ClawMax

Multiagent orchestration platform for OpenClaw

ClawMax provides a web-based platform to manage, monitor, and orchestrate OpenClaw AI agent teams. Deploy team templates, visualize workflow DAGs, track progress, and coordinate agents across your entire ecosystem.

---

🔥 Latest Stable Release: v1.9.9

• 1.9.9 adds native OpenRouter and xAI/Grok providers, brokered agent-skill secret grants, scoped Keys & Secrets navigation, mobile-safe workflow runs, pinned OpenAI model compatibility, and clearer long-running tool feedback.
• Browser-local secrets remain unavailable to agent chat by design. Runtime use requires an explicitly assigned skill, an exact secret grant, and a registered broker action; normal Google account passwords are not supported.
• The release retains the OpenClaw v2026.6.11 baseline and was promoted unchanged from the multi-architecture 1.9.9-test-rc6 image.

🛠 Current Development Line: 2.0.0

• 2.0.0-test-rc43 is the active hands-on candidate. Stable installers and images remain at v1.9.9 until the remaining external-environment and human-review gates in the 2.0 launch plan are complete.
• main now carries the public clawmax.ai/v2 plugin platform. A plugin can contribute pages, APIs, data, actions, jobs, events, settings, skills, providers, docs, and extension points through one domain-neutral host contract.
• Lifecycle and Review are the public product plugins in the current 2.0 phase. Lifecycle provides a read-only deep view of agents, workflows, groups, and communities; Review keeps release validation organized and exportable. PLUGINS/test/plugin-* directories are synthetic host-contract fixtures and are never shown in the plugin manager.
• Public 2.0 products include AI scoring, the Lifecycle and Review plugins, curated Gmail and Microsoft 365/Outlook integrations, and a consent-gated Activity Export contract for partner event integrations such as Digo. Activity export is off by default, visibly names its destination, and never blocks agent execution on remote delivery.
• See the public model-fit plan for recommendation limits, capability evidence, and remaining public release gates.
• See the public models, gateways, and email partner plan for the research, security rules, shipped provider decisions, and 2.0 test gates.
• See the public Lifecycle plugin plan for the read-only agent/workflow inspection surface and delivery phases.
• See the public 2.0 plugin architecture plan for the generic contribution-based host contract.
• See the public Activity Export and partner ingestion plan for consent, data scope, redaction, batching, the ClawMax.ai reference receiver, and the proposed Digo API contract.

✨ 1.9.x Highlights

• 1.9.8: federated skill search, safe DocHub bulk file management, named exports, dashboard location memory, and final RC feedback fixes.
• 1.9.7: first fully validated OpenClaw v2026.6.11 release across local/cloud/on-prem chat and workflows, automatic workflow session-conflict recovery, clearer unsupported-model remediation, Builder handoff cleanup, and chat inbox attachments.
• 1.9.5: perf baseline artifacts, rolling history/model-matrix sampling, and direct custom-skill ZIP upload/import for cloud, container, and on-prem runtimes.
• 1.9.3: chat archive correctness, archived conversation resume/restore cleanup, Templates mobile overflow hardening, Workflows first-load initialization fixes, and clearer on-prem custom-skill import guidance.
• 1.9.2: clearer workflow/log/notification/doctor diagnostics, safer local skill import/runtime-path handling, and more consistent DocHub/file-open payload parsing across dashboard surfaces.
• 1.9.1: major test backfill push, built-in --coverage mode in the wrapper, and broader server-route/runtime regression coverage to establish a measured stabilization baseline.

✨ 1.8.x Highlights

• 1.8.9: stronger chat/runtime stability, waiting-for-input context routing, better workflow failure deep links, Builder/chat-history/WhatsApp fixes, and notification/workspace-switch cleanup.
• 1.8.8: template/workflow hardening around first-apply defaults, shared communication targeting, opt-in recurring assistant automations, and conservative workflow parallelism cleanup.
• 1.8.7: remaining DocHub/file-open hardening, clearer workflow/provider failures, simpler agent actions, workflow-session retry repair, and audited deprecated-model handling across OpenAI, Anthropic, and Gemini.
• 1.8.5 / 1.8.6: DocHub preview and file-resolution upgrades, cleaner provider messaging, notification dedupe/grouping, and lower background churn.
• 1.8.4 / 1.8.3: agent delete-flow fixes plus Add Agent default-model, AI-create model preservation, and provisioning-warning cleanup.

