Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

@vercel/vclaw

Package Overview
Dependencies
Maintainers
3
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@vercel/vclaw

CLI to set up and deploy vercel-openclaw with one command

latest
Source
npmnpm
Version
0.3.10
Version published
Maintainers
3
Created
Source

OpenClaw logo

vclaw

Deploy vercel-openclaw from the command line.

Quick Start

npx @vercel/vclaw create

vclaw creates a managed workspace under ~/.vclaw, links a Vercel project, provisions Redis, grabs the latest published OpenClaw bundle, deploys to production, and runs launch verification.

With a Telegram bot

Get a token from @BotFather (/newbot), then:

npx @vercel/vclaw create --telegram "123456:AA...BotFatherToken"

Same flow as above, plus registers the Telegram webhook after verify — no admin-panel clicks.

See all options

npx @vercel/vclaw --help

Prerequisites

  • Node.js >=20, git
  • Vercel CLI: npm i -g vercel
  • Logged in via vercel login (or VERCEL_TOKEN)

Check with:

npx @vercel/vclaw doctor

Common Options

Pick a team or project name:

npx @vercel/vclaw create --scope my-team --name my-openclaw --telegram "<token>"

Add Slack alongside Telegram (both require the signing secret from your Slack app):

npx @vercel/vclaw create \
  --telegram "<token>" \
  --slack "xoxb-..." \
  --slack-signing-secret "abcd1234..."

Enable Vercel Deployment Protection (auto-wires the automation bypass):

npx @vercel/vclaw create --telegram "<token>" --deployment-protection sso

Stop before deploying:

npx @vercel/vclaw create --skip-deploy

Commands

vclaw create

--name <name>                      Vercel project name (default: openclaw)
--auto-project-name                Use the next available friendly OpenClaw project name without prompting
--auto-link                        Write local .env.local/.gitignore for debugging the linked app
--scope <scope>                    Vercel team scope
--dir <path>                       Use an existing local vercel-openclaw project directory
--clone                            Clone/update vercel-openclaw into --dir or managed workspace
--bundle-url <url>                 Use a specific published OpenClaw bundle
--no-bundle                        Do not auto-use the latest published OpenClaw bundle
--admin-secret <hex>               Admin-dashboard password (prompted if omitted)
--cron-secret <hex>                Optional dedicated cron secret
--deployment-protection <mode>     none | sso | password
--protection-bypass-secret <s>     Optional automation bypass secret
--skip-deploy                      Stop after provisioning
--telegram <botToken>              Wire a Telegram bot after verify
--slack <botToken>                 Wire a Slack bot (requires --slack-signing-secret)
--slack-signing-secret <secret>    Slack signing secret (paired with --slack)
--slack-bot-name <name>             Bot display name when creating a Slack app
--yes                              Skip confirmation prompts where possible

--telegram and --slack are mutually exclusive with --skip-deploy.

vclaw verify

Run launch verification against an existing deployment:

npx @vercel/vclaw verify --url https://my-openclaw.vercel.app --admin-secret "$ADMIN_SECRET"

Add --protection-bypass "$VERCEL_AUTOMATION_BYPASS_SECRET" for protected deployments.

vclaw doctor

Check local prerequisites and Vercel auth.

Managed Environment Variables

vclaw sets:

  • ADMIN_SECRET — the admin-dashboard password
  • CRON_SECRET — when --cron-secret is passed
  • VERCEL_AUTOMATION_BYPASS_SECRET — when deployment protection is enabled

Redis (REDIS_URL / KV_URL) comes from the Vercel Marketplace integration.

Repository

  • GitHub: vercel-labs/vclaw
  • Source project: vercel-labs/vercel-openclaw

License

MIT

Keywords

vercel

FAQs

Package last updated on 14 May 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts