Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
The plugin runs on startup and exposes operational metadata such as model/provider names, tool names, token counts, costs, message channels, and memory/liveness metrics, but this is expected for a Prometheus diagnostics exporter and the route is marked gateway-authenticated/trusted-operator.
Install Mechanism
Install metadata declares a normal OpenClaw plugin package with runtime extension ./dist/index.js, no package scripts, and no bundled skill instructions.
Instruction Scope
Runtime behavior is limited to subscribing to OpenClaw internal diagnostics, normalizing/redacting metric labels where applicable, maintaining an in-memory metric store, and serving GET/HEAD metrics responses.
Persistence & Privilege
No disk persistence, privilege escalation, shell execution, credential access, or outbound exfiltration behavior was found; metrics are kept in memory and reset on service stop.
Purpose & Capability
The package purpose is a Prometheus diagnostics exporter, and the runtime code registers a diagnostics service plus an authenticated metrics HTTP route that aggregates internal diagnostic events into Prometheus text format.
Assessment
Install only where authenticated operators should be able to scrape Gateway diagnostics. Treat the endpoint as operationally sensitive because metrics can reveal usage patterns, model/tool names, costs, and runtime health, even though the plugin behavior is disclosed and purpose-aligned.Verification
Tags
@openclaw/diagnostics-prometheus
Official Prometheus diagnostics exporter for OpenClaw.
This plugin exposes OpenClaw Gateway runtime metrics in Prometheus text format for Prometheus, Grafana, VictoriaMetrics, and compatible scrapers.
Install
openclaw plugins install @openclaw/diagnostics-prometheus
Restart the Gateway after installing or updating the plugin.
Configure
Enable the plugin and set the scrape endpoint options in plugins.entries.diagnostics-prometheus.config.
The full config surface, metric names, and scrape examples live in the docs:
Package
- Plugin id:
diagnostics-prometheus - Package:
@openclaw/diagnostics-prometheus - Minimum OpenClaw host:
2026.4.25
