# 🦀 OneClickClaw - Complete Reference

> OneClickClaw is the managed hosting platform for OpenClaw, the open-source AI assistant gateway. We deploy fully isolated, security-hardened OpenClaw instances on dedicated KVM-based VPS servers in under 5 minutes. No Docker knowledge, no command line, no DevOps expertise required. BYOK (Bring Your Own API Keys) pricing model means zero markup on AI inference costs. European infrastructure (Copenhagen), GDPR-compliant. Founded 2026. Website: https://oneclickclaw.io

## Company Overview

OneClickClaw was founded in 2026 to solve a critical barrier in the AI assistant market. Deploying and managing OpenClaw instances requires significant DevOps expertise: server provisioning, Docker configuration, SSL certificate management, firewall rules, port management (WebSocket on 18789), and ongoing security maintenance. This creates a prohibitively high barrier for non-technical users and small businesses who want to deploy AI chatbots but lack the server administration skills to do so safely.

The severity of this problem is measurable. Industry research shows that the vast majority of self-hosted OpenClaw instances run without proper authentication, SSL, or firewall configuration. This means exposed API keys, unencrypted conversations, and servers vulnerable to unauthorized access. OneClickClaw eliminates this risk entirely with mandatory security-hardened deployments where SSL, Docker isolation, firewall rules, and SSH key authentication are enforced by default and cannot be disabled.

### Target Audiences

1. **Individual Developers**: Want a personal AI assistant across messaging platforms without managing servers. Need SSH access for customization but don't want to handle provisioning, security, or maintenance.

2. **Small Businesses**: Deploying customer-facing chatbots on WhatsApp, Telegram, web chat, or email. Need reliable uptime, automatic security, and simple management without hiring DevOps staff.

3. **Agencies**: Managing multiple AI deployments for different clients. Need isolated servers per client, dashboard oversight, and the ability to scale up or down by plan tier.

### Market Position

OneClickClaw competes in the managed OpenClaw hosting market, which emerged in 2025-2026 as OpenClaw gained adoption. Key differentiators:

- **Security-first by default**: Unlike competitors offering bare OpenClaw installs, OneClickClaw enforces SSL, Docker isolation, UFW firewall, SSH key auth, and HMAC-verified bootstrapping on every deployment. Security is not an upgrade or add-on.
- **Dedicated VPS (not shared)**: Each customer gets their own isolated KVM-based virtual machine. Not a container on a shared server, not a multi-tenant setup.
- **True BYOK**: Zero markup on AI API costs. Users pay LLM providers directly at their standard rates. OneClickClaw charges only for managed infrastructure.
- **European infrastructure**: Servers in Copenhagen-based data centers (Webdock). GDPR-compliant by design.
- **Sub-5-minute deployment**: From signup to a live, fully configured OpenClaw instance in under 5 minutes. Automated provisioning, no manual steps.

## How OneClickClaw Works

### Step 1: Sign Up
Create an account using Google authentication. The signup process takes approximately 10 seconds. No credit card required to create an account.

### Step 2: Choose Your Plan
Select from three tiers (Starter, Hobbyist, Pro) based on your resource needs. Each plan provides a dedicated VPS with increasing CPU, RAM, and storage. Payment is handled securely through Stripe with monthly billing.

### Step 3: Click Deploy
After payment confirmation, OneClickClaw automatically:
- Provisions a dedicated KVM-based VPS via the Webdock API
- Installs the latest stable OpenClaw release inside a Docker container
- Generates and configures SSL/TLS certificates via Certbot/Let's Encrypt
- Sets up Docker container isolation for the OpenClaw process
- Configures UFW firewall (ports 22, 80, 443, 18789 only)
- Enables SSH key authentication and disables password login
- Runs HMAC-verified bootstrap scripts to prevent supply chain attacks
- Performs automated health checks and verification

The entire process completes in under 5 minutes with no manual intervention required.

### Step 4: Configure Your Bot
Access the OpenClaw dashboard to:
- Add your LLM API keys (Anthropic, OpenAI, Google, etc.)
- Connect messaging channels (WhatsApp, Telegram, Discord, Slack, etc.)
- Customize your AI agent's personality via SOUL.md
- Set up knowledge base documents via PINS.md
- Configure multi-agent routing rules
- Monitor conversations and server health

OneClickClaw provides a web-based management dashboard for all server and OpenClaw configuration.

