openclaw-webhooks

Receive and verify OpenClaw Gateway webhooks. Use when handling webhook events from OpenClaw AI agents, processing agent hook calls, wake events, or building integrations that respond to OpenClaw agent activity.

Aller à l'installation

Dépôt: hookdeck/webhook-skills
Dernière activité de la source: 11 mai 2026 à 12:14
Langue détectée de SKILL.md: anglais
Étoiles: 79
Forks: 11

Options d'installation

Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.

Vérifiez les fichiers source

Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.

Retour à la recherche Retour à l’installation

name	openclaw-webhooks
description	Receive and verify OpenClaw Gateway webhooks. Use when handling webhook events from OpenClaw AI agents, processing agent hook calls, wake events, or building integrations that respond to OpenClaw agent activity.
license	MIT
metadata	{"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"}

OpenClaw Webhooks

When to Use This Skill

Receiving webhook calls from an OpenClaw Gateway
Verifying Authorization: Bearer <token> or x-openclaw-token headers
Handling /hooks/agent and /hooks/wake event payloads
Building external services that react to OpenClaw agent activity

Essential Code (USE THIS)

OpenClaw Token Verification (JavaScript)

const crypto = require('crypto');

function verifyOpenClawWebhook(authHeader, xTokenHeader, secret) {
  // OpenClaw sends the token in one of two headers:
  //   Authorization: Bearer <token>
  //   x-openclaw-token: <token>
   token = (authHeader, xTokenHeader);
   (!token || !secret)  ;

   {
     crypto.(
      .(token),
      .(secret)
    );
  }  {
     ;
  }
}

 () {
   (xTokenHeader)  xTokenHeader;
   (authHeader && authHeader.())
     authHeader.();
   ;
}

const express = require('express');
const app = express();

app.post('/webhooks/openclaw',
  express.json(),
  (req, res) => {
    const authHeader = req.headers['authorization'];
    const xToken = req.headers['x-openclaw-token'];

    if (!verifyOpenClawWebhook(authHeader, xToken, process.env.OPENCLAW_HOOK_TOKEN)) {
      console.error('OpenClaw token verification failed');
      return res.status(401).send('Invalid token');
    }

    const { message, name, wakeMode, agentId, sessionKey } = req.body;

    console.log(`[${name || 'OpenClaw'}] ${message}`);

    // Respond quickly - OpenClaw expects 200 or 202
    res.status(200).json({ received: true });
  }
);

import hmac

def verify_openclaw_webhook(auth_header: str | None, x_token: str | None, secret: str) -> bool:
    token = x_token
    if not token and auth_header and auth_header.startswith("Bearer "):
        token = auth_header[7:]
    if not token or not secret:
        return False
    return hmac.compare_digest(token, secret)

{
  "message": "Summarize inbox",
  "name": "Email",
  "agentId": "hooks",
  "sessionKey": "hook:email:msg-123",
  "wakeMode": "now",
  "deliver": true,
  "channel": "last",
  "to": "+15551234567",
  "model": "openai/gpt-5.2-mini",
  "thinking": "low",
  "timeoutSeconds": 120
}

Field	Required	Description
`message`	Yes	Prompt or message for the agent
`name`	No	Human-readable hook name (e.g. "GitHub", "Email")
`agentId`	No	Route to a specific agent; falls back to default
`sessionKey`	No	Session key (disabled by default)
`wakeMode`	No	`now` (default) or `next-heartbeat`
`deliver`	No	Send agent response to messaging channel (default `true`)
`channel`	No	`last`, `whatsapp`, `telegram`, `discord`, `slack`, `signal`, `msteams`
`to`	No	Recipient identifier for the channel
`model`	No	Model override for this run
`thinking`	No	Thinking level: `low`, `medium`, `high`
`timeoutSeconds`	No	Max duration for the agent run

{
  "text": "New email received",
  "mode": "now"
}

Code	Meaning
`200`	Wake event accepted
`202`	Agent hook accepted (async run started)
`400`	Invalid payload or query-string token
`401`	Authentication failed
`413`	Payload too large
`429`	Rate-limited (check `Retry-After` header)

OPENCLAW_HOOK_TOKEN=your_shared_secret   # Must match hooks.token in Gateway config

# Start tunnel (no account needed)
npx hookdeck-cli listen 3000 openclaw --path /webhooks/openclaw

// Generated with: openclaw-webhooks skill
// https://github.com/hookdeck/webhook-skills