ClawKey Setup Guide - VeryAI

This guide walks you through setting up ClawKey from scratch, including creating API keys, configuring Telegram, installing dependencies, and completing device verification through VeryAI.

---

0) Get OpenAI API Key

0.1 Sign in to OpenAI

1. Open Chrome or Edge.
2. Go to: https://platform.openai.com
3. Sign in to your account.

0.2 Create an API Key

1. Open: https://platform.openai.com/api-keys
2. Click Create new secret key.
3. Name it (example: openclaw).
4. Click Create.
5. Copy the key (format: sk-...).
6. Paste it into Notepad and keep it safe.

---

1) Get Telegram Bot Token (via BotFather)

1.1 Create a New Bot

1. Open Telegram.
2. Search for @BotFather.
3. Click Start.
4. Type:

/newbot

5. Enter a bot name (any name).
6. Enter a username that ends with _bot (example: mypalm_test_bot).

1.2 Copy the Token

BotFather will send:

Use this token to access the HTTP API:
123456789:AAxxxxxxxxxxxxxxxx

Copy the entire token and store it safely.

---

2) Install Node.js (LTS)

2.1 Download and Install

1. Go to https://nodejs.org
2. Download the LTS version.
3. Install it (Next → Install → Finish).

2.2 Verify Installation

Open PowerShell and run:

node -v
npm -v

You should see version numbers.

---

3) Install OpenClaw

In PowerShell:

npm install -g openclaw@latest

Verify installation:

openclaw --version

---

4) Run OpenClaw Onboard

This is where you enter the API Key and Bot Token.

4.1 Start the Wizard

openclaw onboard

4.2 Answer the Wizard Prompts

• AI Provider → select OpenAI
• Auth method → select API Key
• Enter OpenAI API Key → paste your sk-... key
• Messaging platform → select Telegram
• Enter Telegram Bot Token → paste the token
• Any remaining questions → choose Default / press Enter

---

5) Open device.json and Copy the deviceId

In PowerShell:

notepad $env:USERPROFILE\.openclaw\identity\device.json

Find:

"deviceId": "..."

Copy only the value inside the quotes. Do not edit the file.

---

6) Create Script to Generate challenge.json

6.1 Create clawkey-register.js

In PowerShell:

notepad $env:USERPROFILE\clawkey-register.js

Paste the following code:

const crypto = require("crypto");
const fs = require("fs");
const os = require("os");

const identity = JSON.parse(
  fs.readFileSync(`${os.homedir()}/.openclaw/identity/device.json`, "utf8")
);

const message = `clawkey-register-${Date.now()}`;
const privateKey = crypto.createPrivateKey(identity.privateKeyPem);
const signature = crypto.sign(null, Buffer.from(message, "utf8"), privateKey);

const publicKeyDer = crypto
  .createPublicKey(identity.publicKeyPem)
  .export({ type: "spki", format: "der" });

const challenge = {
  deviceId: identity.deviceId,
  publicKey: publicKeyDer.toString("base64"),
  message,
  signature: signature.toString("base64"),
  timestamp: Date.now(),
};

fs.writeFileSync(
  `${os.homedir()}/challenge.json`,
  JSON.stringify(challenge, null, 2)
);

console.log("challenge.json created");

Save the file and close Notepad.

---

7) Generate challenge.json

In PowerShell:

node $env:USERPROFILE\clawkey-register.js

Open the file to confirm:

notepad $env:USERPROFILE\challenge.json

---

8) Send challenge.json to ClawKey

In PowerShell:

curl.exe -X POST "https://api.clawkey.ai/v1/agent/register/init" \
  -H "Content-Type: application/json" \
  --data-binary "@$env:USERPROFILE\challenge.json"

From the response, copy the value of registrationUrl.

If the URL contains \u0026, replace it with &.

---

9) Perform the Palm Scan (VeryAI)

1. Open Chrome or Edge.
2. Paste the registrationUrl into the address bar.
3. Allow camera access if prompted.
4. Follow the on-screen instructions to scan your palm.
5. Wait until the process completes.

---

10) Verify the Result

Replace <DEVICE_ID> with your actual deviceId:

curl.exe -s "https://api.clawkey.ai/v1/agent/verify/device/<DEVICE_ID>"

If you see:

{"registered":true,"verified":true}

the process is complete.