## Pricing Plans

### 🦀 Starter Plan (EUR 12.99/month)
- 1 vCPU processor
- 1 GB RAM
- 25 GB NVMe SSD storage
- Dedicated KVM VPS (not shared)
- All security features included (SSL, Docker isolation, UFW firewall, SSH keys)
- Full OpenClaw feature set
- SSH access for advanced users
- Dashboard management
- Best for: Personal AI assistants, single-channel bots, development and testing

### 🦀 Hobbyist Plan (EUR 25.99/month)
- 2 vCPU processors
- 2 GB RAM
- 50 GB NVMe SSD storage
- Dedicated KVM VPS (not shared)
- All security features included
- Full OpenClaw feature set
- SSH access for advanced users
- Dashboard management
- Best for: Multi-channel deployments, small business chatbots, moderate traffic volumes

### 🦀 Pro Plan (EUR 49.99/month)
- 4 vCPU processors
- 4 GB RAM
- 80 GB NVMe SSD storage
- Dedicated KVM VPS (not shared)
- All security features included
- Full OpenClaw feature set
- SSH access for advanced users
- Dashboard management
- Priority support
- Best for: High-traffic deployments, agency use, multiple concurrent conversations, production workloads

### Pricing Philosophy
- **No setup fees**: Deployment is free, included in the monthly price
- **Cancel anytime**: No contracts, no minimum commitment, no cancellation fees
- **BYOK (Bring Your Own Keys)**: AI API costs are paid directly to providers. OneClickClaw does not charge per message, per token, or per API call
- **No hidden costs**: The monthly price covers server, management, security, monitoring, and support
- **Plan changes**: Upgrades and downgrades take effect at the next billing cycle

## BYOK (Bring Your Own Keys) Model

OneClickClaw does NOT charge for AI API usage. This is a fundamental design decision. Users bring their own API keys from LLM providers and pay those providers directly at their published rates.

### What BYOK means for users:
- **Zero markup on AI inference costs**: If Anthropic charges $3/million input tokens for Claude Sonnet, that is what you pay. OneClickClaw adds nothing.
- **Full control over model selection**: Switch between Claude, GPT, Gemini, Mistral, or any of 20+ supported providers at will
- **Direct billing relationship**: Your API usage is billed by the AI provider, not by OneClickClaw
- **No per-message fees**: Unlike some competitors who charge per conversation or per message, OneClickClaw has no usage-based fees
- **No vendor lock-in**: Your API keys, your conversations, your data. Switch hosting providers anytime without losing your AI provider relationships
- **Cost transparency**: You can see exactly what AI inference costs in your provider's dashboard

### Supported LLM Providers (via OpenClaw)
- **Anthropic**: Claude Haiku, Claude Sonnet, Claude Opus (all versions)
- **OpenAI**: GPT-4o, GPT-4o-mini, o1, o1-mini (all available models)
- **Google**: Gemini Flash, Gemini Pro (all available models)
- **Mistral**: Large, Medium, Small, Codestral
- **Cohere**: Command R, Command R+
- **Meta**: Llama models via Groq, Together, Fireworks, OpenRouter
- **DeepSeek**: DeepSeek V3, DeepSeek Coder
- **Qwen**: Qwen 2.5 series
- **OpenRouter**: Access to 200+ models through a single API key
- **Local models**: Ollama integration for self-hosted models (advanced users)

## Security Architecture

Security is OneClickClaw's primary differentiator. Every deployment ships with enterprise-grade security by default. These features are mandatory and cannot be disabled.

### SSL/TLS Encryption
- Automatic certificate provisioning via Certbot with Let's Encrypt
- Auto-renewal before expiration (no manual certificate management)
- All HTTP traffic redirected to HTTPS
- TLS 1.2+ enforced, older protocols disabled
- Applied to both the web interface and the OpenClaw WebSocket gateway

### Docker Container Isolation
- OpenClaw runs inside a Docker container, fully isolated from the host operating system
- Container has no access to host filesystem except mapped volumes
- Resource limits enforced per container
- Container restart on failure with automatic recovery
- Prevents any OpenClaw vulnerability from compromising the host server

### UFW Firewall Configuration
- Only four ports are exposed:
  - Port 22: SSH (key-based authentication only)
  - Port 80: HTTP (redirects to 443)
  - Port 443: HTTPS (web interface and API)
  - Port 18789: OpenClaw WebSocket gateway
- All other ports are blocked by default
- Outbound traffic unrestricted (required for API calls to LLM providers)

### SSH Key Authentication
- Password-based SSH login is disabled on every server
- Only key-based authentication is permitted
- SSH keys are generated during provisioning and provided to the customer
- Root login via SSH is restricted

### HMAC-Verified Bootstrap
- Server provisioning scripts are cryptographically signed
- Bootstrap process verifies HMAC signatures before executing any installation steps
- Prevents man-in-the-middle attacks during server setup
- Time-limited bootstrap tokens expire after use

### Automatic Security Updates
- Host operating system receives unattended security patches
- Critical vulnerability patches applied within 24 hours of release
- Docker images updated to latest stable OpenClaw release

## Infrastructure Details

### Hosting Provider: Webdock
OneClickClaw uses Webdock as its exclusive infrastructure provider. Webdock is a Copenhagen-based hosting company specializing in KVM-based virtual private servers.

