Multi-tenant OpenClaw infra

Computer use agents via REST API, on Slack, Telegram, and WhatsApp.
Sandboxed, persistent, powered by the OpenClaw runtime and Lobu Skills.

Try on Telegram GitHub

or run locally

How it works

Connections

Connect any platform

Add Telegram, Slack, Discord, WhatsApp, or Teams from the admin page. No env vars — just paste your bot token and go.

Learn more →

Manage platform connections

Connections

🔗Connections

Support

Alice Chen8291045832

Infra Team-100204817

Internal Marketing

#campaigns109284710

Connected message launches a sandbox

my-agent/lobu dev

$ lobu dev -d

[gateway] listening on :8080

[gateway] connected to Redis

[gateway] Telegram connection "Support" connected

[telegram] message from Alice Chen to Support: "Can you share the latest incident update?"

[gateway] launching sandbox for chat:8291045832

[sandbox] loading agent, skills, and connection config

[sandbox] session resumed from /workspace

[sandbox] handing message to the Support agent

[sandbox] sending response (118 tokens)

[gateway] sandbox scaled to zero (idle 30s)

See the Docker deployment docs →

Setup

Self-service setup

Users bring their own AI provider keys via a settings page you don't have to build. No config files, no terminal.

Pick your AI provider and model

Models

🤖Models

Groq

Connected

llama-3.3-70b-versatile

Gemini

Connected

gemini-2.0-flash

Together AI

Connected

meta-llama/Llama-3.3-70B-Instruct-Turbo

NVIDIA NIM (free)

Connected

nvidia/moonshotai/kimi-k2.5

z.ai

Connected

Auto model

ElevenLabs

Connected

Auto model

Fireworks AI

Connected

accounts/fireworks/models/llama-v3p3-70b-instruct

Mistral

Connected

mistral-large-latest

DeepSeek

Connected

deepseek-chat

OpenRouter

Connected

anthropic/claude-sonnet-4

Cerebras

Connected

llama-3.3-70b

OpenCode Zen

Connected

anthropic/claude-sonnet-4

xAI

Connected

grok-3

Perplexity

Connected

sonar-pro

Cohere

Connected

command-r-plus

OpenAI

Connected

gpt-4o

Bot walks users through setup

Internal Marketing

online

Help me write a blog post12:01

I need an AI model first. Set me up below.12:01

Done, let's go12:01

Here's an outline: 1. Hook with a question 2. Key insight + examples 3. Clear takeaway Expand any section?12:01

Security

Zero-trust security

Agents start with no internet access and never see real credentials. The gateway proxy swaps in secrets at request time and enforces a domain allowlist.

Domains, MCP proxy, and tool permissions

Security

🛡️Domain allowlist

github.comAlways

registry.npmjs.orgAlways

🔌MCP proxy

gmail-mcpSecrets proxied

github-mcpSecrets proxied

🔧Allowed tools

BashSandboxed

file_uploadAllowed

Agent asks for network access

Support

online

Clone my repo and install dependencies12:01

Can't reach github.com — not in allowed domains. Grant access?12:01

Allow it permanently12:01

github.com added to always-allow list. Cloned the repo and ran npm install. Ready to go.12:01

Skills

Skills and integrations

Users install skills that bundle MCP servers and integrations. OAuth and API-key auth handled for you.

Learn more →

Review skills, MCP servers, and auth

Skills

⚠️

Pending changes from your agent

Review and approve the requested configuration changes.

⚡Skills

skillOps Triage

system/ops-triage

Triage inbox, PRs, and issues

oauthGoogle

oauthGitHub

networkgmail.googleapis.com, api.github.com

Agent configures dependencies

Coding

online

Install my triage skill and summarize inbox + PRs12:01

Found `ops-triage`. Needs: • Gmail MCP (OAuth) • GitHub MCP (OAuth) • Linear integration (API key) Install and connect now?12:01

Yes, connect everything12:01

Done. OAuth connected for Gmail/GitHub, Linear API key saved. Summary: • Inbox: 3 urgent emails • PRs: 2 need review • Linear: 5 high-priority issues12:01

Memory

Built-in persistent memory

Owletto memory plugin is enabled by default. PostgreSQL + pgvector for semantic search, BM25 for keyword recall, and an entity system — auto-recall on every turn, no setup required.

Choose and configure memory plugins

Memory

🧠Memory Plugins

owletto-memorydefault

Enabled

pgvectorBM25 searchentity systemauto-recallauto-capture

native-memoryoptional

Disabled

Agent stores and recalls long-term context

AnalystBot

online

Remember that my weekly report should focus on customer churn12:01

Saved to persistent memory via Owletto (default memory plugin). I will use this preference in future reports.12:01

Can I use a different memory backend later?12:01

Yes. You can switch to another OpenClaw memory plugin, such as native memory, by changing `pluginsConfig`.12:01

Schedules

Scheduling out of the box

Users set reminders and recurring tasks in natural language. Agents run autonomously at the scheduled time — you don't build the scheduler.

View and manage scheduled jobs

Schedules

⏰Reminders

Check open PRs and summarize review queue

pendingrecurringEvery Mon 9:00 AM

Review Q1 deck

pendingTomorrow 2:00 PM

Schedule tasks in natural language

Personal Assistant Bot

online

Every Monday 9am, check my PRs12:01

⏰ Mon 9 AM — check open PRs Approve?12:01

Yes. Also remind me tomorrow 2pm to review Q1 deck12:01

Two schedules active: 1. PR summary — Mon 9 AM (recurring) 2. Q1 deck — Tomorrow 2 PM (one-off) I'll ping you when they trigger.12:01

Packages

User-installable packages

Let users install system packages via Nix on demand. Environments persist across sessions and are fully reproducible.

Manage installed system packages

Packages

📦Packages

ffmpeg

gifsicle

imagemagick

Agent requests tools it needs

Internal Marketing Bot

online

Convert this video to a gif under 5MB12:01

I need ffmpeg and gifsicle. Install them?12:01

Go for it12:01

Installed via Nix. These persist across sessions. Converting now...

Done! 4.2 MB (from 28 MB). Adjust frame rate?12:01

Architecture

Security-first. Zero trust by default. Every agent runs in an isolated sandbox with no direct network access.

KubernetesFirecrackergVisorjust-bashOpenTelemetryKata ContainersNix

Mini App, inline buttons

Slack

Block Kit, interactive actions

Reply buttons, list menus

Native UI per platform — not just text
Users authenticate with their own accounts
Embedded settings via inline buttons

Gateway

single egress point

Secret swapping — workers never see real keys
HTTP proxy with domain allowlist
MCP proxy with per-user OAuth
BYO provider keys (Anthropic, OpenAI, etc.)

OpenClaw Runtime

User A

isolated

OpenClaw Runtime

User B

isolated

OpenClaw Runtime

User C

isolated

One sandbox per user and channel
Kata Containers / Firecracker microVMs / gVisor on GCP
virtualized bash for scaling beyond 1000 users
No direct internet access (internal network)
Nix reproducible environments
OpenTelemetry for observability

Ready to try it?

Message our Telegram bot and start coding in seconds.

Try on Telegram

Browse Skills|Pricing|Docs