OpenClaw—previously known as Clawdbot and Moltbot—is an open-source personal agent framework that has become one of the fastest-growing repositories in GitHub history. It's essentially Claude with a Unix philosophy—runs locally, has filesystem access, can execute commands, and talks to your messaging apps. The interesting part? When you wire it up to NEAR Intents, you get an AI agent that can autonomously manage cross-chain assets.
Here's a deep dive tutorial on how to set it up and why you might actually want to.
Note: Some of the screenshots in this tutorial include old Moltbot nomenclature. “OpenClaw” is Moltbot’s newest official name.
What OpenClaw Actually Is
OpenClaw is an open-source AI assistant that you run on your own hardware. Unlike chatbots that live in someone else's cloud, OpenClaw runs wherever you want: your laptop, a VPS, a home server. (You can now run OpenClaw on NEAR AI Cloud for hardware-enforced security plus cryptographic privacy guarantees).
The architecture is modular. At its core, OpenClaw is a gateway that:
- Executes shell commands
- Reads and writes files
- Integrates with Discord, Telegram, Slack, iMessage, etc.
- Supports pluggable "skills" (basically tool definitions for the LLM)
OpenClaw’s power comes from extensibility. You can teach it new capabilities by adding tools. And when you add NEAR Intents as a skill, you get an AI that can execute cross-chain swaps through natural language.
No more "bridge to chain X, swap on DEX Y, bridge back." Just "swap my USDC for SOL" and it figures out the routing. This means you can build some pretty powerful trading applications with OpenClaw.
Security Considerations With OpenClaw
Important: Before you connect chat apps, understand OpenClaw’s permission model. Use mention-only mode for group chats. Default config is basically "anyone can tell your computer to do anything." That's not great.
Security researcher Daniel Miessler audited OpenClaw and found 10 critical vulnerabilities in default installs. We’re listing them below because if you deploy this without fixing them, you're taking serious risks.
Security hardening checklist:
- Gateway exposed on 0.0.0.0:18789 → Set gateway.auth.token
- DM policy allows all users → Use allowlist, not default-allow
- Sandbox disabled → Enable sandbox=all + [docker.network](<http://docker.network>)=none
- Plaintext creds in oauth.json → Use env vars + chmod 600
- Prompt injection via web scraping → Wrap untrusted content in safety tags
- Dangerous commands allowed → Block rm -rf, curl | bash, git push --force
- No network isolation → Docker network isolation is mandatory
- Elevated tool access → Minimize MCP tool permissions
- No audit logs → Enable session logging
- Weak pairing codes → Use cryptographic random + rate limiting
Full visual breakdown: Daniel Miessler's security analysis
Real talk: OpenClaw gives the LLM full access to your machine. That's the feature, not a bug. But you need to treat it like you're handing your laptop to a stranger. Secure it accordingly.
https://x.com/DanielMiessler/status/
NEAR Intents: The "What" Not the "How"
Alright, so why wire OpenClaw to NEAR Intents specifically?
Traditional blockchain UX makes you specify every step when swapping assets between chains: "Approve token X, call contract Y with parameters Z, wait for confirmation, bridge to chain A, swap on DEX B..." It's exhausting.
NEAR Intents flips this and simplifies the process for the user. You specify the outcome ("I want SOL"), and a network of solvers competes to execute it for you. You don't care about the path—you care about the result. The solvers care about your business, so you end up getting the most competitive deal, with the least friction.


























