openclaw/docs
openclaw/docs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(sync): mirror docs from openclaw/openclaw@ebad21c94d

Browse Source
This commit is contained in:
openclaw-docs-sync[bot] 2026-04-06 14:00:25 +00:00
parent 4e72ecb7cb
commit 33472273d5
3 changed files with 209 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.openclaw-sync/source.json
View File

@ -1,5 +1,5 @@
{
"repository": "openclaw/openclaw",
"sha": "9afcbbec5e603616ed8c5c09872ce68b0261050b",
"syncedAt": "2026-04-06T13:25:42.952Z"
"sha": "ebad21c94d322a3e07049b37f62cd8423abd1325",
"syncedAt": "2026-04-06T14:00:24.669Z"
}

13
docs/docs.json
View File

@ -1120,6 +1120,7 @@
"tools/plugin",
"plugins/community",
"plugins/bundles",
"plugins/webhooks",
"plugins/voice-call",
{
"group": "Building Plugins",
@ -2485,6 +2486,7 @@
"ja-JP/tools/plugin",
"ja-JP/plugins/community",
"ja-JP/plugins/bundles",
"ja-JP/plugins/webhooks",
"ja-JP/plugins/voice-call",
{
"group": "Building Plugins",
@ -3235,6 +3237,7 @@
"es/tools/plugin",
"es/plugins/community",
"es/plugins/bundles",
"es/plugins/webhooks",
"es/plugins/voice-call",
{
"group": "Building Plugins",
@ -3985,6 +3988,7 @@
"pt-BR/tools/plugin",
"pt-BR/plugins/community",
"pt-BR/plugins/bundles",
"pt-BR/plugins/webhooks",
"pt-BR/plugins/voice-call",
{
"group": "Building Plugins",
@ -4735,6 +4739,7 @@
"ko/tools/plugin",
"ko/plugins/community",
"ko/plugins/bundles",
"ko/plugins/webhooks",
"ko/plugins/voice-call",
{
"group": "Building Plugins",
@ -5485,6 +5490,7 @@
"de/tools/plugin",
"de/plugins/community",
"de/plugins/bundles",
"de/plugins/webhooks",
"de/plugins/voice-call",
{
"group": "Building Plugins",
@ -6235,6 +6241,7 @@
"fr/tools/plugin",
"fr/plugins/community",
"fr/plugins/bundles",
"fr/plugins/webhooks",
"fr/plugins/voice-call",
{
"group": "Building Plugins",
@ -6985,6 +6992,7 @@
"ar/tools/plugin",
"ar/plugins/community",
"ar/plugins/bundles",
"ar/plugins/webhooks",
"ar/plugins/voice-call",
{
"group": "Building Plugins",
@ -7735,6 +7743,7 @@
"it/tools/plugin",
"it/plugins/community",
"it/plugins/bundles",
"it/plugins/webhooks",
"it/plugins/voice-call",
{
"group": "Building Plugins",
@ -8485,6 +8494,7 @@
"tr/tools/plugin",
"tr/plugins/community",
"tr/plugins/bundles",
"tr/plugins/webhooks",
"tr/plugins/voice-call",
{
"group": "Building Plugins",
@ -9235,6 +9245,7 @@
"uk/tools/plugin",
"uk/plugins/community",
"uk/plugins/bundles",
"uk/plugins/webhooks",
"uk/plugins/voice-call",
{
"group": "Building Plugins",
@ -9985,6 +9996,7 @@
"id/tools/plugin",
"id/plugins/community",
"id/plugins/bundles",
"id/plugins/webhooks",
"id/plugins/voice-call",
{
"group": "Building Plugins",
@ -10735,6 +10747,7 @@
"pl/tools/plugin",
"pl/plugins/community",
"pl/plugins/bundles",
"pl/plugins/webhooks",
"pl/plugins/voice-call",
{
"group": "Building Plugins",

