Plugin

Plugins are small OpenClaw extension modules that can add commands, tools, Gateway RPC endpoints, background services and even Skills. Because they run in the same process as the Gateway, they must be treated as trusted code.

Skills Exec Approvals Security

Quick Start

List and install plugins

openclaw plugins list
openclaw plugins install @openclaw/voice-call

Basic config

{
  plugins: {
    enabled: true,
    allow: ["voice-call"],
    entries: {
      "voice-call": { enabled: true, config: { provider: "twilio" } }
    }
  }
}

What Plugins Can Register

Runtime

Tools, CLI and RPC

Plugins can extend Gateway RPC, HTTP handlers, agent tools and CLI subcommands.

Background services and Skills

A plugin can ship runtime logic and declare its own Skills directory so documentation and tools ship together.

Discovery

Discovery order

OpenClaw scans configured paths, workspace extensions, global extensions and bundled extensions in order. The first plugin found for a given id wins.

Trust

Treat plugins as trusted code

Plugins run in the Gateway process, and npm-based plugin install means real code execution. Keep allowlists tight and versions pinned.