Plugins
Building CLI backend plugins
CLI backend plugins let OpenClaw call a local AI CLI as a text inference backend. The backend appears as a provider prefix in model refs:
acme-cli/acme-large
Use a CLI backend when the upstream integration is already exposed as a local command, when the CLI owns local login state, or when the CLI is a useful fallback if API providers are unavailable.
What the plugin owns
A CLI backend plugin has three contracts:
| Contract | File | Purpose |
|---|---|---|
| Package entry | package.json |
Points OpenClaw at the plugin runtime module |
| Manifest ownership | openclaw.plugin.json |
Declares the backend id before runtime loads |
| Runtime registration | index.ts |
Calls api.registerCliBackend(...) with command defaults |
The manifest is discovery metadata. It does not execute the CLI and does not
register runtime behavior. Runtime behavior starts when the plugin entry calls
api.registerCliBackend(...).
Minimal backend plugin
Create package metadata
{
"name": "@acme/openclaw-acme-cli",
"version": "1.0.0",
"type": "module",
"openclaw": {
"extensions": ["./index.ts"],
"compat": {
"pluginApi": ">=2026.3.24-beta.2",
"minGatewayVersion": "2026.3.24-beta.2"
},
"build": {
"openclawVersion": "2026.3.24-beta.2",
"pluginSdkVersion": "2026.3.24-beta.2"
}
},
"dependencies": {
"openclaw": "^2026.3.24"
},
"devDependencies": {
"typescript": "^5.9.0"
}
}
Published packages must ship built JavaScript runtime files. If your source
entry is ./src/index.ts, add openclaw.runtimeExtensions that points at
the built JavaScript peer. See Entry points.
Declare backend ownership
{
"id": "acme-cli",
"name": "Acme CLI",
"description": "Run Acme's local AI CLI through OpenClaw",
"cliBackends": ["acme-cli"],
"setup": {
"cliBackends": ["acme-cli"],
"requiresRuntime": false
},
"activation": {
"onStartup": false
},
"configSchema": {
"type": "object",
"additionalProperties": false
}
}
cliBackends is the runtime ownership list. It lets OpenClaw auto-load the
plugin when config or model selection mentions acme-cli/....
setup.cliBackends is the descriptor-first setup surface. Add it when
model discovery, onboarding, or status should recognize the backend without
loading plugin runtime. Use requiresRuntime: false only when those static
descriptors are enough for setup.
Register the backend
import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
import {
CLI_FRESH_WATCHDOG_DEFAULTS,
CLI_RESUME_WATCHDOG_DEFAULTS,
type CliBackendPlugin,
} from "openclaw/plugin-sdk/cli-backend";
function buildAcmeCliBackend(): CliBackendPlugin {
return {
id: "acme-cli",
liveTest: {
defaultModelRef: "acme-cli/acme-large",
defaultImageProbe: false,
defaultMcpProbe: false,
docker: {
npmPackage: "@acme/acme-cli",
binaryName: "acme",
},
},
config: {
command: "acme",
args: ["chat", "--json"],
output: "json",
input: "stdin",
modelArg: "--model",
sessionArg: "--session",
sessionMode: "existing",
sessionIdFields: ["session_id", "conversation_id"],
systemPromptFileArg: "--system-file",
systemPromptWhen: "first",
imageArg: "--image",
imageMode: "repeat",
reliability: {
watchdog: {
fresh: { ...CLI_FRESH_WATCHDOG_DEFAULTS },
resume: { ...CLI_RESUME_WATCHDOG_DEFAULTS },
},
},
serialize: true,
},
};
}
export default definePluginEntry({
id: "acme-cli",
name: "Acme CLI",
description: "Run Acme's local AI CLI through OpenClaw",
register(api) {
api.registerCliBackend(buildAcmeCliBackend());
},
});
The backend id must match the manifest cliBackends entry. The registered
config is only the default; user config under
agents.defaults.cliBackends.acme-cli is merged over it at runtime.
