OpenClaw

gateway-token-doctor

Diagnose and fix gateway token mismatches causing 401 errors. Align tokens across config, service, and CLI surfaces.

dalomeve0 来源安装数☆ 0 仓库 Stars

查看来源 ↗安装与使用 SKILL.md ↗

安装与使用

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。

SkillHub CLI

skillhub install dalomeve/gateway-token-doctor

打开来源仓库，查看说明和兼容环境后，按来源提供的命令或步骤安装。

将来源链接提供给你的 Agent，让它先读取说明、核对依赖，并向你说明将执行的安装步骤。

查看来源 ↗使用指南

技能说明

Gateway Token Doctor

Diagnose and fix 401 errors from token mismatches.

Problem

Gateway token inconsistencies cause:

401 Unauthorized errors
CLI/UI authentication failures
Service startup failures
Silent auth degradation

Workflow

1. Token Audit

# Check all token surfaces
$cfg = Get-Content "$HOME/.openclaw/openclaw.json" -Raw | ConvertFrom-Json
$auth = $cfg.gateway.auth.token
$remote = $cfg.gateway.remote.token
$service = $env:OPENCLAW_GATEWAY_TOKEN

"auth.token   = $auth"
"remote.token = $remote"
"service.token = $service"

if ($auth -and $remote -and $auth -ne $remote) {
    Write-Warning "Token mismatch: auth != remote"
}

2. Alignment Fix

# Generate or use existing token
$token = $auth

# Update config
$cfg.gateway.auth.token = $token
$cfg.gateway.remote.token = $token
$cfg | ConvertTo-Json -Depth 10 | Out-File "$HOME/.openclaw/openclaw.json" -Encoding UTF8

# Update service startup script
$servicePath = "$HOME/.openclaw/gateway.cmd"
$content = Get-Content $servicePath -Raw
$content = $content -replace 'OPENCLAW_GATEWAY_TOKEN=.*', "OPENCLAW_GATEWAY_TOKEN=$token"
$content | Out-File $servicePath -Encoding UTF8

# Restart
openclaw gateway restart

3. Verification

# Test gateway access
openclaw gateway status

# Test CLI auth
openclaw whoami

Executable Completion Criteria

Criteria	Verification
All tokens aligned	auth == remote == service
Gateway responds	`openclaw gateway status` succeeds
CLI auth works	`openclaw whoami` returns user
No 401 in logs	`Select-String "401" logs` returns nothing

Privacy/Safety

Never log actual token values
Redact tokens in output (show first 4 chars only)
Store tokens only in config files

Self-Use Trigger

Use when:

401 errors appear
Gateway restart after config change
CLI shows auth mismatch
Service fails to start

Align tokens. Restore access.

来源信息

Source: github
Repository: openclaw/skills
Path: skills/dalomeve/gateway-token-doctor
Version: —
Commit: 7e44c49df3740b795dc9362fe5bf98cdf9793dd9
分类来源: rules
状态: active
可见性: public

这些信息来自收录时的来源分析，可能滞后；使用前请核对最新来源文件。

来源内容

SKILL.md

# Gateway Token Doctor

Diagnose and fix 401 errors from token mismatches.

## Problem

Gateway token inconsistencies cause:
- 401 Unauthorized errors
- CLI/UI authentication failures
- Service startup failures
- Silent auth degradation

## Workflow

### 1. Token Audit

```powershell
# Check all token surfaces
$cfg = Get-Content "$HOME/.openclaw/openclaw.json" -Raw | ConvertFrom-Json
$auth = $cfg.gateway.auth.token
$remote = $cfg.gateway.remote.token
$service = $env:OPENCLAW_GATEWAY_TOKEN

"auth.token   = $auth"
"remote.token = $remote"
"service.token = $service"

if ($auth -and $remote -and $auth -ne $remote) {
    Write-Warning "Token mismatch: auth != remote"
}
```

### 2. Alignment Fix

```powershell
# Generate or use existing token
$token = $auth

# Update config
$cfg.gateway.auth.token = $token
$cfg.gateway.remote.token = $token
$cfg | ConvertTo-Json -Depth 10 | Out-File "$HOME/.openclaw/openclaw.json" -Encoding UTF8

# Update service startup script
$servicePath = "$HOME/.openclaw/gateway.cmd"
$content = Get-Content $servicePath -Raw
$content = $content -replace 'OPENCLAW_GATEWAY_TOKEN=.*', "OPENCLAW_GATEWAY_TOKEN=$token"
$content | Out-File $servicePath -Encoding UTF8

# Restart
openclaw gateway restart
```

### 3. Verification

```powershell
# Test gateway access
openclaw gateway status

# Test CLI auth
openclaw whoami
```

## Executable Completion Criteria

| Criteria | Verification |
|----------|-------------|
| All tokens aligned | auth == remote == service |
| Gateway responds | `openclaw gateway status` succeeds |
| CLI auth works | `openclaw whoami` returns user |
| No 401 in logs | `Select-String "401" logs` returns nothing |

## Privacy/Safety

- Never log actual token values
- Redact tokens in output (show first 4 chars only)
- Store tokens only in config files

## Self-Use Trigger

Use when:
- 401 errors appear
- Gateway restart after config change
- CLI shows auth mismatch
- Service fails to start

---

**Align tokens. Restore access.**

搜索