Plugin Command Guide
Plugin-only commands, agent tools, and config options. For basic scan commands (run clawvitals, show clawvitals details) see the skill docs.
Send these as messages in your OpenClaw messaging surface (Slack, Signal, Telegram, etc.).
| Command | Description |
|---|---|
| run clawvitals --expanded | Expanded scan standard controls plus 8 system-level checks: Ollama port exposure, open management ports, secrets in dotfiles/history, Docker privilege flags, disk encryption, OS auto-updates, and tunnel authentication. |
| run clawvitals --standard | Explicit standard scan same as the default but useful to override when expanded mode is your habit. |
| Command | Description |
|---|---|
| clawvitals status | Show current plugin state: schedule (enabled/disabled, cron), telemetry, alias, and install ID. Also shows cognitive file monitoring state based on the stored baseline from the last run clawvitals — not a live file scan. |
| clawvitals help | Show the full command guide in your messaging surface. |
| clawvitals --help | Alias for clawvitals help. |
| clawvitals commands | Alias for clawvitals help. |
These are invoked by your agent as tool calls (not typed as chat messages). The agent uses them automatically in response to natural language requests.
| Tool name | Description | Say something like… |
|---|---|---|
| clawvitals_help | Show the full command reference in your messaging surface. | "clawvitals help" · "clawvitals --help" |
| clawvitals_set_alias | Set a human-readable display name for this install on the dashboard (max 64 chars). | "set clawvitals alias to prod-server-1" · "name this install dev-laptop" |
| clawvitals_show_identity | Show install ID, alias, and total pings. | "show clawvitals install ID" · "what is my clawvitals install ID?" |
| clawvitals_telemetry | Enable or disable anonymous telemetry. Disabling stops data appearing on the dashboard. | "turn off clawvitals telemetry" · "enable clawvitals telemetry" |
| clawvitals_set_schedule | Set or change the recurring scan schedule. Accepts a 5-field cron expression and an enabled flag. Scheduling is off by default. | "set clawvitals to scan daily" · "schedule clawvitals every Monday at 9am" · "disable clawvitals schedule" |
| clawvitals_status | Show current plugin status: schedule, telemetry, alias, install ID, and cognitive file monitoring state. Drift status reflects the stored baseline from the last run clawvitals — run a scan first to get up-to-date drift results. | "clawvitals status" · "is clawvitals scheduled?" |
| clawvitals_exclude | Suppress a specific control from scan reports. Requires a control ID, a reason, and an optional expiry date. | "exclude NC-AUTH-001 — not behind a proxy" · "suppress NC-OC-008 until end of month" |
| clawvitals_exclusions | List all active control exclusions with reason and expiry. | "show clawvitals exclusions" · "what controls are suppressed?" |
| clawvitals_approve_baseline | Approve a cognitive integrity file (e.g. SOUL.md) into the drift-detection baseline, or approve all files at once. | "approve SOUL.md as baseline" · "approve all clawvitals baseline files" |
| clawvitals_set_cognitive_monitoring | Include or exclude a cognitive file from drift detection. Use filename="all" to apply to every file. | "exclude MEMORY.md from drift monitoring" · "include USER.md in clawvitals drift detection" |
| clawvitals_export | Export the most recent scan report as markdown or return the directory path. | "export clawvitals report" · "show me the last clawvitals report" |
NC-NET-001 scans 10 default management ports. You can extend this list via plugin config extra ports are merged with the defaults, not a replacement.
Default ports scanned
22 (SSH) · 2375 (Docker API plaintext) · 2376 (Docker API TLS) · 4000 (Dev/Admin) · 5000 (API/Dev) · 8080 (HTTP Proxy/Admin) · 8443 (HTTPS Admin) · 8888 (Jupyter/Admin) · 9000 (Management Console) · 9090 (Prometheus/Admin)
Add extra ports
Edit ~/.openclaw/plugins/clawvitals/config.json:
{
"network": {
"extra_ports": [
{ "port": 3001, "service": "Slack server" },
{ "port": 6006, "service": "TensorBoard" }
]
}
}Then run run clawvitals --expanded the extra ports are included automatically.