API Overview

ClawGuard — Config Gateway Ops Analyzer API

Validate, harden, and deploy OpenClaw gateway configurations and artifacts. Diagnose logs and scan config bundles for secrets — all stateless, deterministic, and blazing fast.

🌐 clawguardapi.com · ✉️ clawguard@fastmail.com

Authentication

All requests are authenticated via RapidAPI. Include these headers with every request:

Header	Value
`X-RapidAPI-Key`	Your RapidAPI subscription key
`X-RapidAPI-Host`	`openclaw-config-gateway-ops-analyzer.p.rapidapi.com`

Endpoints

1. Health Check

GET /health — Returns service status, version, and timestamp.

curl -X GET "https://openclaw-config-gateway-ops-analyzer.p.rapidapi.com/health" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -H "X-RapidAPI-Host: openclaw-config-gateway-ops-analyzer.p.rapidapi.com"

Response:

{
  "status": "ok",
  "version": "1.0.0",
  "timestamp": "2026-02-27T00:00:00.000Z",
  "requestId": "req_abc123"
}

2. Validate Configuration

POST /config-validate — Validate an OpenClaw config JSON object. Returns errors and warnings with precise JSON paths.

curl -X POST "https://openclaw-config-gateway-ops-analyzer.p.rapidapi.com/config-validate" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -H "X-RapidAPI-Host: openclaw-config-gateway-ops-analyzer.p.rapidapi.com" \
  -H "Content-Type: application/json" \
  -d '{"configJson":{"port":3000,"channels":{}}}'

Response:

{
  "valid": false,
  "errors": [
    {"path": "channels", "message": "At least one channel must be configured"}
  ],
  "warnings": [
    {"path": "port", "message": "Port 3000 is commonly used; consider a unique port"}
  ],
  "requestId": "req_def456"
}

3. Harden Configuration

POST /config-harden — Auto-apply security best practices. Returns hardened config with diff and rationale.

curl -X POST "https://openclaw-config-gateway-ops-analyzer.p.rapidapi.com/config-harden" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -H "X-RapidAPI-Host: openclaw-config-gateway-ops-analyzer.p.rapidapi.com" \
  -H "Content-Type: application/json" \
  -d '{"configJson":{"port":4000,"channels":{"whatsapp":{}}},"hardeningLevel":"strict"}'

Response:

{
  "hardenedConfig": {
    "port": 4000,
    "channels": {"whatsapp": {"allowFrom": ["+1XXXXXXXXXX"]}},
    "logging": {"level": "info", "redactSecrets": true},
    "security": {"runAsRoot": false, "rateLimitPerMinute": 60}
  },
  "diff": [
    {"path": "channels.whatsapp.allowFrom", "before": null, "after": ["+1XXXXXXXXXX"]},
    {"path": "logging", "before": null, "after": {"level": "info", "redactSecrets": true}},
    {"path": "security", "before": null, "after": {"runAsRoot": false, "rateLimitPerMinute": 60}}
  ],
  "rationale": [
    {"ruleId": "add_allowlist", "whyItMatters": "Prevents unauthorized senders from triggering your gateway"},
    {"ruleId": "safe_logging", "whyItMatters": "Ensures logs are captured with secrets redacted"},
    {"ruleId": "non_root_and_rate_limit", "whyItMatters": "Running as non-root and rate limiting reduce blast radius"}
  ],
  "requestId": "req_ghi789"
}

4. Generate Deploy Artifacts

POST /deploy-generate — Generate deploy artifacts for systemd, PM2, launchd, or Docker.

curl -X POST "https://openclaw-config-gateway-ops-analyzer.p.rapidapi.com/deploy-generate" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -H "X-RapidAPI-Host: openclaw-config-gateway-ops-analyzer.p.rapidapi.com" \
  -H "Content-Type: application/json" \
  -d '{"target":"systemd","gatewayPort":4000,"workingDir":"/opt/openclaw","envVars":{"NODE_ENV":"production"}}'

