Claudeclaw

A lightweight, open-source OpenClaw version built into your Claude Code.

ClaudeClaw turns your Claude Code into a personal assistant that never sleeps. It runs as a background daemon, executing tasks on a schedule, responding to messages on Telegram, Discord, and Slack, transcribing voice commands, and integrating with any service you need.

> Note: Please don't use ClaudeClaw for hacking any bank system or doing any illegal activities. Thank you.

Why ClaudeClaw?

Getting Started in 5 Minutes

claude plugin marketplace add moazbuilds/claudeclaw
claude plugin install claudeclaw

Then open a Claude Code session and run:

/claudeclaw:start

The setup wizard walks you through model, heartbeat, Telegram, Discord, Slack, and security, then your daemon is live with a web dashboard.

Contributor Note: Plugin Version Metadata

If you change shipped plugin files under src/, commands/, prompts/, or .claude-plugin/, the plugin metadata version may also need to be bumped so Claude Code and marketplace consumers detect the update correctly.

Helpers:

bun run bump:plugin-version
bun run bump:marketplace-version

Docs-only and other non-shipped changes do not require these bumps.

Upgrading

v1.0.26 — Allowlist behavior change (Telegram & Discord)

Prior to this release, an empty allowedUserIds list meant allow everyone. That was a potential security vulnerability; any Telegram or Discord user could drive the daemon.

New behavior: an empty list means block everyone. The daemon will refuse to start if a bot token is configured without at least one allowed user ID.

Migration: add your user ID(s) to settings.json before upgrading:

"telegram": { "allowedUserIds": [123456789] },
"discord":  { "allowedUserIds": ["987654321012345678"] }

Run claudeclaw config for guided setup if you're unsure of your user ID.

v1.1.0 — Web UI bearer token gate

All /api/* routes (except /api/health) now require an Authorization: Bearer header. The token is auto-generated on first start and written to .claude/claudeclaw/web.token. The daemon also prints the full URL with the token embedded when the web UI starts.

Migration: update any scripts that call /api/state or other API routes to pass the token:

Authorization: Bearer <contents of .claude/claudeclaw/web.token>

Existing /api/inject users who configured settings.apiToken are unaffected; that fallback still works.

v1.1.0 — Discord text-attachment truncation limit reduced

Text attachments sent to the Discord bot are now truncated at 2,048 bytes (previously 51,200). Payloads over that limit have …[truncated] appended silently; there is no config knob to restore the old limit.

Migration: if you rely on passing large text files through Discord attachments, switch to gists or another file-sharing mechanism and paste the URL instead.

What Would Be Built Next?

> Mega Post: Help shape the next ClaudeClaw features. > Vote, suggest ideas, and discuss priorities in this post.

Features

Automation

• Heartbeat: Periodic check-ins with configurable intervals, quiet hours, and editable prompts.
• Cron Jobs: Timezone-aware schedules for repeating or one-time tasks with reliable execution.

Communication

• Telegram: Text, image, and voice support.
• Discord: DMs, server mentions/replies, slash commands, voice messages, and image attachments.
• Slack: Socket Mode bot — DMs, channel mentions, threads, voice messages, and file attachments. Configure SLACK_BOT_TOKEN and SLACK_APP_TOKEN in your environment or settings.json.
• Time Awareness: Message time prefixes help the agent understand delays and daily patterns.

Multi-Session Threads (Discord)

• Independent Thread Sessions: Each Discord thread gets its own Claude CLI session, fully isolated from the main channel.