Introduction
Every few months a new wave of cloud-hosted AI assistants shows up, and most of them want your data, your money, and an always-on internet connection in exchange for a chat box. OpenClaw flips that bargain. It’s a private AI agent you can deploy on a VPS you own, wire up to your own Telegram or WhatsApp, install “skills” on demand, and schedule like a cron job — without renting a SaaS seat or leaking conversation history to a third party.
This guide walks through deploying OpenClaw to the cloud end to end using Hostinger’s one-click Docker template as a concrete example. The same patterns apply if you’re bringing your own VPS on DigitalOcean, Hetzner, or AWS — the moving pieces are a small Linux box, Docker, a gateway token, and optional messaging-channel credentials. By the end you’ll have a running private assistant, a clean mental model of the architecture, and the security and cost knobs you should know about before you scale it past a hobby workload.
Table of contents
- What OpenClaw actually is
- Why deploy it to the cloud instead of locally
- Prerequisites and sizing your VPS
- Step-by-step cloud deployment on Hostinger
- First-run configuration — gateway token, login, channels
- Installing skills and wiring up real tools
- Scheduling tasks with the cron-job feature
- Connecting Telegram and WhatsApp safely
- Where else you can host it — provider trade-offs
- Realistic cost breakdown
- Security and privacy posture
- Troubleshooting common deployment issues
- Best practices for running it in production
- Common mistakes to avoid
- Conclusion
- Frequently asked questions
What OpenClaw actually is
OpenClaw is a self-hostable private AI agent. Think of it as a personal assistant that lives on a server you control, talks to whichever LLM you point it at, and exposes itself through a web UI plus optional channels like Telegram and WhatsApp. It isn’t a model — it’s the runtime, the chat surface, the tool layer, and the scheduler stitched together.
What you get out of the box
- A chat UI with persistent sessions and channels
- A skills marketplace — installable tools for things like Notion, GitHub, arXiv, calendars
- Agent profiles you can customise per persona
- Built-in cron scheduling for recurring tasks
- WebSocket URL for embedding in other apps
- Bring-your-own-keys for major LLM providers
What it isn’t
- Not a foundation model — you wire in your own LLM credentials
- Not a managed SaaS — uptime and patching are your problem
- Not a no-trust black box — you can read the container, mount volumes, and inspect logs
- Not a replacement for a production multi-tenant agent platform
The mental model worth keeping: OpenClaw is the body, the LLM API you connect is the brain, and skills are the hands. The cloud VPS is where the body lives.
Why deploy it to the cloud instead of locally
Running OpenClaw on your laptop works for a weekend of tinkering. The moment you want it to actually behave like an assistant — checking your email, pinging you on Telegram at 9am, running an overnight research job — you need it on a machine that doesn’t sleep, doesn’t move networks, and isn’t fighting your browser for RAM.
Always on
Scheduled jobs and webhook-driven channels need a stable, reachable IP. A cloud VPS gives you 24/7 uptime without leaving your laptop plugged in overnight.
Stable public endpoint
Telegram bots, WhatsApp webhooks, and Slack callbacks all want a public URL with HTTPS. A VPS with a fixed IP and a real domain is the path of least pain.
Predictable resources
Running a few agents in parallel, with a vector store and a job queue, eats RAM fast. A right-sized VPS is cheaper than babysitting Docker on your dev machine.
The trade-off is clear: cloud hosting costs a few hundred rupees or a handful of dollars a month, but it buys you reliability, real channels, and the ability to forget the box exists most days.
Prerequisites and sizing your VPS
OpenClaw itself is fairly modest, but skills, vector stores, and the LLM SDKs that run alongside it add up. The realistic floor for a usable single-user deployment is roughly:
Recommended specs
- CPU: 2 vCPU minimum — 4 if you plan to run heavier skills or local embeddings
- RAM: 8 GB minimum — the entry tier with 4 GB will swap once you install a few skills
- Disk: 100 GB NVMe — logs, vector indexes, and downloaded skill assets pile up
- Bandwidth: a few TB/month is plenty for personal use
- OS: any modern Linux with Docker support — Ubuntu 22.04 LTS is the safe default
- Region: pick one close to you — voice and webhook latency are noticeable above 100 ms
You’ll also need:
- A VPS account at a provider that exposes Docker template provisioning or root SSH
- API credentials for whichever LLM you want the agent to use
- Optional — a Telegram bot token (via
@BotFather) and/or WhatsApp Business credentials - A domain name if you want a clean URL instead of
http://<ip>:port
Step-by-step cloud deployment on Hostinger
Hostinger ships a one-click OpenClaw template under its KVM VPS plans, which is the fastest way to go from zero to a running instance. The same flow generalises to any provider — the only real difference is whether you click a template or run a Docker command yourself.
