Claws Out: Securing and Building with OpenClaw
summary
Adds trusted-proxy auth mode to OpenClaw so the control plane no longer requires a websocket token or device pairing, using Pomerium-style identity-aware proxy configuration (user header, required headers, trusted proxy IPs). The change merges into upstream after rebasing against a project that grows from ~1,500 to ~16,000 issues, and enables live building with McClaw and OpenClaw — powering Clawspace browser-based file explorer/editor that demonstrably works in demos.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:10Trusted proxy auth mode
- 3:58Configuration and security
- 5:42Community growth
- 7:06Personal use of OpenClaw
- 8:52Building MCP server
- 11:03Live coding demo
- 13:52Enhancing MCP app
- 15:39Workflow benefits and security
- 16:43Closing remarks
related talks
28mWelcome To The Era Of Claws
35mA Month with OpenClaw
31m📙 From Assistant to Assassin: Weaponizing An OpenClaw Vulnerability to Achieve 1-Click RCE 🖥️
25mOpenClaw in Your Hand: Building a Physical AI Terminal
23mThe Claw: Minions of Toil
34mHibernate and Evolving: Taming OpenClaw With OpenKruise Agents
38mZuul and OpenClaw, Safe Agentic Coding Via Human Collaboration Tools
25mOAuth Gets You In, Zero Trust Keeps You Safe