openclaw/clawhub
openclaw/clawhub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
main
clawhub/docs/auth.md
Patrick Erichsen 86898837fb
docs: split ClawHub public docs from specs (#2095) 
* docs: split clawhub docs source

* docs: make clawhub docs product-facing

* docs: refine public clawhub docs routes
2026-05-07 18:54:47 -07:00

1.8 KiB
Raw Permalink Blame History

summary read_when
ClawHub sign-in, API tokens, CLI login, token storage, and revocation.
Signing in to ClawHub
Using the ClawHub CLI
Debugging 401s

Auth

ClawHub uses GitHub for web sign-in. The CLI uses ClawHub API tokens created through that signed-in account.

Web sign-in

Use GitHub to sign in at clawhub.ai.

Deleted, banned, or disabled accounts cannot complete normal ClawHub sign-in. If sign-in returns you to a logged-out state, your account may not be in good standing.

CLI login

The default CLI login flow opens your browser:

clawhub login
clawhub whoami

What happens:

  1. The CLI starts a temporary callback server on 127.0.0.1.
  2. Your browser opens the ClawHub sign-in page.
  3. After GitHub sign-in, ClawHub creates an API token.
  4. The browser redirects back to the local callback.
  5. The CLI stores the token in your ClawHub config file.

If your browser cannot reach the local callback because of firewall, VPN, or proxy rules, use the headless token flow.

Headless login

Create a token in the ClawHub web UI, then pass it to the CLI:

clawhub login --token clh_...

Use this flow for servers, CI jobs, or terminal-only environments.

Token storage

Default config paths:

  • macOS: ~/Library/Application Support/clawhub/config.json
  • Linux/XDG: $XDG_CONFIG_HOME/clawhub/config.json or ~/.config/clawhub/config.json
  • Windows: %APPDATA%\\clawhub\\config.json

Override the path with:

export CLAWHUB_CONFIG_PATH=/path/to/config.json

Revocation

You can revoke API tokens in the ClawHub web UI.

Revoked, invalid, or missing tokens return 401 Unauthorized. Sign in again with clawhub login or provide a fresh token with clawhub login --token.

Deleted, banned, or disabled accounts cannot continue using existing API tokens.