.env.example

# OpenClaw Runtime Configuration
# Copy this file to .env and adjust values as needed.

# ── Database ──────────────────────────────────────────────────────────────────

# Directory where runtime data (SQLite DB) is stored.
# Default: ./runtime
OPENCLAW_RUNTIME_DIR=./runtime

# Full path to the SQLite database file.
# Default: ./runtime/openclaw.db
OPENCLAW_DB_PATH=./runtime/openclaw.db

# ── Server ────────────────────────────────────────────────────────────────────

# Server host binding.
# Default: 127.0.0.1 (localhost only). Use 0.0.0.0 to expose on the network.
OPENCLAW_HOST=127.0.0.1

# Server port.
# Default: 8787
OPENCLAW_PORT=8787

# Instance name used for logging + health metadata.
# Example: central | project-a | project-b
OPENCLAW_INSTANCE=default

# Default scope used when memory updates omit "scope".
# For project-specific instances, set this to "project".
OPENCLAW_DEFAULT_SCOPE=general

# Optional comma-separated scope prefixes allowed on this instance.
# If empty, all scopes are accepted.
# Example for central: preferences,identity,facts
# Example for project-only: project,project-a
OPENCLAW_ALLOWED_SCOPE_PREFIXES=

# ── Security ──────────────────────────────────────────────────────────────────

# API key required on every request as the `x-api-key` header.
# Leave unset (or empty) to disable auth — for local dev only.
# PRODUCTION: always set a strong random key.
# Example: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
OPENCLAW_API_KEY=

# ── CORS ─────────────────────────────────────────────────────────────────────

# Allowed CORS origin for browser clients.
# Use * to allow all origins (dev), or specify your frontend domain for production.
# Example: https://my-app.example.com
OPENCLAW_CORS_ORIGIN=*