✨ 1.7.x Highlights

• 1.7.9: first-pass Cognee partner integration, curated plugin install/uninstall flows, runtime-secret chat routing, and stronger partner/plugin regression coverage.
• 1.7.8: regression sweep for templates search, bundled helper skills, resend/email flows, workflow session hardening, and notification/chat link correctness.
• 1.7.7 / 1.7.6: cloud/on-prem email and status-delivery fixes plus image/release pipeline stabilization.
• 1.7.5: broader UI/UX cleanup across agent surfaces, notifications, file-open behavior, mobile/dark-light consistency, and AI authoring flows.

For full 1.8.x / 1.7.x details and RC history, see CHANGELOG.md.

---

🌟 Features

Agent Management

• Visual Agent Roster - View all agents with status, tags, and activity
• Agent Creation - Bootstrap new agents from templates or use built-in system agents to generate your agents passing description
• Organization Templates - Import pre-configured agent teams or organizations
• Skills Assignment - Assign 50+ built-in skills to agents or import your own skill and assign
• Tag-based Filtering - Organize agents by role, project, or capability

Communication & Monitoring

• Real-time Chat - Interactive chat with any agent via CLI proxy
• Group Conversations - Multiagent group chats and communities
• Activity Feed - Track agent actions, file changes, and workflow executions
• Status Dashboard - System health, agent count, workspace metrics, and optionally costs and budget via Opik (requires Comet Opik service)
• Budget Controls - Workspace-level budget visibility and enforcement to pause costly execution before spend drifts
• Opik Trace Attribution - Manual chats and workflow runs now stamp workspace, agent/workflow, and real dashboard user identity into trace metadata so shared projects can still be filtered cleanly by user and workspace

Authentication & Keys

• GitHub OAuth Login - GitHub remains the primary general-purpose dashboard login path
• Email OTP Login - Single-user hosted/operator-managed login mode with allowlisted email(s), short-lived codes, and persistent session cookies after verification
• Workspaces Integrations / BYOK - Users can configure hosted and local model providers plus optional integrations for their agents and workflows
• Keys & Secrets Browser Vault - A central browser-local vault can capture reusable provider and partner keys once, then prefill matching template, workflow, skill, and integration inputs
• Browser-Local Runtime Secrets - Templates, workflows, and skills can request browser-local secrets like API keys, event slugs, or export paths without persisting them to the server by default
• Separated Key Policy - Dashboard/system actions use SYSTEM_* keys; user execution prefers BYOK or USER_* keys

Keys & Secrets safety model:

• Values in Keys & Secrets are stored in the current browser only. They are meant to centralize capture and reuse across dashboard forms, not to act as a secure remote secrets manager.
• ClawMax uses the browser vault to prefill matching inputs for templates, workflows, skills, and visible partner integrations. Users can still override values locally for a specific apply/run/edit flow.
• Browser-local values are not automatically available to agent chat or skill subprocesses. Brokered runtime values use a separate encrypted workspace store and require an explicit skill/key grant rather than a general secret-reading tool.
• Brokered values require CLAWMAX_SECRET_MASTER_KEY with at least 32 characters. Keep this operator key stable and outside the workspace; changing or losing it makes existing encrypted values unreadable. Workspace exports exclude broker ciphertext, grants, audit records, and runtime integration secret files.
• Do not store normal account passwords for agent use. Prefer provider OAuth, service accounts, scoped tokens, or app passwords supported by the specific integration.
• Browser-local values are not a substitute for proper server-side or infrastructure secret management. For production hosted or operator-managed deployments, keep system/runtime secrets in environment variables, secret stores, or your platform’s native secret manager.
• If you share a browser profile or machine, treat browser-local vault contents as locally accessible to that profile. Clear or rotate values when changing environments or handing a machine to someone else.