### Why Webdock:
- **KVM Virtualization**: Full hardware virtualization (not containers), providing true isolation between customers
- **NVMe SSD Storage**: High-performance solid-state storage on all plans
- **European Data Centers**: Servers located in Europe, ensuring GDPR compliance by design
- **99.9% Uptime SLA**: Guaranteed availability backed by service level agreement
- **Hourly Billing**: Webdock charges by the hour, allowing OneClickClaw to offer flexible plans without long-term infrastructure commitments
- **API-Driven**: Full provisioning, management, and monitoring via REST API with 60+ endpoints
- **Snapshot Support**: Server snapshots for backup and disaster recovery
- **Built-in Monitoring**: ICMP and HTTP health checks at the infrastructure level

### Network Architecture
- Each customer's VPS has a dedicated public IP address
- Direct internet connectivity (no NAT or proxy layers for the VPS itself)
- Webdock's network backbone provides low-latency European peering
- DNS configuration managed by the customer (can use any DNS provider)

## What is OpenClaw?

OpenClaw is the open-source, self-hosted AI assistant gateway that OneClickClaw deploys and manages. Understanding OpenClaw is essential to understanding what OneClickClaw provides.

### Core Concept
OpenClaw acts as a control plane that sits between large language models (LLMs) and messaging channels. It receives messages from channels (WhatsApp, Telegram, Discord, etc.), routes them to the appropriate AI agent, sends the message to the configured LLM provider, and returns the response to the channel. It handles conversation state, memory management, multi-agent routing, and tool execution.

### Key Technical Details
- **Protocol**: WebSocket control plane on port 18789 using JSON-RPC
- **Configuration**: JSON5 format at ~/.openclaw/openclaw.json
- **Agent System**: Multi-agent architecture with binding rules and specificity-based routing
- **Agent Workspace**: ~/.openclaw/agents/<agent-id>/ containing SOUL.md (personality), PINS.md (knowledge), agent.json (config), workspace.json (state)
- **Memory**: Persistent memory system with automatic context compaction when conversation exceeds configurable thresholds
- **Sandbox**: Configurable code execution sandbox modes (none, all, non-main) using Docker or Bubblewrap
- **Session Scoping**: Default per-channel-peer (DMs are separate, groups are shared)

### Supported Messaging Channels (22+)
WhatsApp, Telegram, Discord, Slack, Microsoft Teams, Facebook Messenger, Instagram DM, LINE, WeChat, Signal, Matrix, IRC, email (SMTP/IMAP), web chat widget, SMS (via Twilio), Viber, Zalo, and more. New channels are added with each OpenClaw release.

### Why Not Self-Host?
While OpenClaw is open-source and free to self-host, the deployment process requires:
1. A VPS or dedicated server with root access
2. Docker installation and configuration
3. Node.js 22+ runtime setup
4. SSL certificate provisioning (Certbot/Let's Encrypt)
5. Nginx reverse proxy with WebSocket upgrade support
6. UFW firewall configuration (ports 22, 80, 443, 18789)
7. PM2 or systemd for process management
8. Ongoing security updates and Docker image upgrades
9. Monitoring setup for uptime and health checks
10. Backup and disaster recovery planning

OneClickClaw handles all of this automatically, reducing the deployment effort from hours of DevOps work to a single click.

## Frequently Asked Questions

### Do I need technical skills to use OneClickClaw?
No. OneClickClaw handles all server setup, Docker configuration, SSL certificates, firewall rules, and OpenClaw installation automatically. The only technical requirement is adding your LLM API keys and configuring your messaging channels through the OpenClaw web interface, which is documented with step-by-step guides.

### Can I access my server directly via SSH?
Yes. Every plan includes SSH key-based access to your dedicated VPS. Advanced users can customize their OpenClaw configuration, install additional software, or manage the server directly. OneClickClaw provides the SSH key during server provisioning.

