mirror of
https://github.com/openclaw/openclaw.git
synced 2026-07-14 09:56:07 +00:00
* feat(ui): add plugin catalog management * feat(gateway): add plugins.uninstall and richer plugin catalog metadata Adds a plugins.uninstall gateway method (operator.admin, control-plane write) backed by a lock-guarded uninstallManagedPlugin that mirrors the CLI flow: config cleanup, install-record removal, managed file deletion, and registry refresh. Bundled plugins stay disable-only. Catalog entries now carry a manifest-derived category and a removable flag; ClawHub search results expose download counts and verification tiers. * feat(ui): redesign plugins page with inventory, store shelves, and cover art Rebuilds /settings/plugins around three tabs: Installed (category-grouped inventory with overview stats, state filters, uninstall for external plugins, and inline MCP server management through the shared config seam), Discover (featured/official shelves plus one-click MCP connectors and curated ClawHub searches), and ClawHub (search with download counts and verification badges). Every catalog entry renders bundled cover art or a deterministic gradient monogram tile - no more empty boxes. Artwork generated with Codex CLI, shipped as 512px WebP under ui/public/plugin-art. * chore(ui): regenerate locale bundles for plugins manager strings * docs: describe plugins manager tabs, uninstall, and MCP connectors * fix(plugins): human catalog labels and un-pinned hosted fallback ids listManagedPlugins now prefers manifest names over registry package-name backfill, falls back to channel catalog labels and blurbs, and stops pinning expectedPluginId when a hosted feed entry only exposes its package name (which rejected every legitimate install of that package). Found via live gateway testing against ClawHub. * fix(ui): send minimal RFC 7396 merge patches for MCP server edits config.patch merges rather than replaces, so key removal needs an explicit null; sending the full config back made MCP server removal a no-op. Found via live gateway testing. * fix(ui): write explicit MCP transports for URL servers The MCP runtime defaults URL-only servers to SSE, so streamable HTTP endpoints saved by the add form or connector templates would fail at connect time. Connector templates now declare their transport and the add form infers streamable-http unless the URL follows the /sse convention. Flagged by autoreview against the transport resolver. * test(ui): wait for deferred plugin requests before resolving in e2e * feat(ui): plugins detail view, action menus, and unified ClawHub search Reworks the plugins page from PR #103176 feedback: merges the ClawHub tab into Discover (typing searches ClawHub inline and appends a quiet From ClawHub section, with Browse ClawHub demoted to a header text link), makes every row and store card open a plugin detail overlay (hero art, primary enable/install action, metadata table), and replaces enable/disable switches with a state chip plus an overflow menu (Enable/Disable, Remove for external plugins, View details) matching the ChatGPT-store install+menu pattern. MCP rows use the same menu; refresh is now icon-only. * chore(ui): regenerate locale bundles for plugins UI iteration * feat(ui): vetted, grouped connector catalog for the plugins store Expands Connect your world to 28 connectors organized into use-case shelves (Work & productivity, Coding & infrastructure, Home & media, Everyday life). Every entry passed a three-stage subagent review: official-docs verification plus live endpoint probes for MCP servers, ClawHub result-quality and malware/typosquat screening for curated searches, and an adversarial pass that dynamically registered OAuth clients to prove one-click viability. That review removed Figma (registration allowlisted, 403) and Atlassian (OAuth issuer-mismatch bug upstream), downgraded GitHub to PAT-based setup (no dynamic client registration upstream), fixed Linear (/sse retired) and Home Assistant (/api/mcp, streamable HTTP) endpoints, retargeted poisoned or dead searches (youtube, finance, hue dropped; calendar -> google calendar; stocks replaces finance), and added Todoist, Airtable, Canva, Stripe, Context7, DeepWiki, Hugging Face one-click MCP servers plus Jira, PDF, transcription, Kubernetes, Reddit, maps, translation, and notes searches. Keyless servers get a ready-to-use success message; new cover art included. * chore(ui): regenerate locale bundles for connector groups * fix(plugins): suppress hosted catalog rows once their package is installed Hosted feed entries without a declared runtime id fall back to their package name as catalog id, which never matches the installed runtime id, so the Discover shelf kept offering an already-installed package. Installed package names now also suppress official rows. Flagged by autoreview. * fix(plugins): pin declared runtime ids and surface connector errors in place The runtime-id pin now keys off explicitly declared