Workflows & DAG

• Workflow DAG Visualization - Interactive dependency graph with parallel lanes and connecting lines
• DAG Execution Engine - Auto-advance pipeline: complete → check deps → trigger next
• Workflow Designer - Create scheduled or manual workflows
• Progress Tracking - Real-time progress bars from agent stdout activity
• Blocker Surfacing - Agents declare blockers, rendered as actionable notifications
• Agent Targeting - Route workflows by tags, groups, or communities
• Execution History - Track workflow runs and results
• Structured Workflow Inputs - Persist kickoff/start input summaries in execution records for better dashboards and traceability
• Cron Scheduling - Set recurring workflows with flexible schedules
• WORKFLOW.md Format - Define workflows as YAML frontmatter + markdown

Templates

• 50+ Organization Templates - Business, technical, personal, science, travel, hobbies, family, events, markets, product research, and launch proposal templates
• 25 Reusable Agent Templates - Leadership, engineering, research, events, testing, market, product, competitive, astronomy, and prototype roles that can be reused independently
• Editable Workspace Variants - Start from built-in agent and organization templates, refine them, and save workspace-local variants without overwriting system templates
• 5-Step Template Wizard - Team Type → Composition → Communication → Workflows → Preview
• Secrets Step for Secure Inputs - Templates with secret or runtime-input requirements now get a browser-local Secrets step during apply
• AI Generate - Describe a team, AI fills all wizard steps
• Local-First Template Feedback - Templates can collect star ratings and short optional feedback locally in the active workspace, and can optionally proxy the same payload to a remote web sink when configured
• Smart Workflow Customization - Dynamic form fields (dropdowns, checkboxes) from template placeholders
• GitHub Coordination - Toggle to add github skills and inject repo instructions into all workflows
• Category Filters - Business, Technical, Personal, Events, Science, Travel, Hobbies, and Family template categories
• Collapsible Template Sections - Collapse or expand Agent / Organization / Workflow sections while browsing
• TEMPLATE.md Format - Lean markdown format with structured body sections
• Import/Export - Download and upload templates and workflows as .md files

Local template feedback for developers:

• Template ratings and short feedback are stored in the active workspace at WORKSPACE/SYSTEM/template-feedback.json by default
• This is intentional for local dev and OSS use: you can inspect, back up, diff, or clear that file directly
• If you set all three remote feedback env vars below, the dashboard will submit feedback to the remote sink instead of the local workspace file:
  • TEMPLATE_FEEDBACK_REMOTE_URL
  • TEMPLATE_FEEDBACK_SUMMARY_URL
  • TEMPLATE_FEEDBACK_TOKEN
• The dashboard client still uses the same local /api/templates/.../feedback routes either way; the server decides whether to use local workspace JSON or the configured remote sink

Workspace Visibility

• Shareable Workspace Dashboards - Generate public read-only links for workspace status, workflows, costs, results, and group chats
• Compact Summary Charts - Dense compact-mode agent/workflow/notification visual summaries
• Display Modes - Compact, Standard, and Detail views for different audiences
• Live Theme Toggle - Shared dashboards follow ClawMax light/dark preference with a top-right toggle

Skills Marketplace

• 50+ Built-in Skills - github, slack, web-search, code-review, and more
• Shipables.dev Registry - Search, browse, and install from 1,000+ skills
• Bulk Assignment - Add skills to multiple agents at once
• Custom Skills - Import from local directory or GitHub
• Partner Skills - Surface partner-backed skill references and curated install actions from Workspaces Integrations
• AI Skill Creation - Generate a new skill scaffold from intent, refine it iteratively, and fill missing SKILL.md sections with guidance

Notifications

• Dynamic Blocker UI - Approval buttons, choice pills, input fields, delegation picker
• Agent Actions - Restart, pause agents directly from notifications
• Progress Bars - Workflow progress in notification dropdown
• Search - Filter notifications by title, message, or type

Open Template & Workflow Registries

ClawMax templates and workflows are open source and community-driven:

• Maximilien-ai/templates — 40+ organization templates with TEMPLATE.md spec
• Maximilien-ai/workflows — 18+ workflow definitions with WORKFLOW.md spec

Contribute your own! Submit a PR with your TEMPLATE.md or WORKFLOW.md — help the community build better multiagent teams.

Multi-Workspace Support

• Workspace Switching - Manage multiple isolated agent environments
• Workspace Tagging - Color-code and label workspaces
• Independent Configs - Each workspace has its own agents and settings

---

🚀 Quick Start

Prerequisites

• Node.js 22.19+ and npm
• Git for cloning the repository

You do not need to pre-install OpenClaw or add model API keys before setup.

