
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
@opik/opik-openclaw
Advanced tools
Official plugin for OpenClaw that exports agent traces to
Opik for observability and monitoring.
Opik is the open-source LLM observability and evaluation platform, built by Comet.
@opik/opik-openclaw adds native Opik tracing for OpenClaw runs:
The plugin runs inside the OpenClaw Gateway process. If your gateway is remote, install and configure the plugin on that host.
Prerequisites:
>=2026.9.7 (for older OpenClaw, stay on plugin 0.2.17)>=24.16 (required by OpenClaw 2026.9)>=10openclaw plugins install clawhub:@opik/opik-openclaw
And for older version of OpenClaw <2023.3.23 you can install the npm package using:
openclaw plugins install @opik/opik-openclaw
If the Gateway is already running, restart it after install.
openclaw opik configure
The setup wizard validates endpoint and credentials, then writes config under plugins.entries.opik-openclaw. If you choose Opik Cloud and do not have an account yet, the wizard now points you to the free signup flow before asking for an API key.
openclaw opik status
openclaw gateway run
openclaw message send "hello from openclaw"
Then confirm traces in your Opik project.
{
"plugins": {
"entries": {
"opik-openclaw": {
"enabled": true,
"hooks": {
"allowConversationAccess": true
},
"config": {
// base configuration
"enabled": true,
"apiKey": "your-api-key",
"apiUrl": "https://www.comet.com/opik/api",
"projectName": "openclaw",
"workspaceName": "default",
// optional advanced configuration
"tags": ["openclaw"],
"toolResultPersistSanitizeEnabled": false,
"staleTraceCleanupEnabled": true,
"staleTraceTimeoutMs": 300000,
"staleSweepIntervalMs": 60000,
"flushRetryCount": 2,
"flushRetryBaseDelayMs": 250
}
}
}
}
}
OpenClaw warns when plugins.allow is empty and a community plugin is discovered. Pin trusted plugins explicitly:
{
"plugins": {
"allow": ["opik-openclaw"]
}
}
Because Opik traces LLM prompts, responses, tools, and agent finalization events, non-bundled installs also need explicit conversation hook access:
{
"plugins": {
"entries": {
"opik-openclaw": {
"hooks": {
"allowConversationAccess": true
}
}
}
}
}
OPIK_API_KEYOPIK_URL_OVERRIDEOPIK_PROJECT_NAMEOPIK_WORKSPACEtoolResultPersistSanitizeEnabled is disabled by default. When enabled, the plugin rewrites local
image refs in persisted tool transcript messages via tool_result_persist.
| Command | Description |
|---|---|
openclaw plugins install @opik/opik-openclaw | Install plugin package |
openclaw opik configure | Interactive setup wizard |
openclaw opik status | Print effective Opik configuration |
| OpenClaw event | Opik entity | Notes |
|---|---|---|
llm_input | trace + llm span | starts trace and llm span |
llm_output | llm span update/end | writes usage/output and closes span |
before_tool_call | tool span start | captures tool name + input |
after_tool_call | tool span update/end | captures output/error + duration |
subagent_spawned | subagent span start | starts the subagent lifecycle span on the requester trace with run metadata |
subagent_ended | subagent span update/end | finalizes subagent span with outcome/error |
agent_end | trace finalize | closes pending spans and trace |
No OpenClaw core changes are included in this repository and relies on native hooks within the OpenClaw ecosystem.
Prerequisites:
>=24.16>=10npm ci
npm run build
npm run lint
npm run typecheck
npm run test
npm run smoke
The package publishes built JavaScript for installed OpenClaw runtime loads while
keeping TypeScript source metadata for development and older OpenClaw fallback
loads. openclaw.extensions points at ./index.ts; openclaw.runtimeExtensions
points at ./dist/index.js. ClawHub also requires explicit
openclaw.compat.pluginApi and openclaw.build.openclawVersion metadata.
npm pack and npm publish run npm run build through prepack, and
npm run pack:check verifies the tarball contract.
Pull requests also dry-run the ClawHub package publish workflow, and GitHub
releases publish the validated package to both npm and ClawHub.
Optional live gateway E2E:
npm run test:live
Notes:
.artifacts/live-e2e/<run-id>/home/.openclaw so it does not touch your normal OpenClaw configOPIK_API_KEY, OPIK_URL_OVERRIDE, OPIK_PROJECT_NAME, and OPIK_WORKSPACE win if set in env~/.openclaw/openclaw.json -> plugins.entries.opik-openclaw.config for apiUrl / apiKey / project / workspaceOPENCLAW_LIVE_USE_HOST_OPIK_CONFIG=0 to disable reading host plugin config and require explicit env-only Opik settingsOPENAI_API_KEY in env for the real model callnpx openclaw@${OPENCLAW_LIVE_OPENCLAW_VERSION:-latest} when openclaw is not already on your PATHOPENCLAW_LIVE_MODEL if gpt-4o-mini is not what you want to exerciseRead CONTRIBUTING.md before opening a PR.
FAQs
OpenClaw Opik exporter — sends LLM traces to Opik
The npm package @opik/opik-openclaw receives a total of 27 weekly downloads. As such, @opik/opik-openclaw popularity was classified as not popular.
We found that @opik/opik-openclaw demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.