catalog ids (plugin, channel, or provider) instead of string-comparing against the package name, so declared ids that equal their package name stay enforced while entry-id fallbacks stay unpinned. Connector add failures on Discover now render on the triggering card instead of the Installed tab's MCP section. Both flagged by autoreview; regression tests included. * feat(ui): full inventory artwork, pulse header, and two-column plugin list Every bundled plugin now ships distinctive cover art (113 new Codex CLI illustrations; 172 total, ~2.1MB WebP), so inventory rows and detail views never fall back to monogram tiles. The four stat cards give way to a compact inventory pulse: a segmented enabled/disabled/issues meter whose legend and counts live inside the filter chips. Inventory, MCP, and search rows flow into two columns when the panel is wide enough. * chore(ui): regenerate locale bundles for pulse header * fix(ui): omit stdio args from the MCP server row target Stdio MCP args routinely carry tokens, and the inventory is visible to read-only operators; mirror the config page and show only the command. Flagged by autoreview; regression test included. * fix(merge): point crestodian setup at relocated plugin commit/refresh modules * fix(merge): add bootstrapToken to plugins page test gateway harness * fix(plugins): name catalog install-action branches so Swift emits the union * fix(ui): satisfy strict lint on plugins page form parsing and mocks * chore(build): regen docs map, raise plugin-sdk declaration budget for new protocol surface * fix(ui): type the plugins page patch mock with its real call signature
274 lines
11 KiB
Markdown
274 lines
11 KiB
Markdown
---
|
|
summary: "Manage OpenClaw plugins from the Control UI or CLI"
|
|
read_when:
|
|
- You want to browse, install, enable, or disable plugins in the Control UI
|
|
- You want quick plugin list, install, update, inspect, or uninstall examples
|
|
- You want to choose a plugin install source
|
|
- You want the right reference for publishing plugin packages
|
|
title: "Manage plugins"
|
|
sidebarTitle: "Manage plugins"
|
|
doc-schema-version: 1
|
|
---
|
|
|
|
The Control UI covers the common discovery, install, enable, and disable
|
|
workflow. The CLI adds update, uninstall, advanced configuration, and explicit
|
|
install-source controls. For its full command contract, flags, source-selection
|
|
rules, and edge cases, see [`openclaw plugins`](/cli/plugins).
|
|
|
|
Typical CLI workflow: find a package, install it from ClawHub, npm, git, or a
|
|
local path, let the managed Gateway auto-restart (or restart it manually), then
|
|
verify the plugin's runtime registrations.
|
|
|
|
## Use the Control UI
|
|
|
|
Open **Plugins** in the Control UI, or use `/settings/plugins` relative to the
|
|
configured Control UI base path. For example, a base path of `/openclaw` uses
|
|
`/openclaw/settings/plugins`. The page has two tabs:
|
|
|
|
- **Installed** shows the full local inventory grouped by category (channels,
|
|
model providers, memory, tools). Each row opens a detail view; its overflow
|
|
(`…`) menu enables or disables the plugin and, for externally installed
|
|
plugins, offers **Remove**. The tab also lists the configured
|
|
[MCP servers](/cli/mcp) with the same menu-driven enable, disable, and remove
|
|
actions, editing `mcp.servers` in the Gateway configuration.
|
|
- **Discover** is the store: featured plugins included with OpenClaw, official
|
|
external plugins, and a curated connector shelf. Connector cards either add a
|
|
hosted MCP server in one click (GitHub, Notion, Linear, Sentry,
|
|
Home Assistant) or jump into a prefilled ClawHub search. Typing in the search
|
|
box queries [ClawHub](https://clawhub.ai/plugins) inline and appends a **From
|
|
ClawHub** section with download counts and source-verification badges.
|
|
|
|
Included plugins do not need a package install. Their menu action is **Enable**
|
|
or **Disable**. Workboard, for example, is included with OpenClaw and disabled
|
|
by default, so choose **Enable** to turn it on. Bundled plugins cannot be
|
|
removed, only disabled.
|
|
|
|
Catalog and search access require `operator.read`. Install, enable, disable,
|
|
remove, and MCP server changes require `operator.admin`. A ClawHub install is
|
|
performed by the Gateway and preserves its trust, integrity, and plugin-install
|
|
policy checks.
|
|
|
|
Installing or removing plugin code requires a Gateway restart. Enablement
|
|
changes can be applied without a restart when the installed plugin and current
|
|
Gateway runtime support it; otherwise the UI tells you a restart is required.
|
|
OAuth-backed MCP connectors still need a one-time `openclaw mcp login <name>`
|
|
from the CLI after they are added.
|
|
|
|
The Control UI does not install from arbitrary npm, git, or local-path sources,
|
|
update plugins, or expose rich plugin configuration. Use the CLI workflows
|
|
below for those operations.