• ./setup.sh installs OpenClaw if it is missing
• model/provider keys can be added later in BYOK or Keys & Secrets after the dashboard is running

Automated Installation (Recommended)

Release Installer (tar.gz bootstrap)

If you do not want to clone the repository first, you can install from public release assets instead.

Latest release:

curl -fsSL https://github.com/Maximilien-ai/clawmax/releases/latest/download/install.sh | bash

Pinned release:

curl -fsSL https://github.com/Maximilien-ai/clawmax/releases/latest/download/install.sh | bash -s -- v1.9.9

What it does:

• download a versioned clawmax-vX.Y.Z.tar.gz release asset
• verify the matching SHA-256 checksum
• extract the release bundle into ./clawmax by default
• continue into the normal repo setup.sh flow automatically

🎬 Demo Videos

ClawMax currently includes a couple of legacy local backup demo videos for the two most common walkthroughs:

• workflow execution: SYSTEM/docs/videos/video1-workflow-execution.mov
• add-agent flow: SYSTEM/docs/videos/video2-add-agent.mov

See SYSTEM/docs/DEMO_VIDEOS.md for the current inventory, gaps, and planned refreshed feature-demo recordings.

You can also bootstrap directly with the checked-in wrapper:

./setup.sh v1.9.9

or choose a custom install directory:

curl -fsSL https://github.com/Maximilien-ai/clawmax/releases/latest/download/install.sh | bash -s -- v1.9.9 --dir /opt/clawmax

See SYSTEM/docs/RELEASE_DISTRIBUTION.md for the release distribution contract.

# Clone the repository
git clone https://github.com/Maximilien-ai/clawmax.git
cd clawmax

# Run automated setup
./setup.sh

The setup script will:

• ✅ Check prerequisites (Node.js, Git)
• ✅ Install OpenClaw if needed
• ✅ Install dashboard dependencies
• ✅ Configure workspace structure
• ✅ Offer auth setup choices for local dev and production
• ✅ Generate authentication token
• ✅ Set up environment variables
• ✅ Optionally install OpenClaw Gateway for chat

After setup:

• add provider/model keys in BYOK or Keys & Secrets
• optionally add shared runtime keys in SYSTEM/dashboard/.env

For local development, ./setup.sh now offers:

• Email OTP dev mode, which asks what login email you want in SYSTEM/dashboard/.env
• bypass mode, if you explicitly do not want auth

When you choose local dev Email OTP, the latest login code is written to:

• .clawmax-otp-dev.json

To uninstall a local ClawMax setup cleanly, run:

./uninstall.sh

This removes the local ClawMax/OpenClaw runtime setup while preserving:

• WORKSPACES/
• ~/.openclaw/agents/
• ~/.openclaw/workspace/
• ~/.openclaw/workspaces/

Manual Installation (Alternative)

# Clone the repository
git clone https://github.com/Maximilien-ai/clawmax.git
cd clawmax

# Install dependencies
cd SYSTEM/dashboard && npm install && cd ../..

# Set up workspace directories
mkdir -p WORKSPACES/default/{AGENTS,WORKFLOWS,ORG,TEMPLATES,PARTNERS,SYSTEM}
mkdir -p WORKSPACES/default/SKILLS/custom

# Configure dashboard-local env
cp SYSTEM/dashboard/.env.example SYSTEM/dashboard/.env
# Then edit SYSTEM/dashboard/.env with your auth mode and provider keys

# Start the dashboard
./SYSTEM/start.sh

# Dashboard will be available at http://localhost:5173
# API server runs on http://localhost:3001

# Alternate local ports when another instance is already running:
DASHBOARD_PORT=3002 DASHBOARD_CLIENT_PORT=5174 DASHBOARD_APP_URL=http://localhost:5174 ./SYSTEM/start.sh

Auth options:

# GitHub OAuth
DASHBOARD_AUTH_MODE=github_oauth

# Email OTP for single-user hosted/operator-managed installs
DASHBOARD_AUTH_MODE=email_otp
[email protected]
RESEND_API_KEY=your_resend_api_key
[email protected]

