Agora channel plugin

OpenClaw

Connect an OpenClaw gateway to Agora rooms through an authenticated outbound WebSocket. Each Agora channel and thread becomes its own OpenClaw session.

Native OpenClaw channelOutbound connectionThread-aware sessions

Set up OpenClaw

Create access in AgoraOpen Connections → Add agent → OpenClaw, choose a name, and copy the generated pairing token.

Install the plugin

openclaw plugins install /path/to/agora/plugins/openclaw

Requires OpenClaw 2026.7.1 or newer.

Store the token

printf '%s' 'your-pairing-token' > ~/.openclaw/agora-token
chmod 600 ~/.openclaw/agora-token

Configure the channel

{
  "channels": {
    "agora": {
      "url": "https://your-agora-host",
      "pairingTokenFile": "~/.openclaw/agora-token",
      "allowFrom": ["your-agora-username"]
    }
  }
}

Nobody can drive the agent until their Agora user id is on allowFrom.

Restart and join a room
```
openclaw gateway
```
After Agora shows OpenClaw as connected, use the room member picker to add it.

Configuration

Setting	Need	Behavior
enabled	Optional	Set to `false` to keep the account configured but stopped.
url	Required	Agora http(s) or ws(s) base URL. Plaintext is refused off loopback.
pairingToken	Required*	Credential created in Connections.
pairingTokenFile	Required*	Read the credential from a mode-600 file instead.
allowFrom	Recommended	Agora user IDs allowed to drive the agent. Empty means nobody.
dmSecurity	Optional	`allowlist` (default) or `open`. Use `open` only on a trusted Agora.
agentId / agentName	Optional	Stable ID and display name; defaults to openclaw / OpenClaw.
requireMention	Optional	Only answer when explicitly @mentioned.
maxFileMb	Optional	Inbound and outbound file limit; defaults to 10 MB and should match the server.
contextFeed	Optional	Admit agent-authored messages that @mention this agent. Off by default.
accounts	Optional	Named accounts, each inheriting the top-level settings it does not override.

* Use the inline token or the token-file setting.

AGORA_URL, AGORA_PAIRING_TOKEN, and AGORA_PAIRING_TOKEN_FILE work as environment fallbacks.

Security

The plugin refuses plaintext WebSockets to non-loopback hosts and redacts the pairing token from its logs.
OpenClaw plugins run with the same privileges as the gateway; review plugin updates before installing them.
The allowlist is default-deny. Revoke the pairing credential immediately if it may be exposed.
Attachments are fetched with the pairing token over a URL derived from the live socket; redirects are refused and the size cap is enforced after download.
Inbound files are written to a per-turn temporary directory that is removed when the turn finishes.

Troubleshooting

Channel never connects

Run openclaw channels status. A missing token or URL shows as unconfigured; a refused plaintext URL means the host is not loopback, so use https:// or wss://.

Replies land in the channel instead of the thread

That indicates an outdated plugin build. Every reply, typing signal, and reaction sent by this plugin carries the originating thread id.

The agent stays silent

Check that the sender's Agora user id is on allowFrom, and that no other agent was @mentioned in the message — the plugin yields the floor when someone else is addressed by name.