Configuration

Settings sit in two layers, both stored in the Control DO (the Durable Object that holds the install’s config and records). An op is one action of the install, such as a wake, a sleep or a restart.

The two layers

ochost config pull writes the current version to openclaw.jsonc and sets baseVersion in oc-host.jsonc. openclaw.jsonc is only a working copy: edits to it do not reach the install. config set refuses when baseVersion is not the current version, so run config pull and then set again. --force skips that check.

ochost config list shows the versions, and ochost config get [path] --ver N shows one. A path is dotted, such as agents.defaults.model.primary or bindings[0].agentId. The value is JSON, and a bare word that is not JSON counts as a string. --unset removes a key.

See CLI reference for the flags.

Two ways to change OpenClaw settings

OpenClaw has its own settings pages and openclaw config commands, and oc-workers adds ochost config. Both change the same OpenClaw configuration.

Edits made inside the container come back to the Control DO as a candidate version within about a minute, so both paths persist. The Control DO keeps the newest valid version.

Use ochost for settings that must hold after a restore or that touch the Worker: channel tokens, webhook URLs, gateway auth, the model provider, capability endpoints, sleep settings. Use the OpenClaw UI and CLI for live tuning while awake: persona, tool policy, memory, plugin settings.

When the install is asleep, only ochost works. ochost config set wakes nothing; the change waits for the next boot.

oc-host.jsonc keys

ochost init writes the file with these defaults and comments. The file is JSONC, and comments stay when the CLI edits it. Never edit .oc-host/wrangler.jsonc, because every ochost run rewrites it.

When it loads the file, the CLI checks every key in the tables: type, floor and cap, and the rules between keys. A key you leave out takes its default. A bad value stops the command and shows the allowed range. upgrade.auto: true stops it too, because automatic upgrades are not built.

The settings document

The tuning keys live in a settings document in the Control DO, with numbered versions like the OpenClaw config.

• ochost deploy seeds version 1 from oc-host.jsonc. After that the document wins, so a later deploy does not change a value.
• ochost config set <key> <value> checks the value, writes a new version and updates oc-host.jsonc, with no deploy. The Control DO reads the document on every call. The Runtime DO (the Durable Object that runs the container) and the login store re-read it at the start of each op, with a 10 second cache, so a change applies at the next op.
• ochost config get <key> shows the live value. ochost config settings lists every key with its live value and whether you set it. --unset puts the default back.
• Editing oc-host.jsonc by hand changes nothing live. Run ochost settings push, which sends every tuning key of the file as the whole document (keys the file omits go back to their default), with no deploy.

ochost config set sleep.idleMinutes 10
ochost config set archive.everyHours 3
ochost config settings

An op in flight keeps the values it started with. A changed sleep.idleMinutes applies at the next sleep decision. The adaptive idle time (it doubles after a quick re-wake) was set at the last wake, so it catches up one wake later.

Install keys

The old llm.auth key is gone, since it had only one value. A file that still has it works.

Sleep keys

Change them with ochost config set <key> <value> or ochost sleep set auto|off --idle-minutes N --proactive <v>. Both apply at the next op.

Snapshot, archive and chain keys

Alert, storage and cost keys

Login keys

The settings that matter most are sleep.mode, sleep.idleMinutes and sleep.proactive.

OpenClaw keys that oc-workers manages

Do not set these by hand; use the ochost command named in the table. oc-workers overwrites each of these keys at every boot, checks it, or builds on it.

Overwritten at every boot

The boot step takes the selected config version and sets these keys over it, with values from the Control DO. Your own value is dropped.

Open the UI with ochost open. A change to gateway.auth, gateway.bind, gateway.port, gateway.trustedProxies, gateway.controlUi, browser.executablePath or tools.exec raises the alert config-sensitive.

A few keys are set for one boot only, and the stored version does not change. A restore from an archive or to a point in time sets cron.enabled to false for that boot. A boot that holds channels off sets channels.<name>.enabled to false for that boot. A plugin that is missing from the image is set enabled: false.

Written by ochost commands

oc-workers writes these keys into the document and checks some of them.

A key that holds a secret takes a ${NAME} reference. Set the value with ochost secrets set NAME, and the gateway sees it as env NAME. Names that have their own command (TELEGRAM_BOT_TOKEN, TELEGRAM_WEBHOOK_SECRET, the Slack, Discord and Twilio secrets, CF_AI_TOKEN, GATEWAY_TOKEN) are refused, and the error names the command to use.

OpenClaw keys you change

The rest of the document is yours, and the Control DO keeps up to 50 versions of it.

The memory search keys (memory.search.*) point at the capability gate, so keep them. Other memory keys follow the OpenClaw reference.

For every other section, see the OpenClaw configuration reference: channels, agents, session, messages, tools, models, mcp, skills, plugins, browser, hooks, cron, logging. Ignore the gateway section, because oc-workers manages it. openclaw config schema prints the live schema.

Budgets

The capability gate and the sandbox gate count what the agent spends each UTC day, and the Control DO holds the counters. An alert fires at 80 percent. At 100 percent the gate answers HTTP 429 with retry-after until the next UTC midnight or until you raise the limit. The verbs and defaults are on Capabilities.

ochost caps                      # used, limit and percent per verb
ochost caps set browser 7200     # change one limit

Not configurable yet

Next

Go to Cost.