Config shape
CliBackendConfig describes how OpenClaw should launch and parse the CLI:
| Field | Use |
|---|---|
command |
Binary name or absolute command path |
args |
Base argv for fresh runs |
resumeArgs |
Alternate argv for resumed sessions; supports {sessionId} |
output / resumeOutput |
Parser: json, jsonl, or text |
input |
Prompt transport: arg or stdin |
modelArg |
Flag used before the model id |
modelAliases |
Map OpenClaw model ids to CLI-native ids |
sessionArg / sessionArgs |
How to pass a session id |
sessionMode |
always, existing, or none |
sessionIdFields |
JSON fields OpenClaw reads from CLI output |
systemPromptArg / systemPromptFileArg |
System prompt transport |
systemPromptWhen |
first, always, or never |
imageArg / imageMode |
Image path support |
serialize |
Keep same-backend runs ordered |
reliability.watchdog |
No-output timeout tuning |
Prefer the smallest static config that matches the CLI. Add plugin callbacks only for behavior that really belongs to the backend.
Advanced backend hooks
CliBackendPlugin can also define:
| Hook | Use |
|---|---|
normalizeConfig(config, context) |
Rewrite legacy user config after merge |
resolveExecutionArgs(ctx) |
Add request-scoped flags such as thinking effort |
prepareExecution(ctx) |
Create temporary auth or config bridges before launch |
transformSystemPrompt(ctx) |
Apply a final CLI-specific system prompt transform |
textTransforms |
Bidirectional prompt/output replacements |
defaultAuthProfileId |
Prefer a specific OpenClaw auth profile |
authEpochMode |
Decide how auth changes invalidate stored CLI sessions |
nativeToolMode |
Declare whether the CLI has always-on native tools |
bundleMcp / bundleMcpMode |
Opt into OpenClaw's loopback MCP tool bridge |
Keep these hooks provider-owned. Do not add CLI-specific branches to core when a backend hook can express the behavior.
MCP tool bridge
CLI backends do not receive OpenClaw tools by default. If the CLI can consume an MCP configuration, opt in explicitly:
return {
id: "acme-cli",
bundleMcp: true,
bundleMcpMode: "codex-config-overrides",
config: {
command: "acme",
args: ["chat", "--json"],
output: "json",
},
};
Supported bridge modes are:
| Mode | Use |
|---|---|
claude-config-file |
CLIs that accept an MCP config file |
codex-config-overrides |
CLIs that accept config overrides on argv |
gemini-system-settings |
CLIs that read MCP settings from their system settings directory |
Only enable the bridge when the CLI can actually consume it. If the CLI has its
own built-in tool layer that cannot be disabled, set nativeToolMode: "always-on" so OpenClaw can fail closed when a caller requires no native tools.
User configuration
Users can override any backend default:
{
agents: {
defaults: {
cliBackends: {
"acme-cli": {
command: "/opt/acme/bin/acme",
args: ["chat", "--json", "--profile", "work"],
modelAliases: {
large: "acme-large-2026",
},
},
},
model: {
primary: "openai/gpt-5.5",
fallbacks: ["acme-cli/large"],
},
},
},
}
Document the minimum override users are likely to need. Usually that is only
command when the binary is outside PATH.
Verification
For bundled plugins, add a focused test around the builder and setup registration, then run the plugin's targeted test lane:
pnpm test extensions/acme-cli
For local or installed plugins, verify discovery and one real model run:
openclaw plugins inspect acme-cli --runtime --json
openclaw agent --message "reply exactly: backend ok" --model acme-cli/acme-large
If the backend supports images or MCP, add a live smoke that proves those paths with the real CLI. Do not rely on static inspection for prompt, image, MCP, or session-resume behavior.
Checklist
OPENCLAW_DOCS_MARKER:calloutOpen:Q2hlY2s
package.json has openclaw.extensions and built runtime entries for published packages
OPENCLAW_DOCS_MARKER:calloutClose:
OPENCLAW_DOCS_MARKER:calloutOpen:Q2hlY2s
openclaw.plugin.json declares cliBackends and intentional activation.onStartup
OPENCLAW_DOCS_MARKER:calloutClose:
OPENCLAW_DOCS_MARKER:calloutOpen:Q2hlY2s
setup.cliBackends is present when setup/model discovery should see the backend cold
OPENCLAW_DOCS_MARKER:calloutClose:
OPENCLAW_DOCS_MARKER:calloutOpen:Q2hlY2s
api.registerCliBackend(...) uses the same backend id as the manifest
OPENCLAW_DOCS_MARKER:calloutClose:
OPENCLAW_DOCS_MARKER:calloutOpen:Q2hlY2s
User overrides under agents.defaults.cliBackends.<id> still win
OPENCLAW_DOCS_MARKER:calloutClose: