Documentation / Overview

Build, share, and install complete agents.

KClaw is the technical platform that packages, distributes, and manages the agent profiles, templates, skills, integrations, and runtime lifecycle used by the KORIKA Claw ecosystem.

Your data stays yours.

Credentials, memories, sessions, logs, and other user state are never copied into a KClaw template.

Installation

KClaw requires Node.js 20 or newer. Remote templates require Git. Install a recent Hermes CLI, an OpenClaw CLI with experimental Claws support, or both.

Linux or macOS

$curl -fsSL https://klausul.gits.app/install.sh | sh

The installer verifies the bundle checksum and installs the KClaw CLI under ~/.local/bin.

Verify your setup

$ kclaw --version
$ kclaw hermes status
$ kclaw openclaw status

Choose a runtime target

Run an install, update, use, or remove command without --target to choose Hermes or OpenClaw in an interactive wizard. Scripts and other non-interactive callers must specify the target.

$ kclaw template install ./my-agent
$ kclaw template install ./my-agent --target hermes
$ kclaw template install ./my-agent --target openclaw

Hermes

KClaw delegates to Hermes' native profile-distribution commands. Install and update also apply the bundled Hermes security guard. Hermes-only options include --alias, --force, and --force-config.

OpenClaw

KClaw initializes an isolated named profile with openclaw --profile NAME setup --baseline, then previews and applies the template's native Claw package inside it. The exact plan is bound by OpenClaw's planIntegrity; KClaw displays it and asks before applying. Use --yes only for a plan already reviewed in non-interactive operation.

OpenClaw Claws are experimental. OpenClaw templates must contain a root CLAW.md. The Python security guard is Hermes-specific and is not installed into OpenClaw.

Use your cloud catalogue

$ kclaw login
$ kclaw template list
$ kclaw template install research-agent

Authenticate

KClaw opens a unique browser URL and waits for you to approve the CLI with Google Sign-In.

Choose a template

List your catalogue or use a template ID you already know.

Choose and install

Select Hermes or OpenClaw, then review the native profile plan.

Publish and manage templates

$ kclaw template upload ./my-agent
$ kclaw template add shared-research-agent
$ kclaw template remove-from-catalog shared-research-agent

Uploads are limited to 10 MiB and are scanned for secrets, state databases, symlinks, and unsupported files.

Assign exclusive templates

$ kclaw admin assign aiis-2026-assistant user@example.com
$ kclaw admin revoke aiis-2026-assistant user@example.com

Exclusive templates are hidden from discovery and can only be assigned by an administrator configured on the backend.

Work locally

Creating, inspecting, and installing local templates does not require a KClaw account.

$ kclaw template create ./my-agent --description "My coding agent"
$ kclaw template inspect ./my-agent
$ kclaw template install ./my-agent --name my-agent

You can also inspect and install directly from Git:

$ kclaw template inspect github:owner/my-agent
$ kclaw template install github:owner/my-agent --target openclaw

Manage an installed profile

$ kclaw template use my-agent --target openclaw
$ kclaw template update my-agent --target openclaw
$ kclaw template remove my-agent --target openclaw

Hermes updates preserve config.yaml by default. OpenClaw updates refresh the recorded local, Git, or catalogue source and apply its native Claw update plan. OpenClaw removal preserves the named profile and user-owned state.

Template format

A template contains a native Hermes distribution. To support OpenClaw too, include its native package metadata and Claw manifest alongside the shared persona and capability files.

my-agent/
├── distribution.yaml Hermes
├── package.json OpenClaw package
├── CLAW.md OpenClaw manifest
├── SOUL.md
├── config.yaml
├── skills/
│   └── research/SKILL.md
├── mcp.json
└── cron/

Minimal manifest

name: my-agent
version: 1.0.0
description: A focused research assistant
hermes_requires: ">=0.2"

distribution_owned:
  - SOUL.md
  - config.yaml
  - skills/
  - mcp.json
  - cron/

Minimal OpenClaw manifest

---
schemaVersion: 1
agent:
  id: my-agent
workspace:
  bootstrapFiles:
    SOUL.md: { source: SOUL.md }
  files:
    - source: skills/research/SKILL.md
      path: skills/research/SKILL.md
packages: []
mcpServers: {}
cronJobs: []
---

kclaw template create generates both manifests. List every bundled skill asset under workspace.files, translate servers and schedules to mcpServers and cronJobs, and place OpenClaw-specific tool or memory policy in profiles/openclaw.yml.

Never include secrets or user state. Exclude .env, auth.json, memories, sessions, logs, and databases.

Command reference

kclaw login [--api-url URL]

Connect the CLI to your cloud account.

kclaw auth status

Show the currently authenticated account.

kclaw hermes status

Check whether Hermes is available.

kclaw openclaw status

Check whether OpenClaw is available.

kclaw logout

Remove the saved cloud login.

kclaw admin assign <template-id> <user-email>

Assign an exclusive template to a user who has signed in.

kclaw admin revoke <template-id> <user-email>

Revoke an exclusive template assignment.

kclaw template create <directory> [--name NAME] [--description TEXT]

Create a valid template scaffold.

kclaw template upload <directory>

Validate, upload, and add a template to your catalogue.

kclaw template list

List templates in your cloud catalogue.

kclaw template inspect <source>

Preview a local or remote template without installing it.

kclaw template install <source> [--target hermes|openclaw] [--name NAME] [--alias] [--force] [--yes]

Choose a runtime and install its native profile package.

kclaw template update <profile> [--target hermes|openclaw] [--force-config] [--yes]

Preview and update through the selected runtime.

kclaw template use <profile> [--target hermes|openclaw]

Open or switch to the selected runtime profile.

kclaw template remove <profile> [--target hermes|openclaw] [--yes]

Remove managed template state through the selected runtime.

Cloud API

The hosted service at https://klausul.gits.app uses an OAuth 2.0 device flow, Google Sign-In for browser approval, and an authenticated template catalogue.

POST/oauth/device/code

Start device authorization.

POST/oauth/token

Poll for authorization and obtain an access token.

GET/v1/me

Verify the authenticated account.

POST/v1/templates

Upload and validate a template bundle.

GET/v1/catalog/templates

List the authenticated user's catalogue.

GET/v1/catalog/templates/:id

Resolve an installable Git source.

GET/v1/admin/catalog/assignments

List exclusive templates, users, and assignments.

PUT/v1/admin/catalog/templates/:id/users/:email

Assign an exclusive template.

Authentication

Send access tokens as Authorization: Bearer <token>. HTTP 401 tells the CLI to request a new login.