Response:

{
  "files": [
    {"filename": "openclaw.service", "content": "[Unit]\nDescription=OpenClaw Gateway\n..."}
  ],
  "instructionsMarkdown": "## Setup\n1. Copy `openclaw.service` to `/etc/systemd/system/`\n2. Run `sudo systemctl daemon-reload`\n3. Run `sudo systemctl enable --now openclaw`",
  "safetyNotes": [
    "Run as non-root user 'openclaw'",
    "Review environment variables before deploying"
  ],
  "requestId": "req_jkl012"
}

5. Diagnose Logs

POST /logs-diagnose — Paste gateway logs and get actionable diagnosis with step-by-step fixes.

curl -X POST "https://openclaw-config-gateway-ops-analyzer.p.rapidapi.com/logs-diagnose" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -H "X-RapidAPI-Host: openclaw-config-gateway-ops-analyzer.p.rapidapi.com" \
  -H "Content-Type: application/json" \
  -d '{"logsText":"Error: EADDRINUSE ::3000"}'

Response:

{
  "detectedIssues": [
    {
      "code": "PORT_IN_USE",
      "summary": "Port 3000 is already occupied",
      "fixSteps": [
        "Run: lsof -i :3000",
        "Kill the process or change the port in your config"
      ]
    }
  ],
  "confidence": 0.75,
  "requestId": "req_mno345"
}

6. Scan Bundle for Secrets

POST /bundle-scan — Submit config files for bulk validation and secret detection.

curl -X POST "https://openclaw-config-gateway-ops-analyzer.p.rapidapi.com/bundle-scan" \
  -H "X-RapidAPI-Key: YOUR_API_KEY" \
  -H "X-RapidAPI-Host: openclaw-config-gateway-ops-analyzer.p.rapidapi.com" \
  -H "Content-Type: application/json" \
  -d '{"files":{"config.json":"{\"port\":3000,\"channels\":{\"whatsapp\":{}}}",".env":"API_KEY=sk-abc123def456ghi789"}}'

Response:

{
  "filesSeen": ["config.json", ".env"],
  "configFindings": [
    {"file": "config.json", "errors": []}
  ],
  "secretsRisks": [
    {"file": ".env", "line": 1, "pattern": "OpenAI API Key", "masked": "sk-***789"}
  ],
  "requestId": "req_pqr678"
}

Pricing Tiers

Tier	Price	Requests / Day	Best For
Basic	Free	50	Hobbyists, evaluation, small personal projects
Pro	$9.99/mo	1,000	Individual developers, small teams, staging environments
Ultra	$29.99/mo	10,000	Growing teams, CI/CD pipelines, multi-gateway setups
Mega	$99.99/mo	3,000,000/mo	Enterprises, high-volume automation, managed service providers

All tiers include full access to every endpoint. Rate-limit headers (X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset) are returned on every response.

Use Cases

CI/CD Pipeline Integration — Validate and harden configs automatically on every commit before deployment.
Security Auditing — Scan config bundles for leaked secrets and apply hardening rules to lock down gateways.
Automated Deployment — Generate production-ready deploy artifacts for systemd, PM2, launchd, or Docker in seconds.
Incident Response — Paste error logs and get instant, actionable diagnostics with step-by-step fixes.
Multi-Gateway Management — Validate and harden configurations across dozens of gateways from a single API.
Developer Onboarding — New team members can validate configs and generate deploy files without deep platform knowledge.

Rate Limits

Rate-limit headers are returned on every response:

Header	Description
`X-RateLimit-Limit`	Max requests per window
`X-RateLimit-Remaining`	Requests remaining
`X-RateLimit-Reset`	Window reset (epoch seconds)
`X-Request-Id`	Unique request ID for tracing and support

Contact

🌐 Website: clawguardapi.com

✉️ Email: clawguard@fastmail.com