The full path, end to end
- Pick a plan. Open Hostinger’s VPS pricing page and pick KVM2 or higher — 2 vCPU, 8 GB RAM, 100 GB NVMe. KVM1 with 4 GB RAM works but will struggle once you add skills.
- Create the account and complete checkout. A monthly billing cycle is fine while you’re evaluating — you can switch to annual later.
- Trigger setup. After payment, the dashboard prompts you to finish provisioning. Click Setup on the new VPS card.
- Choose the closest region. The on-screen latency number is a useful sanity check — aim for under 50 ms from where you actually use it.
- Pick the deployment type. You’ll see three options — Plain OS, Docker Application, and Control Panel Application. Choose Docker Application.
-
Search and select OpenClaw. The template gallery has
a search box — type
openclawand pick the official one-click image. - Fill in the optional fields. The setup form asks for a gateway token (auto-generated, copy it somewhere safe), and lets you optionally paste a Telegram bot token or WhatsApp number. Skip the messaging fields for now if you want to add them later from inside the UI.
- Click Deploy. Provisioning takes roughly five minutes. The dashboard will show a status banner while the container starts up.
- Open the app. Once status flips to ready, click Open. The browser tab loads the OpenClaw login screen.
If you’re bringing your own VPS, the equivalent of step 6–8 is a single Docker run command from the OpenClaw docs, plus a reverse proxy (Caddy or Nginx) in front for HTTPS. Most providers’ one-click templates are a thin wrapper over that.
First-run configuration — gateway token, login, channels
The first screen after deployment asks for your OpenClaw gateway token. This is the secret printed during setup — paste it in and click Login. You should land on a chat interface that looks a lot like a generic AI chat app, with extra panels for agents, skills, sessions, and channels.
Treat the gateway token like a password
Anyone with the token can talk to your agent and run skills on your behalf. Don’t paste it into chats, screenshots, or pastebins. Store it in a password manager and rotate it from the dashboard if it ever leaks. The UI flags exposed tokens as suspicious and prompts you to rotate — trust that prompt.
Quick sanity check — ask the assistant “what can you do?” The default reply lists the broad capability areas: answering questions, research, summarisation, brainstorming, planning, working with files, and managing reminders. If you see that response, the LLM connection is healthy and you can move on to wiring up real capabilities.
Installing skills and wiring up real tools
A bare OpenClaw can chat. A configured one can read your calendar, file GitHub issues, search arXiv, push tasks to Todoist, and write to Notion. Those capabilities ship as skills — modular tool integrations you install from a registry called Claw Hub.
Two ways to install
- Browse the skills store and click install
- Ask the agent in chat — e.g. “please install the arXiv skill”
- Either way, the agent walks you through any required credentials
Useful starter skills
- arXiv — paper search and summarisation, no API key needed
- Google Calendar — reads and writes events
- Notion — notes and knowledge base
- GitHub — issues, PRs, repo browsing
- Todoist or TickTick — task capture
- Home Assistant — smart home automation
Conversational install looks like this — ask, confirm, paste credentials, done:
You: please install the arxiv skill
Agent: Installing arxiv... done. No API key required.
Try: "search arxiv for ‘attention is all you need’ and summarise"
You: search arxiv for "attention is all you need" and summarise it
Agent: [calls arxiv.search tool]
Vaswani et al., 2017. Transformer architecture replacing recurrence
with self-attention…
Watch for skill warnings
Claw Hub scans skills for suspicious code and surfaces warnings before install. If you see a “flagged as suspicious” banner, default to review first rather than force-install. Treat unreviewed skills like any other third-party package — check the author, the source, and the permissions before granting access to your data.
