Latest release: v2026.10.6Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
Metrics reveal operational information, including agent and skill names, model usage, and costs. The exact scrape route requires Gateway authentication and operator.read or an implying scope; subscriptions request no private data and exclude log records.
Install Mechanism
Standard OpenClaw/npm installation loads bundled JavaScript. No install scripts, remote executable downloads, or shell execution were found.
Instruction Scope
No bundled skills or agent-directed instructions. SkillSpector was inapplicable, so the executable plugin was reviewed directly.
Persistence & Privilege
Startup activation is declared. Metrics remain in memory with a 2,048-series cap; stopping unsubscribes listeners and clears state. No credential-store access, filesystem persistence, or spawned workers were found.
Purpose & Capability
Bundled code aggregates diagnostic counters, timings, usage, and memory statistics, consistent with the README and [OpenClaw documentation](https://docs.openclaw.ai/gateway/prometheus).
Assessment
Keep the metrics endpoint authenticated and limit access to trusted monitoring clients. Protect scraper credentials and treat collected usage, cost, and agent information as internal operational data.Verification
Tags
@openclaw/diagnostics-prometheus
Official Prometheus diagnostics exporter for OpenClaw.
This plugin exposes OpenClaw Gateway runtime metrics in Prometheus text format for Prometheus, Grafana, VictoriaMetrics, and compatible scrapers.
Install
openclaw plugins install @openclaw/diagnostics-prometheus
Restart the Gateway after installing or updating the plugin.
Configure
Enable the plugin and set the scrape endpoint options in plugins.entries.diagnostics-prometheus.config.
The full config surface, metric names, and scrape examples live in the docs:
Package
- Plugin id:
diagnostics-prometheus - Package:
@openclaw/diagnostics-prometheus - Minimum OpenClaw host:
2026.4.25