Daemon

text

Copy

openclaw daemon

Legacy alias for Gateway service management commands.

maps to the same service control surface as service commands.

Usage

bash
Copy
openclaw daemon status
openclaw daemon install
openclaw daemon start
openclaw daemon stop
openclaw daemon restart
openclaw daemon uninstall

Subcommands

• text

  Copy

  status
  : show service install state and probe Gateway health
• text

  Copy

  install
  : install service (
  text

  Copy

  launchd
  /
  text

  Copy

  systemd
  /
  text

  Copy

  schtasks
  )
• text

  Copy

  uninstall
  : remove service
• text

  Copy

  start
  : start service
• text

  Copy

  stop
  : stop service
• text

  Copy

  restart
  : restart service

Common options

• text

  Copy

  status
  :
  text

  Copy

  --url
  ,
  text

  Copy

  --token
  ,
  text

  Copy

  --password
  ,
  text

  Copy

  --timeout
  ,
  text

  Copy

  --no-probe
  ,
  text

  Copy

  --require-rpc
  ,
  text

  Copy

  --deep
  ,
  text

  Copy

  --json
• text

  Copy

  install
  :
  text

  Copy

  --port
  ,
  text

  Copy

  --runtime <node|bun>
  ,
  text

  Copy

  --token
  ,
  text

  Copy

  --force
  ,
  text

  Copy

  --json
• lifecycle (
  text

  Copy

  uninstall|start|stop|restart
  ):
  text

  Copy

  --json

Notes:

• text

  Copy

  status
  resolves configured auth SecretRefs for probe auth when possible.
• If a required auth SecretRef is unresolved in this command path,
  text

  Copy

  daemon status --json
  reports
  text

  Copy

  rpc.authWarning
  when probe connectivity/auth fails; pass
  text

  Copy

  --token
  /
  text

  Copy

  --password
  explicitly or resolve the secret source first.
• If the probe succeeds, unresolved auth-ref warnings are suppressed to avoid false positives.
• text

  Copy

  status --deep
  adds a best-effort system-level service scan. When it finds other gateway-like services, human output prints cleanup hints and warns that one gateway per machine is still the normal recommendation.
• On Linux systemd installs,
  text

  Copy

  status
  token-drift checks include both
  text

  Copy

  Environment=
  and
  text

  Copy

  EnvironmentFile=
  unit sources.
• Drift checks resolve
  text

  Copy

  gateway.auth.token
  SecretRefs using merged runtime env (service command env first, then process env fallback).
• If token auth is not effectively active (explicit
  text

  Copy

  gateway.auth.mode
  of
  text

  Copy

  password
  /
  text

  Copy

  none
  /
  text

  Copy

  trusted-proxy
  , or mode unset where password can win and no token candidate can win), token-drift checks skip config token resolution.
• When token auth requires a token and
  text

  Copy

  gateway.auth.token
  is SecretRef-managed,
  text

  Copy

  install
  validates that the SecretRef is resolvable but does not persist the resolved token into service environment metadata.
• If token auth requires a token and the configured token SecretRef is unresolved, install fails closed.
• If both
  text

  Copy

  gateway.auth.token
  and
  text

  Copy

  gateway.auth.password
  are configured and
  text

  Copy

  gateway.auth.mode
  is unset, install is blocked until mode is set explicitly.
• On macOS,
  text

  Copy

  install
  keeps LaunchAgent plists owner-only and loads managed service environment values through an owner-only file and wrapper instead of serializing API keys or auth-profile env refs into
  text

  Copy

  EnvironmentVariables
  .
• If you intentionally run multiple gateways on one host, isolate ports, config/state, and workspaces; see /gateway#multiple-gateways-same-host.

Prefer

Use

for current docs and examples.

Related

• CLI reference
• Gateway runbook