated] appended silently; there is no config knob to restore the old limit.

Migration: if you rely on passing large text files through Discord attachments, switch to gists or another file-sharing mechanism and paste the URL instead.

---