OAuth vs API Keys

Securing Your Connections

OpenClaw supports multiple authentication methods for connecting to your workspace tools and AI providers.

API Keys

Ideal for direct developer access. You generate a key on a provider's dashboard (e.g., OpenAI) and paste it into OpenClaw. Simple, but requires careful handling.

OAuth 2.0

Recommended for Slack, GitHub, and Google integrations. OAuth provides a "Login with..." window and allows you to revoke access at any time without rotating secrets.

Security: Always use openclaw vault to encrypt your secrets if you are sharing your workspace folder with others.