# Local developer OTP flow without live email
OTP_DEV_MODE=log
# Latest code is written to .clawmax-otp-dev.json

# Optional partner visibility in Workspaces Integrations
WORKSPACES_INTEGRATIONS_THIRD_PARTIES=senso,opik,github,resend,cognee,gmail,microsoft365,digo

# Optional explicit runtime/deployment kind for provider defaults and UI behavior.
# Supported:
# - local   => native/local development; shows Ollama and OpenAI-Compatible with localhost defaults
# - onprem  => containerized/self-managed installs; shows Ollama and OpenAI-Compatible with host.containers.internal defaults
# - cloud   => hosted ClawMax; hides Ollama by default but keeps OpenAI-Compatible available
DASHBOARD_DEPLOYMENT_KIND=local

# Optional Ollama visibility override for Workspaces Integrations.
# Default:
# - local/native or operator-managed runtime with dashboard .env present: enabled
# - non-interactive hosted runtime with no dashboard .env: hidden
DASHBOARD_ENABLE_OLLAMA=false

# Optional local Ollama runtime endpoint used by dashboard/server execution paths.
# This is the env var the runtime actually reads. Do not use DASHBOARD_OLLAMA_BASE_URL.
OLLAMA_BASE_URL=http://127.0.0.1:11434

# Optional OpenAI-compatible local/self-hosted runtime endpoint used by AI generate
# and other runtime follow-through paths. For same-Mac containerized on-prem installs,
# prefer http://host.containers.internal:1234/v1 instead of loopback.
OPENAI_COMPATIBLE_BASE_URL=http://127.0.0.1:1234/v1

# Optional extra partner roots
CLAWMAX_EXTRA_PARTNER_DIRS=$PWD/WORKSPACES/default/PARTNERS

Notes:

• Built-in partner definitions ship in the repo-level PARTNERS/ directory.
• WORKSPACES/default/PARTNERS is a good place for local or experimental partner definitions without editing built-ins.
• If you build or deploy the dashboard in a container, make sure the image includes the repo PARTNERS/ directory.
• DASHBOARD_DEPLOYMENT_KIND is the clearest way to make local-model provider behavior deterministic across local dev, on-prem, and cloud runtimes.
• DASHBOARD_ENABLE_OLLAMA controls only whether Ollama appears in the dashboard UI. It does not provision an Ollama runtime for hosted deployments.
• OLLAMA_BASE_URL is the runtime env var used by dashboard/server execution. DASHBOARD_OLLAMA_BASE_URL is not used.
• OPENAI_COMPATIBLE_BASE_URL is the runtime env var used when you want the dashboard/server to have a stable OpenAI-compatible execution path after restart.
• Browser-local BYOK / Workspaces Integrations Ollama settings help the UI and request-scoped execution, but operator-managed local runtime setups should still prefer setting OLLAMA_BASE_URL in SYSTEM/dashboard/.env so chat/workflows have a stable local execution path after restart.
• For same-Mac containerized on-prem installs, prefer http://host.containers.internal:11434 for Ollama and http://host.containers.internal:1234/v1 for LM Studio/OpenAI-compatible servers instead of loopback URLs.

First Steps

1. Create Your First Agent

   • Open http://localhost:5173
   • Navigate to Templates → Organizations
   • Import “Small Startup Team” to get CEO, Engineer, and Product Manager agents

2. Assign Skills

   • Go to Skills tab
   • Select an agent
   • Click skills to assign (github, web-search, email, etc.)

3. Start a Conversation

   • Go to Agents tab
   • Click on an agent
   • Click the 💬 Chat icon to start a conversation

4. Create a Workflow

   • Go to Workflows tab
   • Click “New Workflow”
   • Set schedule, target agents, and content
   • Save and enable

5. Explore Templates & DAG

   • Go to Templates and browse 35+ team templates by category (Business, Technical, Personal, Science, Travel, Hobbies, Family)
   • Try “Technical Writing” — creates a full writing team with editor, writers, reviewer, and publisher
   • Try “ClawMax System Test” — a test template with 3 agents and a 5-step workflow DAG (kickoff → sequential → parallel → final)
   • After applying a template, go to Workflows → click the ◇ DAG view button to see the dependency graph
   • Each template creates a complete team: agents, communities, groups, and interconnected workflows with kickoff

---

🔑 API Key Configuration

ClawMax has two key scopes and one explicit precedence policy:

• SYSTEM/dashboard/.env system keys: used by dashboard-owned features such as agent generation, workflow generation, cron/system agents, and future platform automations.
• user BYOK/default user keys: used by the logged-in user’s own agents and workflows by default.

