OpenClaw May 22, 2026 ~22 min ClawBot Personal WeChat

Tencent ClawBot · Personal WeChat OpenClaw
Install Pitfalls · Remote Mac VNC

Official @tencent-weixin/openclaw-weixin · version matrix · gray release · eight-step runbook

Remote Mac desktop via VNC: WeChat ClawBot QR pairing with OpenClaw Gateway

Tencent ClawBot connects personal WeChat to OpenClaw through the official channel plugin @tencent-weixin/openclaw-weixin (channel ID: openclaw-weixin), not by embedding a bot inside the OpenClaw core repo. If you already run Gateway on a leased remote Mac but hit “plugin installed but host version incompatible,” “QR scan in SSH looks wrong,” “multiple accounts share one DM memory,” or “no ClawBot switch on the phone,” this article gives an auditable ops path: personal-account boundaries orthogonal to the WeCom OpenClaw security guide, an SSH versus VNC decision matrix, an eight-step runbook, four ticket-ready conclusions, and FAQ. Start with the ten-minute install route map to bring CLI and Gateway up, then add the WeChat plugin. If you expose the console on the public internet, read the Gateway HTTPS reverse-proxy checklist so local credential directories and raw port 18789 are not published together.

01

Pain points: personal WeChat is not “another Telegram”

The hard parts of personal WeChat integration cluster around host version, login medium, session isolation, and product gray release; model quality is downstream.

  1. 01

    Dual versioning (host + plugin): OpenClaw >= 2026.3.22 should load openclaw-weixin 2.x (npm latest). Forcing latest on an older host yields host version incompatible at startup.

  2. 02

    QR must run on the Gateway machine: openclaw channels login --channel openclaw-weixin assumes the QR and token land in the same machine and user context as the running Gateway. Pure SSH forwarding often means “scanned on phone but not in the HOME you inspect.”

  3. 03

    Multi-account DM bleed: repeated login adds account rows; without session.dmScope, multiple WeChat accounts may share one DM bucket.

  4. 04

    Capability boundary — DM first: official metadata does not declare group chat; do not accept “@ bot in a group” as your test case.

  5. 05

    ClawBot gray release vs channel plugin: the ClawBot entry under WeChat Settings is still gray release (often needs a recent client such as 8.0.70+). Missing UI does not always mean the Gateway cannot use openclaw-weixin QR login — but record product UI and channel probe separately in tickets.

  6. 06

    Do not confuse with WeCom: personal plugin is not enterprise self-built app / callback stack; compliance and audit differ entirely. See the WeCom guide.

Teams that already run Telegram or Discord on OpenClaw often underestimate how much mobile client state matters for WeChat: gray flags, client build numbers, and whether the operator scanned in the same macOS session as launchd all show up as “Gateway bug” in chat when the real failure is environment alignment. Treat personal WeChat as a channel with its own acceptance vocabulary before you tune models or tool policies.

02

Decision matrix: SSH, VNC, and personal WeChat acceptance

Acceptance stepSSH onlyVNC recommendedPass criteria
openclaw --version / doctorSufficientOptionalHost >= 2026.3.22 when using 2.x
npx -y @tencent-weixin/openclaw-weixin-cli installSufficientOptionalInstaller picks correct dist-tag, no version conflict
channels login QRASCII QR easy to mis-scanDesktop terminal + phone side by side, same userstatus probe shows connected account
ClawBot gray switchCannot operate phone UIPhysical phone + ticket notes client versionGray visible or documented “not on gray list”
Pairing allowlistCLI approveSend test DM from IM, watch interceptUnknown sender needs pairing approval
Gateway 18789 / reverse proxycurl localhost probeBrowser Network + consoleLoopback only or TLS proxy per QR deploy guide

Lowest-friction personal WeChat rollout: SSH for plugin install and logs + VNC as the same user for QR and console cross-check — not either/or.

If you recently upgraded OpenClaw and cold plugin registry feels slow, align CLI and Gateway on the same build using the v2026.4.25 plugin registry repair guide before installing openclaw-weixin, avoiding “plugin enabled but Gateway still old build” mixed-version ghosts.

03

Eight-step runbook: version freeze to first DM reply

  1. 01

    Freeze and backup: export OpenClaw config and state; record openclaw --version, Gateway build, launchd user. Greenfield hosts can follow the ten-minute route map.

  2. 02

    Confirm host >= 2026.3.22: upgrade OpenClaw or let the installer pick compat; do not hand-pin @latest on an old host.

  3. 03

    Recommended unified installer: run npx -y @tencent-weixin/openclaw-weixin-cli install; it reads openclaw --version, selects compat or latest dist-tag, then guides QR and Gateway restart.

  4. 04

    Manual reproducible path: openclaw plugins install "@tencent-weixin/openclaw-weixin", then openclaw config set plugins.entries.openclaw-weixin.enabled true; never force latest below 2026.3.22.

  5. 05

    Multi-account isolation: before a second WeChat login, set openclaw config set session.dmScope per-account-channel-peer so DMs split by account + channel + peer.

  6. 06

    Same-machine QR login: on the Gateway host, as the same user as the daemon, run openclaw channels login --channel openclaw-weixin; use VNC to read the QR and confirmation UI. Credentials land in local OpenClaw state (sensitive).

  7. 07

    Access control: for unknown DM senders use pairing: openclaw pairing list openclaw-weixin and openclaw pairing approve openclaw-weixin <CODE>; do not treat “anyone can trigger the agent” as default.