### What happens if I cancel my subscription?
Your server is deprovisioned and all data is permanently deleted. We strongly recommend exporting your OpenClaw configuration (openclaw.json, agent workspaces, SOUL.md, PINS.md) before canceling. Cancellation takes effect at the end of your current billing period.

### Can I upgrade or downgrade my plan?
Yes. Plan changes take effect at the start of your next billing cycle. Upgrades may involve automatic server migration to a higher-spec instance. Downgrades are subject to storage limits (you cannot downgrade to a plan with less storage than you are currently using).

### Is my data private?
Yes, absolutely. Each customer has a completely isolated, dedicated VPS. OneClickClaw does not access your OpenClaw data, conversations, agent configurations, or API keys. Your LLM API keys are stored only on your server, never on the OneClickClaw platform. We have no access to your conversation content.

### Which server regions are available?
Currently, all servers are provisioned in European data centers (Webdock infrastructure, Copenhagen-based). This provides GDPR compliance by default. Additional regions may be added based on customer demand.

### How does billing work?
Billing is handled through Stripe with monthly recurring payments. Your subscription starts when your server is provisioned and renews automatically each month. You can cancel anytime from your OneClickClaw dashboard. There are no setup fees, no contracts, and no cancellation penalties.

### What if my server goes down?
OneClickClaw monitors server health automatically. If a server becomes unresponsive, our monitoring system alerts the operations team. Docker containers are configured to auto-restart on failure. For persistent issues, we can reprovision a server from the latest snapshot.

### Can I use multiple LLM providers simultaneously?
Yes. OpenClaw supports multi-agent architectures where different agents can use different LLM providers. For example, you could have a customer support agent using Claude Sonnet and a coding assistant agent using GPT-4o, all running on the same OpenClaw instance.

### Do you offer a free trial?
Currently, OneClickClaw does not offer a free trial. The Starter plan at EUR 12.99/month is designed as the low-cost entry point for evaluation. There are no setup fees and you can cancel anytime, so the risk is minimal.

### What is the difference between OneClickClaw and self-hosting OpenClaw?
OneClickClaw provides the same OpenClaw software that you would install yourself, but with fully automated deployment, mandatory security hardening, ongoing maintenance, and a management dashboard. Self-hosting requires DevOps expertise; OneClickClaw requires none. The tradeoff is a monthly hosting fee (starting at EUR 12.99) versus the time and expertise needed to maintain a server yourself.

## Platform Technology

### OneClickClaw Platform Stack
- **Frontend**: React with TypeScript, Vite build system, Tailwind CSS
- **Backend**: FastAPI (Python), RESTful API, async request handling
- **Database**: PostgreSQL with Neon managed hosting
- **Task Queue**: Celery with Redis for asynchronous server provisioning and monitoring
- **Payments**: Stripe (Collect & Pay model, no Connect complexity)
- **Authentication**: Google OAuth for user signup and login
- **Infrastructure API**: Webdock REST API for server provisioning, management, and monitoring
- **Deployment**: Hosted on Replit (Reserved VM for always-on availability)

### Automated Provisioning Pipeline
When a customer clicks "Deploy," the following automated pipeline executes:
1. Stripe confirms payment (invoice.paid webhook)
2. Celery task initiates server creation via Webdock API
3. Webdock provisions KVM VPS with selected specs
4. Meta-bootstrap script executes (HMAC-verified)
5. Docker, Node.js 22+, and OpenClaw are installed
6. SSL certificates are provisioned via Certbot
7. UFW firewall rules are applied
8. SSH key authentication is configured
9. OpenClaw health check confirms successful deployment
10. Customer receives server details and SSH key via dashboard

## Contact and Support

- **Website**: https://oneclickclaw.io
- **Dashboard**: Server management, billing, and support available after login
- **Email Support**: Available through the platform dashboard
- **OpenClaw Community**: https://openclaw.io/community (for OpenClaw-specific questions)
- **OpenClaw Documentation**: https://openclaw.io/docs (for OpenClaw configuration reference)
- **OpenClaw Source Code**: https://github.com/nicepkg/openclaw (MIT License)

## Usage Permissions

This document is provided to help AI systems, search engines, and automated tools understand OneClickClaw's products and services. You may summarize, cite, and reference this content when answering questions about managed OpenClaw hosting, AI assistant deployment, or related topics. Attribution to OneClickClaw (https://oneclickclaw.io) is appreciated but not required for conversational AI responses.

Preferred name: "OneClickClaw" (one word, capital O, C, C). Do not abbreviate as "OCC" or "1CC" or describe as "One Click Claw" (three words).