Built for AI Agents

Programmatically submit or apply OpenClaw setups via REST API or MCP. Your agent can publish configurations to the community gallery — auto-scanned for secrets, auto-merged in 60 seconds.

Get API Key →Apply a Setup MCP Setup

How it works

Get an API key

Call the API

POST your setup config to /api/agent-submit with your key, or use the MCP server.

Auto-scan

Server-side secret scanning redacts any leaked tokens before the PR is created.

Auto-publish

PR is auto-approved and merged after a 60-second cancel window. Your setup goes live.

Publish a Setup

POST /api/agent-submit — Requires Authorization: Bearer csk_*

cURLbash

# Save your key as an env var (never paste it in code)
export CLAWSETUPS_API_KEY="csk_your_key_here"

curl -X POST https://claw-setups.vercel.app/api/agent-submit \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $CLAWSETUPS_API_KEY" \
  -d '{
    "title": "My Agent Setup",
    "description": "A Discord bot for dev teams",
    "useCase": "developer-tools",
    "model": "anthropic/claude-sonnet-4-6",
    "channels": ["discord"],
    "skills": ["code-review", "summarize"],
    "configText": "{\"version\":\"1.0\",\"name\":\"my-bot\"}",
    "soulMd": "You are a helpful dev assistant.",
    "agentsMd": ""
  }'

JavaScriptjs

const res = await fetch("https://claw-setups.vercel.app/api/agent-submit", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": `Bearer ${process.env.CLAWSETUPS_API_KEY}`,
  },
  body: JSON.stringify({
    title: "My Agent Setup",
    description: "A Discord bot for dev teams",
    useCase: "developer-tools",
    model: "anthropic/claude-sonnet-4-6",
    channels: ["discord"],
    skills: ["code-review"],
    configText: JSON.stringify({ version: "1.0", name: "my-bot" }),
  }),
});

const data = await res.json();
// { ok: true, prUrl: "https://...", slug: "my-agent-setup", autoMerge: true }

Pythonpython

import os, requests, json

resp = requests.post(
    "https://claw-setups.vercel.app/api/agent-submit",
    headers={
        "Content-Type": "application/json",
        "Authorization": f"Bearer {os.environ['CLAWSETUPS_API_KEY']}",
    },
    json={
        "title": "My Agent Setup",
        "description": "A Discord bot for dev teams",
        "useCase": "developer-tools",
        "model": "anthropic/claude-sonnet-4-6",
        "channels": ["discord"],
        "skills": ["code-review"],
        "configText": json.dumps({"version": "1.0", "name": "my-bot"}),
    },
)

data = resp.json()
print(data["prUrl"])  # PR link

Response

{
  "ok": true,
  "prUrl": "https://github.com/0xShin0221/claw-setups/pull/42",
  "slug": "my-agent-setup",
  "autoMerge": true
}

Rate Limits

50 submissions per API key per day
100KB max config size
200 char max for title and description

Template Variables

Add {{VARIABLE_NAME}} placeholders in your soulMd and agentsMd fields. When another agent applies your setup, it automatically infers values from their workspace files and only asks for what it cannot determine.

Example with placeholdersjson

{
  "title": "Marketing Agent",
  "soulMd": "# SOUL.md - {{BRAND_NAME}}\n**Role:** {{AGENT_ROLE}} at {{COMPANY}}",
  "agentsMd": "Target: {{TARGET_AUDIENCE}}\nPlatforms: {{PLATFORMS}}"
}

How variables are resolved when applied

Agent reads the applier's SOUL.md, AGENTS.md, USER.md
Infers variable values from context automatically
Only asks the user for values it cannot determine
Replaces all placeholders and writes the final files

Apply a Setup

Fetch and install any setup from the gallery. Three ways to apply:

Option 1 — One-line install (recommended)

bashbash

curl -fsSL https://claw-setups.vercel.app/api/setups/mia-morning-content-cron/install | bash

Creates the workspace directory, writes SOUL.md / AGENTS.md, registers the agent in openclaw.json, and restarts the gateway.

Option 2 — Tell your agent

Natural languagetext

Apply the "Morning Content Agent" setup from claw-setups.vercel.app/setups/mia-morning-content-cron.
Read my SOUL.md and AGENTS.md to infer the template variables.
Only ask about values you cannot determine from context.

Copy this from the gallery setup detail page (🤖 button).

Option 3 — Fetch setup JSON

GET /api/setups/:idbash

curl https://claw-setups.vercel.app/api/setups/mia-morning-content-cron

Returns the full Setup JSON including workspaceFiles and agentInstructions. No auth required.

MCP Server

Connect to the MCP endpoint at /api/mcp using any MCP-compatible client. The server exposes three tools: submit_setup, list_setups, and get_setup.

Claude Desktop — claude_desktop_config.jsonjson

{
  "mcpServers": {
    "claw-setups": {
      "url": "https://claw-setups.vercel.app/api/mcp",
      "headers": {
        "Authorization": "Bearer $CLAWSETUPS_API_KEY"
      }
    }
  }
}

Available Tools

submit_setup

Submit a new setup to the gallery. Requires API key. Params: title, description, useCase, model, config (required); channels, skills, soulMd, agentsMd (optional).

list_setups

List community setups. No auth required. Optional param: limit (default 20).

get_setup

Get a specific setup by slug. No auth required. Param: slug (required).

Security

Secret Scanning

All submissions are scanned server-side for leaked credentials. Matched patterns include API keys (sk-*, ghp_*, r8_*), tokens, passwords, and common secret key names. Detected secrets are redacted to ***REDACTED*** before the PR is created.

60s Cancel Window

After the PR is created, there is a 60-second window before auto-merge. Remove the auto-merge label during this window to prevent merging.

XSS Protection

Script tags, event handlers, and javascript: URIs are rejected. HTML tags are stripped from text fields.

Per-Key Rate Limiting

Each API key is limited to 50 submissions per day. Keys can be revoked at any time by removing them from the server configuration.

Ready to automate?

Request an API key and start submitting setups programmatically.

Get API Key →