  8. 08

    Restart and probe: after openclaw gateway restart, run openclaw channels status --probe; send a DM smoke test from a paired contact and attach Gateway log excerpts to the change ticket. If Gateway restart loops, upgrade OpenClaw and plugin together (sidecar cleanup fixes landed in newer builds).

bash
openclaw --version
openclaw doctor

# Recommended: auto-match plugin dist-tag
npx -y @tencent-weixin/openclaw-weixin-cli install

# Manual (host already >= 2026.3.22)
openclaw plugins install "@tencent-weixin/openclaw-weixin"
openclaw config set plugins.entries.openclaw-weixin.enabled true
openclaw config set session.dmScope per-account-channel-peer

openclaw channels login --channel openclaw-weixin
openclaw gateway restart
openclaw channels status --probe
openclaw plugins list

ClawBot gray release (phone): on accounts that hit gray, open ClawBot under WeChat Settings per product copy; remote Gateway must still show openclaw-weixin connected. When gray is missing, accept the channel using QR + pairing + probe as the auditable path — do not blame the server for missing mobile UI.

04

Quotable facts for change tickets

  • Fact 1: Personal WeChat channel npm package is @tencent-weixin/openclaw-weixin; 2.x requires OpenClaw >= 2026.3.22. Record both openclaw --version and plugin version from openclaw plugins list.
  • Fact 2: Multi-account setups need session.dmScope=per-account-channel-peer or DM memory can leak across WeChat accounts (logical isolation, not a WeChat CVE).
  • Fact 3: Capability is DM and media first; group chat is not declared in plugin metadata — test with paired friend DM, not group @.
  • Fact 4: Security baseline = protect local tokens + pairing allowlist + minimize Gateway exposure (127.0.0.1 or tunnel; public internet needs HTTPS proxy and source limits). Personal plugin does not replace WeCom org audit.

When the sidecar monitors Tencent iLink API, older builds could kill Gateway in a restart loop; after paired upgrades of OpenClaw and plugin, search logs for openclaw-weixin, ilink, pairing. For “inbound on channel but agent silent,” use no-reply triage to separate delivery from model stalls.

05

Security and compliance (personal account)

The personal WeChat plugin stores account tokens on the Gateway machine. Treat that remote Mac as a high-sensitivity asset:

  1. A

    Disk and backup: restrict access before backups include state dirs; never sync token-bearing folders to public cloud drives.

  2. B

    Pairing defaults to deny: unapproved senders must not drive shell/file tools; maintain allowlists and audit pairing list regularly.

  3. C

    Gateway exposure: follow the public reverse-proxy checklist — do not map 18789 to the internet without auth; WeChat credentials and console are different trust domains.

  4. D

    User context: SSH user, VNC desktop user, and daemon user mismatch is the top incident (“installed for A, scanned for B, Gateway runs as C”). Pair with the launchd daemon checklist.

  5. E

    Product gray release: ClawBot UI and channel plugin evolve separately; tickets should note “phone gray hit or not” and “openclaw-weixin probe connected.”

06

Twenty-minute VNC acceptance grid (cross-check SSH)

CheckVNC evidenceSSH evidencePass
Plugin enabledConsole channel list shows weixinplugins listenabled true, no host incompatible error
QR loginTerminal QR readable; phone confirmsNew account row in state dirprobe: connected
DM replyWeChat client shows assistant replyGateway inbound/outbound logsRound-trip within SLA (short smoke first)
pairing blockStranger DM does not execute toolspairing pending listResponds only after approve
ClawBot graySettings screenshot + versionN/A (phone)Gray hit or documented miss

On leased remote Macs, VNCMac-class nodes keep Gateway, QR terminal, and (when needed) port 18789 console in one graphical session, shrinking personal WeChat rollout from “guess which HOME” to a twenty-minute auditable acceptance. Windows-first teams can standardize “SSH install plugin + VNC QR + phone gray” on-call, sharing evidence format with v2026.4.25 QR deployment. Print echo $HOME in SSH and VNC before comparing artifacts — multi-home hosts amplify user mismatch during acceptance.

Further reading

Related guides

FAQ

FAQ

ClawBot is still gray on the mobile client — you need a recent build and often an allowlisted account. Without gray, use openclaw-weixin QR plus Gateway probe as channel proof and note phone WeChat version in the ticket.

No. 2.x requires host >= 2026.3.22. Upgrade OpenClaw or run npx -y @tencent-weixin/openclaw-weixin-cli install to pick compat/legacy automatically.

No. This article is Tencent @tencent-weixin/openclaw-weixin for personal accounts. WeCom uses self-built apps, callbacks, and org audit — see the WeCom security guide.

Official docs state group chat is not declared in plugin capability metadata. Accept with paired-contact DM; wait for release notes for group scenarios.

Terminals can print QR codes, but remote ops strongly need VNC as the same user as the Gateway daemon to avoid writing credentials to the wrong HOME; ClawBot phone settings also need a physical device.

Closing

Tencent ClawBot and openclaw-weixin lower the bar to wire personal WeChat into OpenClaw, but stability still hinges on the host version matrix, same-machine same-user QR login, per-account-channel-peer isolation, pairing-safe defaults, and accepting DM-first, group undeclared product boundaries. Owning hardware still leaves sleep policies, egress IP churn, and context mistakes when several people share one desktop. On a leased remote Apple Silicon host, placing Gateway and the QR terminal on one VNC desktop often compresses “installed but no DM” from hours of debate to roughly twenty minutes of auditable acceptance.

When you need a host built for section-six graphical QR and console cross-check, use VNCMac: purchase for node and plan selection; help center for SSH and VNC baselines.