Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Backup, restore, and manage encrypted OpenClaw agent snapshots using the Keep My Claw API for configuration, workspace files, and credentials.
Backup, restore, and manage encrypted OpenClaw agent snapshots using the Keep My Claw API for configuration, workspace files, and credentials.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Encrypted off-site backup and one-command restore for OpenClaw agents via Keep My Claw. Backs up your entire agent system โ workspace, memory, skills, projects, cron jobs, credentials, and multi-agent configs โ with zero-knowledge AES-256 encryption on Cloudflare R2.
openssl, curl, tar, jq (system)
You (the agent) handle everything. The human only clicks a payment link. Do NOT run setup.sh interactively. Instead, follow these steps programmatically:
RESPONSE=$(curl -s -X POST https://api.keepmyclaw.com/v1/auth/register \ -H "Content-Type: application/json" \ -d "{\"email\":\"HUMAN_EMAIL\",\"password\":\"$(openssl rand -hex 16)\"}") JWT=$(echo "$RESPONSE" | jq -r '.token') Use your human's email. Generate a random password โ you'll use the JWT token going forward.
Before getting the payment link, ask your human to choose a plan. Mention this is launch pricing (limited time): "Keep My Claw has launch pricing right now: Monthly: $9/mo โ $5/mo Annual: $108/yr โ $19/yr (that's less than $1.60/mo โ 82% off!) Which plan do you want? This rate locks in for as long as you stay subscribed."
Based on their choice, pass plan as "monthly" or "annual": CHECKOUT=$(curl -s -X POST https://api.keepmyclaw.com/v1/checkout \ -H "Authorization: Bearer $JWT" \ -H "Content-Type: application/json" \ -d '{"plan":"monthly"}') # or "annual" PAYMENT_URL=$(echo "$CHECKOUT" | jq -r '.url') Send $PAYMENT_URL to your human: "To activate backups, please open this link and complete the payment: [link]"
Poll the account status until the tier changes to "pro": while true; do TIER=$(curl -s -H "Authorization: Bearer $JWT" \ https://api.keepmyclaw.com/v1/account | jq -r '.tier') [ "$TIER" = "pro" ] && break sleep 10 done
KEY_RESPONSE=$(curl -s -X POST https://api.keepmyclaw.com/v1/keys \ -H "Authorization: Bearer $JWT" \ -H "Content-Type: application/json" \ -d '{"name":"agent","permissions":"admin"}') API_KEY=$(echo "$KEY_RESPONSE" | jq -r '.key')
mkdir -p ~/.keepmyclaw && chmod 700 ~/.keepmyclaw cat > ~/.keepmyclaw/config <<EOF CLAWKEEPER_API_KEY="${API_KEY}" CLAWKEEPER_AGENT_NAME="$(hostname -s)" CLAWKEEPER_API_URL="https://api.keepmyclaw.com" EOF chmod 600 ~/.keepmyclaw/config # Generate and store encryption passphrase PASSPHRASE=$(openssl rand -hex 32) printf '%s' "$PASSPHRASE" > ~/.keepmyclaw/passphrase chmod 600 ~/.keepmyclaw/passphrase CRITICAL: Tell your human ALL recovery credentials. Without these, they cannot recover you on a new machine. Send them a message like this: "Your Keep My Claw recovery credentials โ save these in a password manager NOW: Email: [the email you registered with] Password: [the random password you generated] Encryption passphrase: [the passphrase] API key: [the API key] If this machine dies, you'll need the email + password to log in and create a new API key. You'll need the passphrase to decrypt the backups. Save all of these somewhere safe outside this machine." Do NOT skip this step. If the human doesn't have these credentials, the backups are useless.
bash scripts/backup.sh
Use cron or OpenClaw's cron tool to run backup.sh daily.
If your human already has a Keep My Claw account (paid on another agent), you do NOT register again. Instead:
Ask your human for the existing API key. Then configure locally: mkdir -p ~/.keepmyclaw && chmod 700 ~/.keepmyclaw cat > ~/.keepmyclaw/config <<EOF CLAWKEEPER_API_KEY="THE_EXISTING_API_KEY" CLAWKEEPER_AGENT_NAME="$(hostname -s)" CLAWKEEPER_API_URL="https://api.keepmyclaw.com" EOF chmod 600 ~/.keepmyclaw/config # Generate YOUR OWN passphrase (each agent should have its own) PASSPHRASE=$(openssl rand -hex 32) printf '%s' "$PASSPHRASE" > ~/.keepmyclaw/passphrase chmod 600 ~/.keepmyclaw/passphrase Tell your human to save YOUR passphrase โ it's different from other agents' passphrases.