Scheduling tasks with the cron-job feature
The piece that makes a private agent feel like an assistant rather than a chatbot is scheduling. OpenClaw lets you create cron jobs in plain English — the agent translates your request into a stored schedule and runs the underlying prompt at the configured interval.
You: every morning at 9am IST, search arxiv for recent agentic-AI
research and summarise the top papers
Agent: [calls cron.create tool]
Created daily job "agentic-ai-digest" running 09:00 IST.
I’ll post results into this channel.
You: run it now to verify
Agent: [executes immediately]
Digest: NextMem (latent factual memory for LLM agents),
MirrorThinker (heavy-duty research with self-verification),
Recursive Language Models under uncertainty…
A few practical notes on the scheduler:
- Job timeouts default to roughly 60 seconds — bump them for research jobs that need to call multiple tools
- Output is posted into the channel the job was created from — pick a dedicated channel for noisy recurring jobs
- You can list, edit, and delete jobs in chat or from the UI’s scheduler panel
- Long-running jobs use isolated workers — expect a small delay between trigger and result
Connecting Telegram and WhatsApp safely
Channels turn OpenClaw from a browser app into something that actually shows up where you live — your phone’s messaging apps. The Telegram path is the cleanest, so it’s worth walking through.
Telegram setup in five steps
-
Open Telegram and start a chat with
@BotFather. -
Send
/newbot, then a display name, then a username ending inbot(Telegram requires this suffix). -
Copy the HTTP API token BotFather hands back — it looks like
1234567890:AAH…. - Back in OpenClaw, go to Channels → Telegram and paste the token. The agent confirms with a “Telegram is now configured” message.
-
Open the bot inside Telegram, send
/start, and you’re talking to OpenClaw on your phone.
If you ever paste a token into chat by accident
The agent will flag it as exposed and refuse to use it. The right recovery is to go back to
BotFather, send /revoke,
regenerate, and paste the fresh token through the Channels UI rather than the chat. The same
hygiene applies to WhatsApp credentials and any other channel secret.
WhatsApp setup follows the same pattern — create a WhatsApp Business app, grab the credentials, paste them into Channels. The cost and approval friction is higher than Telegram, so most people start with Telegram and add WhatsApp once the workflow is proven.
Where else you can host it — provider trade-offs
Hostinger’s one-click flow is the lowest-friction path, but it isn’t the only one. Different providers shine in different scenarios.
Hostinger VPS
Best for: people who want one-click OpenClaw with no Docker wrangling. INR pricing, Mumbai region, and a managed Docker UI. Trade-off — fewer regions and less granular control than hyperscalers.
Hetzner / DigitalOcean
Best for: developers comfortable with SSH. Better price-to-RAM ratio, mature snapshot and firewall tooling, and a wider region list. You’ll run the Docker compose file yourself.
AWS Lightsail / Azure / GCP
Best for: teams already standardised on a cloud, or workloads that need to live inside a VPC alongside other services. More expensive at the small end, more capable at the large end.
Bare-metal / home server
Best for: people with a NAS, a Raspberry Pi cluster, or a spare Mac mini. Cheapest long-term, but you own the uptime, the public endpoint (Cloudflare Tunnel helps), and the patching.
Realistic cost breakdown
The sticker price of the VPS is rarely the whole story. Here’s a rough monthly budget for a personal OpenClaw deployment that actually does useful work.
- VPS: roughly ₹800–₹2,000 per month for 2–4 vCPU, 8–16 GB RAM — pick the higher tier if you plan to install many skills
- Domain name: ₹800–₹1,200 per year — optional, but needed for clean HTTPS URLs
- LLM API usage: highly variable — a moderately active personal assistant lands at $5–$30 a month on a major provider
- Backups: snapshot pricing varies by provider — budget ~10% of VPS cost
- WhatsApp Business: per-conversation pricing — cheap for low volume, adds up at scale
Compared to paying for a multi-seat SaaS AI assistant, a self-hosted OpenClaw is usually cheaper above two or three users and competitive even for a single power user — especially once you factor in the lack of vendor lock-in.
Security and privacy posture
The promise of self-hosting is privacy — but only if you configure it that way. A misconfigured OpenClaw on a public IP is an open door to whoever finds the URL first.
