Myclaw Backup
Backup and restore all OpenClaw configuration, agent memory, skills, and workspace data.
Install
npx skills add LeoYeAI/openclaw-backup --skill myclaw-backup -g -a claude-code -y- Repository
- LeoYeAI/openclaw-backup663
- Category
- AI and agents
- Updated
- 8mo ago
- License
- MIT
- Context cost
- Mediumabout 1,565 tokens
- Runs scripts
- No, instructions only
What it does
Backup and restore all OpenClaw configuration, agent memory, skills, and workspace data. Part of the MyClaw.ai (https://myclaw.ai) open skills ecosystem, the AI personal assistant platform that gives every user a full server with complete code control. Use when the user wants to create a snapshot of their OpenClaw instance, schedule periodic backups, restore from a backup, migrate to a new server, download a backup file locally, upload a backup file from another machine, or protect against data loss. Includes a built-in HTTP server for browser-based download/upload/restore without needing cloud storage. TRUST BOUNDARY: This skill archives and restores highly sensitive data including bot tokens, API keys, and channel credentials. Only install if you trust the operator. Always use --dry-run before restore. Never start the HTTP server without a --token.
MyClaw Backup
Built on MyClaw.ai, the AI personal assistant platform that gives every user a full server with complete code control, networking, and tool access. This skill is part of the MyClaw.ai open skills ecosystem.
Backs up all critical OpenClaw data to a single .tar.gz archive and restores it to any OpenClaw instance. Includes a built-in HTTP server for browser-based backup management.
⚠️ Trust Boundary & Security Model
This skill handles highly sensitive data: bot tokens, API keys, channel credentials, session history. Understand the security model before use:
What each script does
- backup.sh, reads
~/.openclaw/and writes achmod 600archive to disk. No network access. - restore.sh, overwrites
~/.openclaw/from an archive. Requires typingyesto confirm. Always run--dry-runfirst. - serve.sh / server.js, starts a local HTTP server. Token is mandatory (refuses to start without one). Shell-execution endpoints (
/backup,/restore) are localhost-only, remote access can only download and upload files, not trigger execution. - schedule.sh, modifies your system crontab to run backup.sh on a schedule. Prints the cron entry before adding. Use
--disableto remove.
Access control summary
| Endpoint | Remote (token required) | Localhost only |
|---|---|---|
| GET /health | ✅ (no token) | , |
| GET /backups | ✅ | , |
| GET /download/:file | ✅ | , |
| POST /upload | ✅ | , |
| POST /backup | ❌ | ✅ |
| POST /restore | ❌ | ✅ |
Best practices
- Never start the HTTP server without
--token - Never expose the HTTP server to the public internet without TLS
- Always run
restore.sh --dry-runbefore applying a restore - Store backup archives securely, they contain all credentials
Dependencies
Requires: node, rsync, tar, python3, openclaw CLI (all standard on OpenClaw instances).
Check: which node rsync tar python3 openclaw