194
docs/plugins/webhooks.md Normal file
View File

@ -0,0 +1,194 @@
---
summary: "Webhooks plugin: authenticated TaskFlow ingress for trusted external automation"
read_when:
- You want to trigger or drive TaskFlows from an external system
- You are configuring the bundled webhooks plugin
title: "Webhooks Plugin"
---
# Webhooks (plugin)
The Webhooks plugin adds authenticated HTTP routes that bind external
automation to OpenClaw TaskFlows.
Use it when you want a trusted system such as Zapier, n8n, a CI job, or an
internal service to create and drive managed TaskFlows without writing a custom
plugin first.
## Where it runs
The Webhooks plugin runs inside the Gateway process.
If your Gateway runs on another machine, install and configure the plugin on
that Gateway host, then restart the Gateway.
## Configure routes
Set config under `plugins.entries.webhooks.config`:
```json5
{
plugins: {
entries: {
webhooks: {
enabled: true,
config: {
routes: {
zapier: {
path: "/plugins/webhooks/zapier",
sessionKey: "agent:main:main",
secret: {
source: "env",
provider: "default",
id: "OPENCLAW_WEBHOOK_SECRET",
},
controllerId: "webhooks/zapier",
description: "Zapier TaskFlow bridge",
},
},
},
},
},
},
}
```
Route fields:
- `enabled`: optional, defaults to `true`
- `path`: optional, defaults to `/plugins/webhooks/<routeId>`
- `sessionKey`: required session that owns the bound TaskFlows
- `secret`: required shared secret or SecretRef
- `controllerId`: optional controller id for created managed flows
- `description`: optional operator note
Supported `secret` inputs:
- Plain string
- SecretRef with `source: "env" | "file" | "exec"`
If a secret-backed route cannot resolve its secret at startup, the plugin skips
that route and logs a warning instead of exposing a broken endpoint.
## Security model
Each route is trusted to act with the TaskFlow authority of its configured
`sessionKey`.
This means the route can inspect and mutate TaskFlows owned by that session, so
you should:
- Use a strong unique secret per route
- Prefer secret references over inline plaintext secrets
- Bind routes to the narrowest session that fits the workflow
- Expose only the specific webhook path you need
The plugin applies:
- Shared-secret authentication
- Request body size and timeout guards
- Fixed-window rate limiting
- In-flight request limiting
- Owner-bound TaskFlow access through `api.runtime.taskFlow.bindSession(...)`
## Request format
Send `POST` requests with:
- `Content-Type: application/json`
- `Authorization: Bearer <secret>` or `x-openclaw-webhook-secret: <secret>`
Example:
```bash
curl -X POST https://gateway.example.com/plugins/webhooks/zapier \
-H 'Content-Type: application/json' \
-H 'Authorization: Bearer YOUR_SHARED_SECRET' \
-d '{"action":"create_flow","goal":"Review inbound queue"}'
```
## Supported actions
The plugin currently accepts these JSON `action` values:
- `create_flow`
- `get_flow`
- `list_flows`
- `find_latest_flow`
- `resolve_flow`
- `get_task_summary`
- `set_waiting`
- `resume_flow`
- `finish_flow`
- `fail_flow`
- `request_cancel`
- `cancel_flow`
- `run_task`
### `create_flow`
Creates a managed TaskFlow for the route's bound session.
Example:
```json
{
"action": "create_flow",
"goal": "Review inbound queue",
"status": "queued",
"notifyPolicy": "done_only"
}
```
### `run_task`
Creates a managed child task inside an existing managed TaskFlow.
Allowed runtimes are:
- `subagent`
- `acp`
Example:
```json
{
"action": "run_task",
"flowId": "flow_123",
"runtime": "acp",
"childSessionKey": "agent:main:acp:worker",
"task": "Inspect the next message batch"
}
```
## Response shape
Successful responses return:
```json
{
"ok": true,
"routeId": "zapier",
"result": {}
}
```
Rejected requests return:
```json
{
"ok": false,
"routeId": "zapier",
"code": "not_found",
"error": "TaskFlow not found.",
"result": {}
}
```
The plugin intentionally scrubs owner/session metadata from webhook responses.
## Related docs
- [Plugin runtime SDK](/plugins/sdk-runtime)
- [Hooks and webhooks overview](/automation/hooks)
- [CLI webhooks](/cli/webhooks)