CLI Reference • TutorialHeader.readTime
Approvals
CLI reference for `openclaw approvals` (exec approvals for Gateway or node hosts)
Manages exec approvals for the local host, Gateway host, or node host.
By default, commands target the local approvals file on disk. Use --gateway to target the Gateway, or --node to target a specific node.
Related:
- Exec approvals：Exec Approvals
- Nodes：Nodes
Tutorial.step
Common commands
Bash
openclaw approvals get openclaw approvals get --node <id|name|ip> openclaw approvals get --gateway
Tutorial.step
Replace approvals from a file
Bash
openclaw approvals set --file ./exec-approvals.json openclaw approvals set --node <id|name|ip> --file ./exec-approvals.json openclaw approvals set --gateway --file ./exec-approvals.json
Tutorial.step
Allowlist helper
Bash
openclaw approvals allowlist add "~/Projects/**/bin/rg" openclaw approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime" openclaw approvals allowlist add --agent "*" "/usr/bin/uname" openclaw approvals allowlist remove "~/Projects/**/bin/rg"
Tutorial.step
Notes
- --node uses the same resolver as openclaw nodes (id, name, ip, or id prefix).
- --agent defaults to "*" and applies to all agents.
- Node hosts must advertise system.execApprovals.get/set (macOS app or headless node host).
- The approvals file is stored at ~/.openclaw/exec-approvals.json on each host.