Plugins run in the gateway process. Treat plugin installation as production code deployment.
Quick Path
openclaw plugins list
openclaw plugins install @openclaw/voice-call
# restart gateway and configure entries
Public-Safe Config Shape
{
"plugins": {
"enabled": true,
"allow": ["<trusted-plugin-id>"],
"entries": {
"<trusted-plugin-id>": {
"enabled": true,
"config": { "provider": "<provider>" }
}
}
}
}
Security Notes
- Only load trusted plugin sources.
- Prefer allowlist over implicit loading.
- Keep dependencies minimal and reviewable.