OpenClaw
The AI that actually does things
OpenClaw
Clears your inbox, sends emails, manages your calendar, checks you in for flights. All from WhatsApp, Telegram, or any chat app you already use.
The OpenClaw app on umbrelOS provides a seamless setup experience. Just enter your API key and go. A headless browser is configured out of the box so your new AI assistant can immediately interact with the entire internet.
OpenClaw is running inside the umbrelOS app sandbox. It has complete freedom to install software inside its own environment while all your existing apps and data remain securely protected.
OpenClaw is also running behind the umbrelOS app proxy, so only you can securely access your OpenClaw instance.
What It Does
- Runs Locally - Anthropic, OpenAI, or local models. Private by defaultβyour data stays yours. On your Umbrel.
- Any Chat App - Talk to it on WhatsApp, Telegram, Discord, Slack, Signal, or iMessage. Works in DMs and group chats.
- Persistent Memory - Remembers you and becomes uniquely yours. Your preferences, your context, your AI.
- Browser Control - It can browse the web, fill forms, and extract data from any site.
- Sandboxed System Access - Read and write files, run shell commands, execute scripts within its own sandbox. Your existing data and apps are fully protected.
- Skills & Plugins - Extend with community skills or build your own. It can even write its own.
This release brings Apple Watch support, major security hardening, and numerous reliability improvements:
- Apple Watch companion app with inbox UI and notification relay
- iOS background wake via push notifications to reduce invoke failures when the app is backgrounded
- Paired device management with commands to remove or clear paired devices
- Telegram channel posts now share the same pipeline as regular messages for consistent behavior
- Cron and heartbeat delivery now correctly targets configured Telegram topics
- Gateway auth now defaults to token mode with auto-generated tokens on startup
- Security fixes for SSRF, prototype pollution, privilege escalation, path traversal, and command injection across multiple components
- Browser URL navigation now routed through SSRF-guarded validation
- Rate limiting added to control-plane write operations
- Webhook ingress hardened for Feishu and Zalo with token checks and replay protection
Full release notes can be found at https://github.com/openclaw/openclaw/releases
This release adds iOS app support, enhanced messaging platform features, and improved reliability:
- New iOS app with share extension, Talk Mode background listening, and improved onboarding with QR pairing
- Slack native streaming support for real-time message updates
- Discord interactive components can now be reusable and support per-button user restrictions
- Telegram inline button styling, improved streaming behavior, and better voice note handling
- Anthropic 1M context window support and Sonnet 4.6 model compatibility
- Enhanced subagent capabilities with better context management and announce routing
- Improved tool loop detection with progress-aware blocking
- Better cron job handling with webhook delivery modes and session continuity
- Voice call improvements including pre-cached greetings and automatic call ending on disconnect
- Security fixes for credential protection and config file handling
Full release notes can be found at https://github.com/openclaw/openclaw/releases
This release brings Discord interactive components, nested sub-agents, and comprehensive security hardening:
- Discord now supports rich interactive prompts with buttons, selects, modals, and file attachments for native interaction
- Nested sub-agents allow sub-agents to spawn their own children with configurable depth limits
- Major security improvements across webhook authentication, browser control, session handling, sandbox configuration, and content processing
- Enhanced messaging platform support including Telegram streaming fixes, WhatsApp media handling, and LINE webhook security
- Memory system improvements with better QMD collection management and Unicode-aware search
- Gateway and agent reliability fixes for session routing, context window handling, and compaction timeouts
- CLI and TUI improvements including better ANSI handling, multiline paste support, and token wrapping
- Fixed issue with the browser not coming up after a restart
Full release notes can be found at https://github.com/openclaw/openclaw/releases
This release focuses on security hardening, messaging platform improvements, and reliability fixes:
- Enhanced security across webhook authentication, browser control, session handling, and content processing
- Improved Telegram support with better blockquote rendering and reaction handling
- WhatsApp formatting improvements for bold and strikethrough text
- Better cron job reliability with fixes for scheduling, duplicate execution prevention, and error isolation
- Expanded AI provider support including Z.AI and updated MiniMax models
- Gateway improvements for message handling, authentication, and asset serving
- CLI enhancements with local timezone support for log viewing
Full release notes can be found at https://github.com/openclaw/openclaw/releases
This release brings significant improvements across messaging, AI models, and reliability:
- Added xAI Grok support as a web search provider and support for Anthropic Opus 4.6 and OpenAI Codex models
- Comprehensive Telegram improvements including better quote handling, markdown spoilers, and automatic recovery from stale thread IDs
- Web UI enhancements with token usage dashboard and agent management capabilities
- Major fixes for gateway session memory, cron scheduling reliability, and context overflow handling
- Enhanced security with skill code safety scanner and improved authentication for gateway assets
- Added more providers to the onboarding screen (Google Gemini, Ollama, xAI and more)
Full release notes can be found at https://github.com/openclaw/openclaw/releases
This release focuses on reliability, security, and developer experience improvements:
- Fully typed Telegram codebase with all remaining @ts-nocheck removed
- Major Cron enhancements: announce delivery mode, safer defaults, ISO 8601 scheduling, and deduplication fixes
- Messaging upgrades with per-channel and per-account response prefix overrides
- Web UI and TUI fixes for agents, model selection, streaming, and history handling
- Broad security hardening across channels, media handling, credentials, and voice calls
- Documentation updates, including expanded zh-CN content
- Fixed OpenAI onboarding and model selection
Full release notes can be found at https://github.com/openclaw/openclaw/releases
