OmniPermission Plugin for OpenClaw
OmniPermission is a security-first plugin that places a "Human-in-the-Loop" gatekeeper between the AI and high-risk actions. It pauses sensitive plugin actions (like Slack, Telegram, or GitHub) and sends a Push Notification to your mobile device via OmniPersona for approval.
---
🚀 Installation & Setup
1. Install & Enable
Run the following commands to download and activate the plugin within your OpenClaw environment:
# Install the plugin
openclaw plugins install omnipermission
# Enable the plugin
openclaw plugins enable omnipermission
# Authorize the plugin to use lifecycle hooks (Necessary)
openclaw config set plugins.allow "[\"omnipermission\"]"2. Restart the Gateway
Crucial: For the hooks and security authorization to take effect, you must restart the OpenClaw gateway:
openclaw gateway restart3. Connect to OmniPersona
The plugin connects to your mobile app using a secret key.
1. Download the app:
2. Copy your Key: Find your unique secret key on the Home Page of the OmniPersona mobile app. 3. Link it: Run the following command and paste your key when prompted:
openclaw omnipermission set-key---
🛠️ Security Configuration
By default, all tools work without permission. You choose exactly what to control.
Intercept Tools
Specify which skills/plugins you want to gatekeep. If a skill is on this list, the agent cannot use it without your mobile consent.
openclaw omnipermission blacklist-toolsExample input: slack, telegram, github, message
View Configuration
Check your saved key, your active blacklist, and the current backend environment.
openclaw omnipermission statusReset Protection
Wipe the blacklist completely to allow all plugins to run freely.
openclaw omnipermission clear-blacklist---
🧪 Environment Management
If you are a developer testing new features or using a staging environment, you can toggle the backend target. This setting is stored in the plugin's local state.
Enable Dev Mode
Point the plugin to the development backend (backend.dev.ecrop.de):
openclaw omnipermission enable-dev-modeDisable Dev Mode (Default)
Switch back to the production backend:
openclaw omnipermission disable-dev-mode---
🛡️ How it Works
1. Interception: The plugin monitors the before_tool_call hook for any skill in your blacklist. 2. Mobile Alert: The agent's Intent and Parameters are sent to your phone. 3. Approval: The agent remains paused until you tap Approve in the OmniPersona app.
🛠️ How to Develop
OmniPermission does not support every tool, but provides the scaffolding required for adding new tools. In case you want to intercept a specific operation, follow our How to Extend guide.
Additionally, you can find the list of supported tools here.
