Access controlwho can do what, checked on every requestRolesowner · admin · memberAgent identityown user, own roomProject keysonly its projectsSecrets vaultagents never hold API keysAuditevery action logged
Runtime
OpenClawOpen-source agent runtime · every agent runs hereGatewayMemorySkillsSchedules
Infra
Your isolated instance·your keys·never pooled·managed: backups · upgrades · health
Runs onRailwayAWSGoogle CloudAzureHetznerYour own servers