Important:

• provider keys are resolved from SYSTEM/dashboard/.env policy, not from shell exports like ~/.zshrc
• user execution precedence is:
  1. BYOK keys provided in-app
  2. USER_* defaults from SYSTEM/dashboard/.env
  3. system keys only if ALLOW_SYSTEM_KEYS_FOR_USER_EXECUTION=true
• system/dashboard-owned execution precedence is:
  1. SYSTEM_* keys from SYSTEM/dashboard/.env
  2. USER_* fallback only if no system key is configured

Recommended SYSTEM/dashboard/.env setup:

SYSTEM_ANTHROPIC_API_KEY=sk-ant-your-system-key
SYSTEM_OPENAI_API_KEY=sk-your-system-key
# SYSTEM_OPENROUTER_API_KEY=sk-or-your-system-key
# Optional default user keys
# USER_ANTHROPIC_API_KEY=sk-ant-your-user-key
# USER_OPENAI_API_KEY=sk-your-user-key
# USER_OPENROUTER_API_KEY=sk-or-your-user-key
# Optional temporary fallback for user execution
# ALLOW_SYSTEM_KEYS_FOR_USER_EXECUTION=false

For a standard Enterprise tenant, use:

DASHBOARD_DEPLOYMENT_KIND=cloud
CLAWMAX_MAX_WORKSPACES=1
CLAWMAX_MAX_AGENTS_PER_WORKSPACE=10
CLAWMAX_MAX_WORKFLOWS_PER_WORKSPACE=10

All deployments, including cloud and on-prem, remain unlimited unless a CLAWMAX_MAX_* limit is explicitly set. 0 disables creation of that resource. Creation and import endpoints return HTTP 409 with code TENANT_RESOURCE_LIMIT_REACHED when a limit is reached. Effective limits and optional presentation configuration are available from /api/auth/config under resourceLimits and resourceLimitConfig. Product-specific upgrade copy and destinations belong in deployment configuration rather than this public repository.

Without system keys, the dashboard may still boot, but system-generated flows such as agent/workflow generation will be limited. Without user keys, end-user agents should eventually rely on BYOK capture after login.

🔐 Dashboard Auth Setup

ClawMax supports three dashboard auth modes:

• github_oauth
• email_otp
• bypass

If DASHBOARD_AUTH_MODE is omitted, ClawMax defaults to:

• github_oauth

Use:

• github_oauth for normal multi-user or GitHub-based owner access
• email_otp for single-user hosted or operator-managed installs
• bypass only for solo local development when you intentionally do not want auth

GitHub OAuth

GitHub OAuth is the primary dashboard login path.

Minimum local setup in SYSTEM/dashboard/.env:

CORS_ORIGIN=http://localhost:5173
GITHUB_CLIENT_ID=your-github-client-id
GITHUB_CLIENT_SECRET=your-github-client-secret

Recommended when you want redirects to be explicit:

DASHBOARD_PORT=3001
DASHBOARD_APP_URL=http://localhost:5173
DASHBOARD_INSTANCE_LABEL=Dev
# DASHBOARD_PUBLIC_URL=http://localhost:3001

GitHub OAuth app values:

• Homepage URL: http://localhost:5173
• Callback URL: http://localhost:3001/api/auth/github/callback

If you run on alternate local ports, keep the pair aligned. Example:

DASHBOARD_PORT=3002
DASHBOARD_CLIENT_PORT=5174
DASHBOARD_APP_URL=http://localhost:5174
CORS_ORIGIN=http://localhost:5174

For operator-managed deployments, you can also set:

# Examples:
# DASHBOARD_INSTANCE_LABEL=Cloud
# DASHBOARD_INSTANCE_LABEL=On-Prem
# DASHBOARD_INSTANCE_LABEL=Staging

Email OTP

Email OTP is the recommended login mode for single-user hosted and operator-managed installs.

