OpenClaw

OPEN SOURCE AI GATEWAY

OpenClaw For All

Any OS. Any channel. Any model. Self-hosted AI gateway that connects your chat apps to powerful AI agents—all from your own hardware.

Latest Release: v2026.4.14-beta.1

npm install -g openclaw@latest

Released April 14, 2026 · Major security updates

WHAT IS IT?

A Self-Hosted AI Gateway

OpenClaw connects your favorite chat apps—Discord, Telegram, WhatsApp, Signal, iMessage, Slack, and more—to AI coding agents. Run one Gateway process on your machine and message your AI from anywhere.

🏠

Self-Hosted

Runs on your hardware, your rules. Your data stays with you—no cloud dependency.

💬

Multi-Channel

One Gateway serves Discord, Telegram, WhatsApp, Signal, Slack, iMessage, and more simultaneously.

🤖

Agent-Native

Built for coding agents with tool use, sessions, memory, and multi-agent routing.

🔓

Open Source

MIT licensed, community-driven. Hackable and extensible for any workflow.

GET STARTED

Install in Minutes

1

Install OpenClaw

npm install -g openclaw@latest

Requires Node 22.14+ or Node 24 (recommended)

2

Onboard and Install

openclaw onboard --install-daemon

Guided setup with automatic service installation

3

Start Chatting

openclaw dashboard

Open the Control UI in your browser, or connect a channel like Telegram

WHAT’S NEW

v2026.4.14-beta.1 Highlights

Major security updates, Telegram improvements, and stability fixes.

🔒 Security Hardening

Replaced marked.js with markdown-it to prevent ReDoS attacks. SSRF policy enforced on browser routes. Sender allowlist checks on Microsoft Teams SSO.

📱 Telegram Forum Topics

Human topic names now surface in agent context and plugin hook metadata. Heartbeat replies stay on the bound forum topic instead of dropping to root chat.

🗣️ TTS Voice Replies

Voice-note replies no longer silently drop. OpenClaw temp voice outputs are now persisted into managed outbound media.

⏰ Cron Scheduler Fixes

No more short retry loops when cron next-run calculation fails. Maintenance wake keeps unscheduled jobs recovering properly.

🧠 Memory Improvements

Recalled memory now uses hidden prompt-prefix path. Dreaming cron sweep requires live queued event before running. QMD recall fixed for legacy memory.md files.

🌐 Browser/CDP Fixes

Local Chrome readiness probes bypass SSRF policy for loopback control. Attach-only manual-cdp profiles reuse local loopback under strict policy.

View full release notes on GitHub →

OpenClaw For All

MIT License · Open Source · Community Driven