channels
List all active input/output channels. Usage:system:channels authorization
No Channels:
Channel Types
OneClaw supports multiple concurrent I/O channels:CLI (Command-Line Interface)
Description: Interactive terminal session (stdin/stdout) Activation: Default channel when runningcargo run --release -p oneclaw-core
Use Cases:
- Local development
- System administration
- Debugging and testing
TCP (Network Socket)
Description: TCP server listening on configurable port Configuration:- Remote access
- Network automation
- Multi-device deployments
Telegram
Description: Telegram bot integration Configuration:- Create bot via @BotFather
- Get token and add to config
- Start OneClaw
- Message your bot on Telegram
- Mobile access
- Notifications and alerts
- Multi-user collaboration
MQTT
Description: MQTT pub/sub for IoT integration Configuration:- IoT device networks
- Sensor data integration
- Smart home automation
Multi-Channel Mode
Run multiple channels simultaneously: Configuration:- All channels receive same command set
- Round-robin message polling
- Responses routed to origin channel
- Shared security context (pairing across channels)
tool notify or events) are pushed to all active channels:
Device Pairing
Secure device authentication using 6-digit codes.pair
Generate a pairing code valid for 5 minutes. Usage:- Generates random 6-digit code
- Stores code + timestamp in security layer
- Code expires after 5 minutes
- Single-use (invalidated after verification)
verify
Pair a device using the generated code. Usage:- Validate code against stored pairing requests
- Check expiration (5 minutes)
- Generate unique device ID (UUID)
- Store device identity in security layer
- Map channel source to device ID
- Grant access to protected commands
Device Management
devices
List all paired devices. Usage:security:devices authorization
Fields:
- ID: First 8 chars of device UUID
- paired: Initial pairing timestamp
- seen: Last activity timestamp
- label: Optional device label (set via API)
unpair
Remove a paired device (prefix match on device ID). Usage:security:unpair authorization
Behavior:
- Matches device ID by prefix (first N characters)
- Removes device from security layer
- Revokes all access permissions
- Device must re-pair to regain access
Channel Security Model
Whendeny_by_default = true:
Always Open (all channels):
helpexit/quitpairverify CODE
- Device must complete
pair+verifyflow - Each channel source tracked independently
- Same device can pair multiple channels (CLI + Telegram, etc.)
Round-Robin Polling
In multi-channel mode, OneClaw polls channels in round-robin order:- Check CLI for message
- Check TCP for message
- Check Telegram for message
- Check MQTT for message
- Repeat
exit