01
GitHub events reach your local automation
Point repositories at one public clawproxy route while OpenClaw runs privately on a lab box, workstation, or Coolify service.
Built for private OpenClaw nodes
clawproxy is the webhook relay for OpenClaw workflows: accept provider events on the public internet, queue them safely, and deliver them to a private OpenClaw node over an outbound WebSocket or pull connection.
openclaw route
/api/ingress/<user-id>/github-to-openclaw
queued
delivery path
GitHub, Stripe, and Slack webhooks get a stable public endpoint while OpenClaw keeps processing private behind NAT.
01
Ingress accepted
02
Queued safely
03
OpenClaw acked
01
Point repositories at one public clawproxy route while OpenClaw runs privately on a lab box, workstation, or Coolify service.
02
clawproxy stores every accepted webhook until your OpenClaw node reconnects, pulls the event, and acknowledges it.
03
The OpenClaw node initiates an outbound WebSocket or pull connection, so you do not expose SSH, dashboards, or agent ports.
Start with one dashboard-generated route URL that includes your user id, verify delivery, then add more provider workflows without changing how your OpenClaw node reaches the public internet.
OpenClaw env
OPENCLAW_WEBHOOK_RELAY_URL=wss://clawproxy.io/api/nodes/ws
OPENCLAW_WEBHOOK_NODE_TOKEN=cpn_your_node_token
OPENCLAW_WEBHOOK_ROUTE_URL=https://clawproxy.io/api/ingress/<user-id>/github-to-openclawSystem overview
Webhook events travel from the public internet to your private node without exposing a single port.
Provider
Public internet
clawproxy
Public cloud
OpenClaw node
Your private network
Your node always initiates the connection outbound. No open ports or firewall rules required.
Keep provider URLs stable, keep OpenClaw private, and let clawproxy handle the queue between them.
clawproxy.io/openclaw