Do this on day one
- Rotate the default gateway token after install
- Put the UI behind HTTPS with a real certificate (Caddy + Let’s Encrypt is two lines of config)
- Restrict SSH to key auth only — disable password login
- Set up an OS-level firewall — allow only ports 22, 80, 443, and the OpenClaw UI port
- Enable automatic OS security updates
- Take regular snapshots of the VPS volume
Watch for these mistakes
- Exposing the raw container port to the public internet without TLS
- Sharing the gateway token in screenshots when asking for help
- Installing unreviewed skills that ask for broad credentials
- Leaving the default admin user with a weak passphrase
- Storing channel tokens in plain-text environment files committed to git
- Skipping log rotation — the disk will fill faster than you think
The reassuring bit — because OpenClaw lives entirely on your VPS, your conversations, files, and integrations don’t round-trip through a vendor’s SaaS plane. The only third party that sees content is whichever LLM provider you point it at, and you can swap that in the settings any time.
Troubleshooting common deployment issues
- Setup hangs at “configuring your VPS”. Five minutes is normal. Beyond ten, refresh the dashboard — the status sometimes updates after the underlying container is already healthy. If it’s still stuck, redeploy and pick a different region.
- Login screen rejects the gateway token. The token is case-sensitive and usually long — copy it from the dashboard “copy” button rather than typing it. If the token actually leaked, rotate it from the VPS console.
- Agent replies say it has no tools. Skills installed from chat occasionally race with the worker process. Refresh the page and re-run the request, or install from the Skills UI directly.
-
Telegram bot doesn’t respond. Check that the
token was pasted into Channels rather than chat, then send
/startto the bot inside Telegram. Webhooks need a few seconds to register the first time. - Scheduled job didn’t fire. Bump the timeout and check the job’s last-run log. The default 60-second cap is too short for jobs that chain multiple skills.
- Disk full alerts. Logs and vector indexes grow quickly — rotate logs, prune unused skills, and consider attaching a larger volume.
Best practices for running it in production
Do this
- Treat the VPS like infrastructure — back it up, monitor it, patch it
- Use a domain plus HTTPS from day one, not
http://<ip> - Separate channels per workflow — one for digests, one for chat, one for alerts
- Review skill permissions before installing — treat them like browser extensions
- Set explicit timeouts on scheduled jobs so they don’t silently fail
- Document which LLM provider and model the agent is wired to — future you will thank you
Avoid this
- Running OpenClaw as root — use a non-root user with Docker group access
- Mixing personal and work credentials in the same instance — spin up two
- Leaving the UI publicly reachable without auth on top
- Installing every skill that looks fun — each one is attack surface
- Skipping backups because “it’s just a personal assistant”
Common mistakes to avoid
- Undersizing the VPS. The 4 GB tier looks fine on paper and falls over once you add Docker, two skills, and a vector index. Start at 8 GB.
- Skipping the rotate-token step. Default tokens often end up in screenshots and support threads. Rotate before you do anything else.
- Wiring every channel at once. Get one channel solid — usually Telegram — before you add WhatsApp and Slack on top.
- Treating the agent as autonomous. A private AI assistant is still an assistant. Review what it’s about to do for anything that touches money, identity, or production systems.
- Ignoring observability. If you don’t watch logs and job histories, you won’t notice a silently failing cron until it’s a week late.
Conclusion
Deploying OpenClaw to the cloud is no longer the weekend project it used to be. A one-click template plus a sensible VPS plan gets you from credit card to working private assistant in under thirty minutes, and the architecture — container on a VPS, your LLM keys, your channels, your skills — is simple enough to reason about even when things go sideways.
The interesting work starts after the deployment. Picking the right skills, scheduling jobs that actually save you time, locking down channels, and treating the box like infrastructure rather than a toy is what separates a private AI agent that gathers dust from one that quietly becomes part of your daily workflow. Start small, keep the surface area tight, and let the assistant earn each new permission you grant it.
Explore More on DevShelf
-
OpenClaw — Tool Profile
Full overview of OpenClaw's agent runtime, skill marketplace, channel integrations, and pricing.
-
Run OpenClaw Locally with Ollama
The local alternative to cloud deployment — zero API costs, full privacy, using Ollama for on-device inference.