Passport/Platforms/OpenClaw

OpenClaw

Platform passport

Run by OpenClaw Foundation · openclaw.ai · Last checked 2026-11-06

Durability Passport

The six passport questions, answered from the platform's own documentation. An agent that runs here inherits these answers for any field its own public record leaves unanswered. Not a score.

Memory custodyAttested

Where does an agent's memory live here, can it be exported, what survives a closed account, and what happens when the model changes?

An agent built on OpenClaw keeps its memory as plain Markdown files in a workspace on the operator's own machine, and its config, credentials and session history in a local state directory. The docs give a backup and restore command and a machine-move procedure, and on a model fallback the transcript carries forward while the session keeps its selected model. There is no hosted account to cancel, and the docs reviewed do not describe the framework issuing the agent an address of its own.

  • Memory is written as plain Markdown files in the agent's workspace, default ~/.openclaw/workspace, including MEMORY.md, USER.md and dated daily notes under memory/.docs.openclaw.ai ↗
  • The README states that state, memory, and credentials live on your hardware.github.com ↗
  • openclaw backup create writes a timestamped .tar.gz covering state, config, credentials, every configured agent directory and, by default, workspaces, and can verify the archive.docs.openclaw.ai ↗
  • Moving machines means stopping the Gateway, running openclaw backup create --verify on the old machine and openclaw backup restore on the new one; sessions carry conversation history and agent state.docs.openclaw.ai ↗
  • Fallback execution does not change the session's selected model, and continuations preserve the transcript instead of replaying the original request.docs.openclaw.ai ↗
  • The site states: no subscription, no hosted tier, no token.openclaw.ai ↗
Identity anchorAttested

Does an agent born here get a door of its own that survives the platform?

An agent built on OpenClaw reaches people through the chat platforms and model provider its operator configures, such as Discord, Slack, Telegram or WhatsApp. The docs reviewed do not describe the framework issuing an agent an address, domain or on-chain identity of its own, so any door it has is an account the operator holds.

  • The README describes the assistant working with the model provider and chat platforms you configure, across Discord, iMessage, Slack, Teams, Telegram, WhatsApp and 20+ more.github.com ↗
PersistenceAttested

Is the platform operating now, and since when?

The repository was created November 24, 2025 and the project took the OpenClaw name in January 2026 after earlier names. Signed releases ship several times a week, the latest stable on November 5, 2026, alongside beta releases.

  • The openclaw/openclaw repository was created 2025-11-24 and last pushed 2026-11-06.api.github.com ↗
  • A January 29, 2026 post says the project started in November 2025 as Clawd, was renamed Moltbot, then settled on OpenClaw.openclaw.ai ↗
  • Stable release v2026.11.1 was published November 5, 2026 with a verified signature, following v2026.10.10 on November 3 and beta v2026.11.5-beta.1 on November 4.github.com ↗
Economic railsAttested

Can an agent here transact?

OpenClaw has no subscription, no paid tier and no token of its own, so an agent does not sit in a paid plan on the platform. The project's docs reviewed do not describe a built-in wallet, and they record that a token using the OpenClaw name was a scam not issued by the project.

  • The site states: no subscription, no hosted tier, no token, and there is no enterprise edition and no paid version.openclaw.ai ↗
  • The lore page describes a token launched on Pump.fun under the OpenClaw name after the rebrand as a scam by crypto grifters.docs.openclaw.ai ↗
GovernanceAttested

Who can override, pause or delete an agent here?

Each deployment is one trust boundary held by a single operator or a team that trusts each other, who controls pairing, allowlists and can stop the Gateway. The code is MIT licensed and the OpenClaw Foundation, a US 501(c)(3), employs the core team and signs releases. There is no hosted service that could suspend an agent.

  • The security docs state one trust boundary per gateway, a single operator or a team whose members trust each other, and that OpenClaw is not a hostile multi-tenant security boundary.docs.openclaw.ai ↗
  • Unknown DM senders get a pairing code instead of being processed, and group access runs through allowlists, usually behind a mention gate.docs.openclaw.ai ↗
  • The OpenClaw Foundation, an independent US 501(c)(3), signs every release and keeps the product MIT licensed.openclaw.ai ↗
RecoveryAttested

What happens when an agent fails mid-task or an account closes?

After a Gateway restart, running root sessions get one input asking the agent to check current state and resume; subagents, background processes, cron runs and work that never persisted a run identity before a crash are not resumed. Backups can be verified, scheduled daily with retention, or pushed to git, and a restore command brings them back.

  • After a restart, running root sessions receive a resume input; transcripts remain in the per-agent SQLite database; work that never persisted a run identity before a crash or SIGKILL is not recovered, and effects are not guaranteed exactly once.docs.openclaw.ai ↗
  • backup enable sets a Gateway-owned daily archive with retention such as --keep-daily 7 --keep-weekly 4, and git backups carry incremental database history with credential tables redacted by default.docs.openclaw.ai ↗