Minimum setup in SYSTEM/dashboard/.env:

DASHBOARD_AUTH_MODE=email_otp
[email protected]
RESEND_API_KEY=your_resend_api_key
OTP_FROM_EMAIL=ClawMax 
OTP_EMAIL_SUBJECT=Your ClawMax login code

Recommended:

OTP_EXPIRY_MINUTES=15
DASHBOARD_APP_URL=http://localhost:5173
# DASHBOARD_PUBLIC_URL=http://localhost:3001

Developer mode:

DASHBOARD_AUTH_MODE=email_otp
[email protected]
OTP_DEV_MODE=log

OTP_DEV_MODE currently supports only:

• log

If OTP_DEV_MODE is unset, or set to any other value:

• dev OTP logging is disabled
• email_otp then requires real email delivery such as RESEND_API_KEY

When OTP_DEV_MODE=log is enabled:

• no live email is sent
• the OTP is logged to the main dashboard server stdout/stderr stream
• the latest code is written to .clawmax-otp-dev.json
• the login UI shows the path after requesting a code

For real email delivery:

• set RESEND_API_KEY
• set a verified sender in OTP_FROM_EMAIL
• or let OTP fall back to SIGNUP_FROM_EMAIL if you intentionally share the sender config with the web app

Recommended local-tool/bootstrap defaults:

DASHBOARD_AUTH_MODE=email_otp
[email protected]
OTP_DEV_MODE=log
OTP_EXPIRY_MINUTES=15

Bypass Auth

Use bypass only for local-only development when you explicitly want no login wall:

DASHBOARD_AUTH_MODE=bypass

Legacy compatibility still exists:

BYPASS_OAUTH=true

But prefer DASHBOARD_AUTH_MODE=bypass going forward.

Detailed setup and troubleshooting:

• SYSTEM/docs/OAUTH_SETUP.md

---

📖 Documentation

User Guides

• Testing Guide - Unit, API, integration, and manual testing
• Release Checklist - Final pre-release validation
• Security Guide - Security best practices

Developer Resources

• System Documentation - Architecture and development
• Known Issues - Active bugs and workarounds
• Backlog - Prioritized backlog and roadmap

Specifications

• TEMPLATE.md Format - Template specification
• WORKFLOW.md Format - Workflow specification

OpenClaw Integration

• OpenClaw Docs - Core platform documentation
• Agent Configuration - Agent setup and skills
• Gateway Setup - WebSocket gateway for chat

---

🧪 Testing

ClawMax includes 212+ tests across unit, API, and integration suites:

# Unit + API tests (134 tests, fast, no LLM cost)
./SYSTEM/test.sh

# + Integration tests with live agents (~$0.03, requires keys)
./SYSTEM/test.sh integration

# Check dashboard status
./SYSTEM/status.sh

Test Suites:

• 78 unit tests (notifications, workflows, validator, templates, skills, and more)
• 134 API tests (26 sections covering all endpoints)
• Integration tests with ClawMax System Test template (live agent DAG execution)

See TESTING_GUIDE.md for full details.

---

🛠️ Development

Project Structure

clawmax/                        # ClawMax repo root
├── WORKSPACES/                 # All ClawMax-managed workspaces (v1.0.2+)
│   ├── default/                # Default workspace
│   │   ├── AGENTS/             # Agent configurations
│   │   ├── WORKFLOWS/          # Workflow definitions
│   │   ├── ORG/                # Organization files
│   │   └── TEMPLATES/          # Workspace-local templates (optional)
│   └── TEMPLATES/              # Shared workspace templates
├── TEMPLATES/                  # Global system templates (shared across all workspaces)
│   ├── agents/                 # System agent templates
│   └── organizations/          # System organization templates
├── SYSTEM/
│   ├── dashboard/              # Main dashboard application
│   │   ├── server/             # Express API server
│   │   │   ├── index.ts        # Server entry point
│   │   │   ├── routes/         # API routes
│   │   │   └── lib/            # Business logic
│   │   └── client/             # React frontend
│   │       └── src/
│   │           ├── pages/      # Main page components
│   │           └── components/ # Reusable components
│   ├── docs/                   # Documentation
│   ├── start.sh                # Start dashboard
│   ├── stop.sh                 # Stop dashboard
│   ├── status.sh               # Check status
│   └── test.sh                 # Run tests
├── setup.sh                    # Automated installation script
├── LICENSE                     # MIT License
└── README.md                   # This file

