Proxy

text

Copy

openclaw proxy

Validate operator-managed proxy routing, or run the local explicit debug proxy and inspect captured traffic.

Use

to preflight an operator-managed forward proxy before enabling OpenClaw proxy routing. The other commands are debugging tools for transport-level investigation: they can start a local proxy, run a child command with capture enabled, list capture sessions, query common traffic patterns, read captured blobs, and purge local capture data.

Commands

bash
Copy
openclaw proxy start [--host <host>] [--port <port>]
openclaw proxy run [--host <host>] [--port <port>] -- <cmd...>
openclaw proxy validate [--json] [--proxy-url <url>] [--allowed-url <url>] [--denied-url <url>] [--timeout-ms <ms>]
openclaw proxy coverage
openclaw proxy sessions [--limit <count>]
openclaw proxy query --preset <name> [--session <id>]
openclaw proxy blob --id <blobId>
openclaw proxy purge

Validate

checks the effective operator-managed proxy URL from , config, or . It reports a config problem when no proxy is enabled and configured; use for a one-off preflight before changing config. By default it verifies that a public destination succeeds through the proxy and that the proxy cannot reach a temporary loopback canary. Custom denied destinations are fail-closed: HTTP responses and ambiguous transport failures both fail unless you can verify a deployment-specific denial signal separately.

Options:

• text

  Copy

  --json
  : print machine-readable JSON.
• text

  Copy

  --proxy-url <url>
  : validate this proxy URL instead of config or env.
• text

  Copy

  --allowed-url <url>
  : add a destination expected to succeed through the proxy. Repeat to check multiple destinations.
• text

  Copy

  --denied-url <url>
  : add a destination expected to be blocked by the proxy. Repeat to check multiple destinations.
• text

  Copy

  --timeout-ms <ms>
  : per-request timeout in milliseconds.

See Network Proxy for deployment guidance and denial semantics.

Query presets

accepts:

• text

  Copy

  double-sends
• text

  Copy

  retry-storms
• text

  Copy

  cache-busting
• text

  Copy

  ws-duplicate-frames
• text

  Copy

  missing-ack
• text

  Copy

  error-bursts

Notes

• text

  Copy

  start
  defaults to
  text

  Copy

  127.0.0.1
  unless
  text

  Copy

  --host
  is set.
• text

  Copy

  run
  starts a local debug proxy and then runs the command after
  text

  Copy

  --
  .
• text

  Copy

  validate
  exits with code 1 when proxy config or destination checks fail.
• Captures are local debugging data; use
  text

  Copy

  openclaw proxy purge
  when finished.

Related

• CLI reference
• Network Proxy
• Trusted proxy auth