|
|
|
|
## List and search plugins
|
|
|
|
```bash
|
|
openclaw plugins list
|
|
openclaw plugins list --enabled
|
|
openclaw plugins list --verbose
|
|
openclaw plugins list --json
|
|
openclaw plugins search "calendar"
|
|
```
|
|
|
|
`--json` for scripts:
|
|
|
|
```bash
|
|
openclaw plugins list --json \
|
|
| jq '.plugins[] | {id, enabled, format, source, dependencyStatus}'
|
|
```
|
|
|
|
`plugins list` is a cold inventory check: what OpenClaw can discover from
|
|
config, manifests, and the persisted plugin registry. It does not prove an
|
|
already-running Gateway imported the plugin runtime. JSON output includes
|
|
registry diagnostics and each plugin's `dependencyStatus` (whether declared
|
|
`dependencies`/`optionalDependencies` resolve on disk).
|
|
|
|
`plugins search` queries ClawHub for installable plugin packages and prints
|
|
an install hint (`openclaw plugins install clawhub:<package>`) per result.
|
|
|
|
## Enable and disable plugins
|
|
|
|
```bash
|
|
openclaw plugins enable <plugin-id>
|
|
openclaw plugins disable <plugin-id>
|
|
```
|
|
|
|
Toggles a plugin's config entry without touching installed files. Some
|
|
bundled plugins (bundled model/speech providers, the bundled browser plugin)
|
|
are enabled by default; others require `enable` after install.
|
|
|
|
## Install plugins
|
|
|
|
```bash
|
|
# Search ClawHub for plugin packages.
|
|
openclaw plugins search "calendar"
|
|
|
|
# Install from ClawHub.
|
|
openclaw plugins install clawhub:<package>
|
|
openclaw plugins install clawhub:<package>@1.2.3
|
|
openclaw plugins install clawhub:<package>@beta
|
|
|
|
# Install from npm.
|
|
openclaw plugins install npm:<package>
|
|
openclaw plugins install npm:@scope/openclaw-plugin@1.2.3
|
|
openclaw plugins install npm:@openclaw/codex
|
|
|
|
# Install from a local npm-pack artifact.
|
|
openclaw plugins install npm-pack:<path.tgz>
|
|
|
|
# Install from git or a local development checkout.
|
|
openclaw plugins install git:github.com/acme/openclaw-plugin@v1.0.0
|
|
openclaw plugins install ./my-plugin
|
|
openclaw plugins install --link ./my-plugin
|
|
```
|
|
|
|
Bare package specs install from npm during the launch cutover, unless the
|
|
name matches a bundled or official plugin id, in which case OpenClaw uses
|
|
that local/official copy instead. Use `clawhub:`, `npm:`, `git:`, or
|
|
`npm-pack:` for deterministic source selection.
|
|
|
|
Use `--force` only to overwrite an existing install target from a different
|
|
source. For routine upgrades of a tracked npm, ClawHub, or hook-pack install,
|
|
use `openclaw plugins update` instead; `--force` is not supported with
|
|
`--link`.
|
|
|
|
## Restart and inspect
|
|
|
|
A running managed Gateway with config reload enabled restarts automatically
|
|
after installing, updating, or uninstalling plugin code. If the Gateway is
|
|
unmanaged or reload is disabled, restart it yourself before checking live
|
|
runtime surfaces:
|
|
|
|
```bash
|
|
openclaw gateway restart
|
|
openclaw plugins inspect <plugin-id> --runtime --json
|
|
```
|
|
|
|
`inspect --runtime` loads the plugin module and proves it registered runtime
|
|
surfaces (tools, hooks, services, Gateway methods, HTTP routes, plugin-owned
|
|
CLI commands). Plain `inspect` and `list` are cold manifest/config/registry
|
|
checks only.
|
|
|
|
## Update plugins
|
|
|
|
```bash
|
|
openclaw plugins update <plugin-id>
|
|
openclaw plugins update <npm-package-or-spec>
|
|
openclaw plugins update --all
|
|
openclaw plugins update <plugin-id> --dry-run
|
|
```
|
|
|
|
Passing a plugin id reuses its tracked install spec: stored dist-tags
|
|
(`@beta`) and exact pinned versions carry over to later `update <plugin-id>`
|
|
runs.
|
|
|
|
`openclaw plugins update --all` is the bulk maintenance path. It still
|
|
respects ordinary tracked install specs, but trusted official OpenClaw
|
|
plugin records sync to the current official catalog target instead of
|
|
staying pinned to a stale exact official package; when `update.channel` is
|
|
`beta`, that sync prefers the beta release line. Use a targeted
|
|
`update <plugin-id>` to keep an exact or tagged official spec untouched.
|
|
|
|
For npm installs, pass an explicit package spec to switch the tracked
|
|
record:
|
|
|
|
```bash
|
|
openclaw plugins update @scope/openclaw-plugin@beta
|
|
openclaw plugins update @scope/openclaw-plugin
|
|
```
|
|
|
|
The second command moves a plugin back to the registry's default release
|
|
line when it was previously pinned to an exact version or tag.
