Agent settings API

{ values: Record<string, number> | null, customText: string | null }

curl "http://localhost:18790/api/personality?agentId=<agent-id>"

{
  agentId: string // required
  values: Record<string, number> // required; any truthy value is stored as sent, its shape is not checked. For example { "bite": 60, "spine": 50 }
  customText?: string | null // trimmed; blank is stored as null
}

curl -X POST http://localhost:18790/api/personality \
  -H 'Content-Type: application/json' \
  -d '{"agentId":"<agent-id>","values":{"bite":60,"spine":50,"glass":45,"elbows":45,"receipts":60,"hobbyhorse":25},"customText":"Concise, dry."}'

interface SkillRow {
  id: string
  name: string
  source: string // free text, for example "curated"
  category: string | null
  trustScore: number | null // not set by this route
  installedAt: number | null // epoch ms
  metadata: string | null // JSON text: { "agentIds": string[] }
}

curl "http://localhost:18790/api/skills?agentId=<agent-id>"

{
  id: string // required
  name: string // required
  source: string // required
  agentId: string // required
  category?: string | null
}

{
  ok: false
  error: 'skill blocked: injection / supply-chain finding'
  findings: Array<{
    severity: 'exfil' | 'injection' | 'destructive' | 'supply-chain'
    pattern: string
    excerpt: string
    intent: 'language' | 'machine' // aimed at the model, or at the machine
    message: string
    line: number
    fingerprint: string
  }>
}

curl -X POST http://localhost:18790/api/skills \
  -H 'Content-Type: application/json' \
  -d '{"id":"web-search","name":"Web Search","source":"curated","agentId":"<agent-id>","category":"web"}'

{ "ok": true, "deleted": false, "reason": "skill not found" }

{ "ok": true, "deleted": true, "removedRow": true }

{ "ok": true, "deleted": true, "removedRow": false }

curl -X DELETE "http://localhost:18790/api/skills?id=web-search&agentId=<agent-id>"

{ values: { execAsk: string; execSecurity?: string } | null }

curl "http://localhost:18790/api/exec-settings?agentId=<agent-id>"

{
  configs: Record<string, { execAsk: string }>
}

curl http://localhost:18790/api/exec-settings/all

{
  agentId: string // required
  values: { execAsk: string; execSecurity?: string } // required
}

{ "ok": true, "gateway": "applied" }

{ "ok": true, "gateway": "not-applicable" }

{ "error": "unknown execAsk: <value>" }

{
  "ok": false,
  "savedLocally": true,
  "error": "saved in clawboo, but the Gateway did not accept it: <reason>"
}

curl -X POST http://localhost:18790/api/exec-settings \
  -H 'Content-Type: application/json' \
  -d '{"agentId":"<agent-id>","values":{"execAsk":"always"}}'

{
  state: 'ok'
  sourceAgentId: string // OpenClaw's id for this agent
  entries: ExecAllowlistRow[] // this agent's own grants
  wildcard: ExecAllowlistRow[] // the fleet-wide '*' entry: applies here, not revocable here
  duplicatedInWildcard: string[] // keys that appear in both lists
  storedSecurity: string | null // what OpenClaw holds for this agent
  storedAsk: string | null
  defaultSecurity: string | null // the policy defaults a missing field falls back to
  defaultAsk: string | null
  updatedAtMs: number
}

interface ExecAllowlistRow {
  key: string // a fingerprint of the row's content; pass it back to revoke
  pattern: string
  argPattern: string | null
  source: string | null
  classification: ExecAllowlistClass // see the table below
  bucket: 'agent' | 'wildcard'
  lastUsedCommand: string | null // never set for a grant made with Always
  lastResolvedPath: string | null
  lastUsedAt: number | null
}

{ "state": "absent", "sourceAgentId": "<openclaw-agent-id>" }

{ "state": "not-applicable", "runtime": "clawboo-native" }

{
  state: 'unreadable'
  sourceAgentId: string
  error: string // redacted reason
  knownAgentCount: number
  knownAllowlistCount: number
}

curl "http://localhost:18790/api/exec-allowlist?agentId=<agent-id>"

{
  agentId: string // Clawboo's id for the agent
  keys: string[] // 1 to 200 keys, each a `key` from the GET
}

{ "outcome": "revoked", "removed": 2, "remaining": 3 }

{ "outcome": "already-absent", "error": "those grants were already gone" }

{
  "outcome": "blocked-wildcard",
  "keys": ["<key>"],
  "error": "that grant is set for every Boo, not just this one, so it cannot be removed here"
}

{ "outcome": "no-such-agent", "error": "this Boo has no policy to change" }

{
  "outcome": "not-verified",
  "keys": ["<key>"],
  "error": "the Gateway accepted the change and still lists those grants"
}

{ "state": "failed", "error": "<message>" }

{ "error": "agentId and a non-empty keys array are required" }

{ "error": "this runtime keeps no standing exec grants" }

{ "error": "Too many requests for this operation. Wait a moment and retry." }

curl -X POST http://localhost:18790/api/exec-allowlist/revoke \
  -H 'Content-Type: application/json' \
  -d '{"agentId":"<agent-id>","keys":["<key-from-the-GET>"]}'