Development Commands

# Start in development mode (hot reload)
./SYSTEM/start.sh --follow

# Stop the dashboard
./SYSTEM/stop.sh

# Check if dashboard is running
./SYSTEM/status.sh

# Run tests
./SYSTEM/test.sh

# Build the dashboard bundle
cd SYSTEM/dashboard
npm run build

Tech Stack

• Frontend: React 18, TypeScript, Tailwind CSS, Vite
• Backend: Node.js, Express, TypeScript
• Storage: File-based (markdown files with YAML frontmatter)
• Communication: WebSocket (via OpenClaw Gateway), REST API
• Testing: Custom test framework with curl + jq

---

🔒 Security

ClawMax follows security best practices:

• Token Authentication - Dashboard token required for API access
• Local-first - All data stored locally, no external services
• Workspace Isolation - Each workspace is completely independent
• Input Validation - All user inputs validated and sanitized
• No Secret Commits - .env and token files in .gitignore

For detailed security information, see SECURITY.md.

To report security issues: Please email [email protected] (do not open public issues).

---

🐛 Known Issues

See KNOWN_ISSUES.md for active issues and workarounds.

---

🗺️ Roadmap

• Now — Workflow v2 polish (DAG run buttons, per-workspace budget, cron cascade)
• Next — Agent-to-agent messaging, community rules, workflow DAG visualization improvements
• Later — Secure multi-user BYOK storage, broader hosted/operator-managed packaging, public template registry

Full backlog: BACKLOG.md

---

🤝 Contributing

We welcome contributions! Whether it’s bug fixes, new features, or documentation improvements.

How to Contribute

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Make your changes
4. Run tests (./SYSTEM/test.sh)
5. Commit your changes (git commit -m 'Add amazing feature')
6. Push to branch (git push origin feature/amazing-feature)
7. Open a Pull Request

Development Guidelines

• Write tests for new features
• Follow existing code style (TypeScript, React best practices)
• Update documentation for user-facing changes
• Keep commits focused and descriptive

---

📄 License

ClawMax is released under the MIT License.

Copyright (c) 2026 ClawMax AI LLC

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

---

🙋 Support

Getting Help

• Documentation: SYSTEM/docs/
• Issues: GitHub Issues
• Blog: ClawMax Launch Post
• Launch Talk: AI Agents 1:1 Event
• Talk Recording: Google Drive
• LinkedIn Stream: Event Page
• OpenClaw Docs: https://docs.openclaw.ai

Commercial Support

Visit ClawMax.ai for commercial offerings:

ClawMax Cloud

• Fully managed multiagent orchestration platform
• Deploy teams from 35+ templates in minutes
• Built-in workflow DAG visualization and monitoring
• Shipables.dev skill marketplace integration
• No infrastructure to manage

ClawMax On-Premise

• Run ClawMax entirely on your own infrastructure
• Full data sovereignty — all agent data, conversations, and API keys stay within your network
• Works behind corporate firewalls with no external dependencies
• Deploy via Docker, Kubernetes, or bare metal
• Connect to your own LLM endpoints (Azure OpenAI, AWS Bedrock, self-hosted models)
• Integrate with internal tools (Jira, Confluence, Slack, custom APIs) via skills
• Ideal for personal use and regulated industries (finance, healthcare, government) requiring data residency

ClawMax Enterprise

• Everything in On-Premise, plus:
• Custom agent templates and workflows tailored to your organization
• Priority support with SLA
• SSO/SAML authentication
• Dedicated success manager
• Training and onboarding for your teams

For pricing and inquiries: [email protected] | clawmax.ai

---

🌟 Acknowledgments

ClawMax is built on top of OpenClaw, the open-source AI agent platform.

Special thanks to:

• The OpenClaw team for the core agent framework
• All contributors who helped shape ClawMax
• Early adopters who provided valuable feedback

---

Built with ❤️ by the Maximilien.ai ClawMax team

🦞 Powered by OpenClaw | 🚀 Ready to take for a spin | 📖 Well Documented