|
|
|
|
See [`openclaw plugins`](/cli/plugins#update) for the exact fallback and
|
|
pinning rules.
|
|
|
|
## Uninstall plugins
|
|
|
|
```bash
|
|
openclaw plugins uninstall <plugin-id> --dry-run
|
|
openclaw plugins uninstall <plugin-id>
|
|
openclaw plugins uninstall <plugin-id> --keep-files
|
|
```
|
|
|
|
Uninstall removes the plugin's config entry, persisted plugin index record,
|
|
allow/deny list entries, and linked `plugins.load.paths` entries when
|
|
applicable. The managed install directory is removed unless you pass
|
|
`--keep-files`. A running managed Gateway restarts automatically when the
|
|
uninstall changes plugin source.
|
|
|
|
In Nix mode (`OPENCLAW_NIX_MODE=1`), plugin install, update, uninstall,
|
|
enable, and disable are all disabled; manage those choices in the Nix source
|
|
for the install instead.
|
|
|
|
## Choose a source
|
|
|
|
| Source | Use when | Example |
|
|
| ----------- | --------------------------------------------------------------------------- | -------------------------------------------------------------- |
|
|
| ClawHub | You want OpenClaw-native discovery, scan summaries, versions, and hints | `openclaw plugins install clawhub:<package>` |
|
|
| git | You want a branch, tag, or commit from a repository | `openclaw plugins install git:github.com/<owner>/<repo>@<ref>` |
|
|
| local path | You are developing or testing a plugin on the same machine | `openclaw plugins install --link ./my-plugin` |
|
|
| marketplace | You are installing a Claude-compatible marketplace plugin | `openclaw plugins install <plugin> --marketplace <source>` |
|
|
| npm pack | You are proving a local package artifact through npm install semantics | `openclaw plugins install npm-pack:<path.tgz>` |
|
|
| npmjs.com | You already ship JavaScript packages or need npm dist-tags/private registry | `openclaw plugins install npm:@acme/openclaw-plugin` |
|
|
|
|
Managed local path installs must be plugin directories or archives. Put
|
|
standalone plugin files in `plugins.load.paths` instead of installing them
|
|
with `plugins install`.
|
|
|
|
## Publish plugins
|
|
|
|
ClawHub is the primary public discovery surface for OpenClaw plugins. Publish
|
|
there when you want users to find plugin metadata, version history, registry
|
|
scan results, and install hints before they install.
|
|
|
|
```bash
|
|
npm i -g clawhub
|
|
clawhub login
|
|
clawhub package publish your-org/your-plugin --dry-run
|
|
clawhub package publish your-org/your-plugin
|
|
clawhub package publish your-org/your-plugin@v1.0.0
|
|
```
|
|
|
|
Native npm plugins must ship a plugin manifest (`openclaw.plugin.json`) plus
|
|
`package.json` metadata before publishing:
|
|
|
|
```json package.json
|
|
{
|
|
"name": "@acme/openclaw-plugin",
|
|
"version": "1.0.0",
|
|
"type": "module",
|
|
"openclaw": {
|
|
"extensions": ["./dist/index.js"]
|
|
}
|
|
}
|
|
```
|
|
|
|
```bash
|
|
npm publish --access public
|
|
openclaw plugins install npm:@acme/openclaw-plugin
|
|
openclaw plugins install npm:@acme/openclaw-plugin@beta
|
|
openclaw plugins install npm:@acme/openclaw-plugin@1.0.0
|
|
```
|
|
|
|
Use these pages for the full publishing contract instead of treating this
|
|
page as the publishing reference:
|
|
|
|
- [ClawHub publishing](/clawhub/publishing) explains owners, scopes,
|
|
releases, review, package validation, and package transfer.
|
|
- [Building plugins](/plugins/building-plugins) shows the full plugin
|
|
package shape (including `openclaw.plugin.json`) and first publish
|
|
workflow.
|
|
- [Plugin manifest](/plugins/manifest) defines native plugin manifest
|
|
fields.
|
|
|
|
If the same package is available on both ClawHub and npm, use the explicit
|
|
`clawhub:` or `npm:` prefix to force one source.
|
|
|
|
## Related
|
|
|
|
- [Plugins](/tools/plugin) - install, configure, restart, and troubleshoot
|
|
- [`openclaw plugins`](/cli/plugins) - full CLI reference
|
|
- [Community plugins](/plugins/community) - public discovery and ClawHub publishing
|
|
- [ClawHub](/clawhub/cli) - registry CLI operations
|
|
- [Building plugins](/plugins/building-plugins) - create a plugin package
|
|
- [Plugin manifest](/plugins/manifest) - manifest and package metadata
|