Skip to main content
Copy .env.example to .env and fill in the required values. The install.sh script does this interactively.

Required

VariableDescription
CLAWHQ_URLPublic URL of your ClawHQ install (e.g. https://clawhq.yourdomain.com)
ANTHROPIC_API_KEYAnthropic API key — used by default for all agents
WORKOS_CLIENT_IDWorkOS client ID for authentication
WORKOS_API_KEYWorkOS API key for authentication
WORKOS_REDIRECT_URIOAuth redirect URI — must match your ClawHQ URL
POSTGRES_PASSWORDPassword for the internal Postgres database
GATEWAY_AUTH_TOKENSecret token for internal service communication

Optional — AI providers

VariableDescription
OPENAI_API_KEYOpenAI API key (GPT-4o, o1, etc.)
GROQ_API_KEYGroq API key (fast open-source models)
OPENROUTER_API_KEYOpenRouter key (access to 100+ models)
DEEPSEEK_API_KEYDeepSeek API key
ZAI_API_KEYZAI API key

Optional — Channels

VariableDescription
DISCORD_BOT_TOKENDiscord bot token
SLACK_BOT_TOKENSlack bot user OAuth token (xoxb-...)
TELEGRAM_BOT_TOKENTelegram bot token from @BotFather
WHATSAPP_TOKENWhatsApp Business API token

Optional — Integrations

VariableDescription
BRAVE_SEARCH_API_KEYBrave Search API key for web search MCP
GITHUB_TOKENGitHub personal access token for GitHub MCP and the update checker

Dashboard build args

These are Docker build arguments, not runtime env vars. Pass with --build-arg.
VariableDefaultDescription
CLAWHQ_GIT_SHAdevGit commit SHA baked in at build time — used by the update checker to show how many commits behind main you are
Example:
docker compose build \
  --build-arg CLAWHQ_GIT_SHA=$(git rev-parse HEAD) \
  dashboard

Dashboard data file overrides

VariableDefaultDescription
CLAWHQ_SETTINGS_FILE/data/settings.jsonSettings persistence path
CLAWHQ_AUDIT_FILE/data/audit-log.jsonAudit log path
CLAWHQ_KEYS_FILE/data/api-keys.jsonAPI key storage path
CLAWHQ_ANALYTICS_FILE/data/analytics.jsonUsage analytics snapshot path

Model Router

VariableDefaultDescription
MODEL_ROUTER_ENABLEDtrueEnable the model router
MODEL_ROUTER_PRIMARYanthropic/claude-sonnet-4-6Primary model
MODEL_ROUTER_FALLBACKanthropic/claude-haiku-4-5Budget fallback model
MODEL_ROUTER_BUDGET_THRESHOLD80Budget % to trigger fallback
OLLAMA_BASE_URLhttp://localhost:11434Ollama endpoint

Networking

VariableDefaultDescription
CLAWHQ_PORT3000Dashboard port
OPENCLAW_GATEWAY_PORT4100OpenClaw gateway port
OPENFANG_PORT4200OpenFang API port
PAPERCLIP_PORT3101Paperclip orchestration port

Infrastructure profiles

VariableDescription
TAILSCALE_AUTH_KEYEnables the Tailscale VPN tunnel profile
CLOUDFLARE_TUNNEL_TOKENEnables the Cloudflare Tunnel profile