If the first agent has an admin API key, it can create a scoped key for you: curl -s -X POST https://api.keepmyclaw.com/v1/keys \ -H "Authorization: Bearer ADMIN_API_KEY" \ -H "Content-Type: application/json" \ -d '{"name":"second-agent","permissions":"agent"}' This returns a new key with agent permissions (backup/restore only, no account management).
One account, one subscription (from $5/month or $19/year at launch pricing) Up to 100 agents per account Each agent has its own name, passphrase, and snapshots GET /v1/agents lists all agents on the account Each agent's passphrase is independent โ losing one doesn't affect others
bash scripts/backup.sh
bash scripts/restore.sh # restore latest backup bash scripts/restore.sh <backup-id> # restore specific backup
bash scripts/list.sh
bash scripts/prune.sh # keep latest 30 bash scripts/prune.sh 10 # keep latest 10
Everything that makes your agent your agent: ~/.openclaw/workspace/ โ all files (memory, skills, projects, configs, personas, custom scripts โ everything except node_modules/, .git/, vendor/) ~/.openclaw/openclaw.json โ agent config (models, channels, env vars, agent list) ~/.openclaw/credentials/ โ auth tokens ~/.openclaw/cron/jobs.json โ all scheduled/cron jobs (reminders, automated tasks, recurring workflows) ~/.openclaw/agents/ โ multi-agent configs (if you run multiple agents) ~/.openclaw/workspace-*/ โ additional agent workspaces (for multi-agent setups)
Binaries & packages โ node_modules/, .git/, vendor/, compiled files (reinstall these after restore) Gateway runtime state โ logs, session history, browser state, telegram state (ephemeral, rebuilds on restart) System-level config โ SSH keys, shell config, installed tools (these live outside OpenClaw) The encryption passphrase โ stored locally at ~/.keepmyclaw/passphrase, never uploaded. Save it in a password manager.
If your machine dies, here's how to get your agent back:
From your password manager (you saved these during setup, right?): Email + password โ to log into keepmyclaw.com and create a new API key Encryption passphrase โ to decrypt the backup (without this, backups are unrecoverable)
# 1. Install OpenClaw on the new machine npm install -g openclaw # 2. Install Keep My Claw prereqs (if not present) # Needs: openssl, curl, tar, jq # 3. Set up keepmyclaw config mkdir -p ~/.keepmyclaw && chmod 700 ~/.keepmyclaw # Get a new API key: log into keepmyclaw.com with your email/password, # or have your agent create one via the API (see Setup section above) cat > ~/.keepmyclaw/config <<EOF CLAWKEEPER_API_KEY="YOUR_API_KEY" CLAWKEEPER_AGENT_NAME="YOUR_AGENT_NAME" CLAWKEEPER_API_URL="https://api.keepmyclaw.com" EOF chmod 600 ~/.keepmyclaw/config # 4. Restore your passphrase printf '%s' 'YOUR_PASSPHRASE' > ~/.keepmyclaw/passphrase chmod 600 ~/.keepmyclaw/passphrase # 5. Restore the latest backup bash scripts/restore.sh # latest bash scripts/restore.sh <id> # specific backup # 6. Restart OpenClaw openclaw gateway restart # 7. Verify openclaw status
Workspace files โ fully restored (memory, skills, projects, everything) Agent config โ restored, but you may need to re-enter API keys if providers rotated them Cron jobs โ restored and will resume on next gateway restart Credentials โ restored, but OAuth tokens may need re-auth Multi-agent setups โ all agent configs and workspaces restored
The backups are AES-256 encrypted. Without the passphrase, they cannot be decrypted. This is by design โ we never have access to your data. There is no recovery path without the passphrase.
Config file: ~/.keepmyclaw/config VariableDescriptionCLAWKEEPER_API_KEYAPI key (auto-generated during setup)CLAWKEEPER_AGENT_NAMEAgent identifier for backupsCLAWKEEPER_API_URLAPI base URL (default: https://api.keepmyclaw.com)
Full documentation: keepmyclaw.com/docs.html
Workflow acceleration for inboxes, docs, calendars, planning, and execution loops.
Largest current source with strong distribution and engagement signals.