Commands
Every clawops command, grouped by what you reach for it.
clawops <command> --help prints the flags for any of these.
| Flag | Effect |
|---|
--stack | Target a named stack (default comes from config) |
--provider | Override provider: aws, gcp, azure, local |
--json | Emit JSON to stdout, for scripting |
--quiet | Suppress non-error output |
--profile | Auth profile from ~/.clawops/config.json |
--dry-run | Preview without applying, on mutating commands |
--yes | Skip interactive confirmations (CI) |
| Command | Does |
|---|
init | Choose a provider, name the state backend after your account (or pass --state to name it yourself), generate an SSH key |
setup | Interactive wizard: configure and deploy in one pass |
doctor | Check the local machine; with --stack, the deployment too; with --provider, one cloud's credentials and account setup whether or not a stack exists; with --instance-type, account checks ask about that size. Exits 1 on any failure |
| Command | Does |
|---|
up | Provision and deploy a stack (--gateway-port for a non-default port) |
plan | Generate a deploy plan without applying it (--ssh-cidr, --gateway-cidr, --publish-gateway say who may connect; --instance-type picks the machine size) |
apply | Apply a plan produced by clawops plan |
down | Destroy provisioned resources for a stack |
destroy | Destroy everything in a stack, irreversible |
migrate | Move an existing 1.x deployment onto the 2.0 runtime, keeping its state |
stacks | List or delete stacks |
status | Outputs, region, provisioned time |
| Command | Does |
|---|
logs | Stream gateway logs. Says which source answered: the gateway, or container output when it is not reachable |
monitor | Live dashboard: health, container status, resources, log tail |
ssh | Open a session to the instance |
tunnel | Forward the gateway port to localhost |
gateway | status, restart, update [version] |
agents | list, logs <name>: per-agent activity from the audit log. OpenClaw 2.0 has no per-agent restart |
config | get, set, unset on the gateway configuration |
backup | create, restore: restore expands into a staging directory, never in place |
| Command | Does |
|---|
harden | Apply hardening modules: ssh, ufw, fail2ban, unattended-upgrades, auditd |
secret | list, set, delete, rotate, audit |
| Command | Does |
|---|
mcp | MCP server operations: see MCP |
bug | Open a pre-filled GitHub issue with system context |
help | Available commands and global flags |