Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
The plugin uses KIMI_API_KEY or KIMICODE_API_KEY and sends model traffic to https://api.kimi.com/coding/ when selected, which is expected for a third-party model provider plugin.
Install Mechanism
The package declares OpenClaw runtime extensions and package files only, with no npm install scripts, binaries, bundled skills, or automatic startup activation.
Instruction Scope
Instructions are limited to provider setup, model normalization, thinking-parameter handling, and tool-call stream parsing; no prompt injection, role changes, or unrelated agent instructions were found.
Persistence & Privilege
No file writes, background workers, credential scraping, privilege escalation, local indexing, or persistence mechanisms were found in the inspected artifacts.
Purpose & Capability
The package purpose is to register a Kimi provider, model catalog, onboarding defaults, API-key auth choices, and stream/payload normalization for Kimi models; the runtime code matches that purpose.
Assessment
Install this only if you intend to use Kimi/Moonshot as a model provider. Your prompts, images, tool context, and API key usage may be sent to Kimi's endpoint when you choose this provider, so review Kimi's account and data policies for your use case.Verification
Tags
OpenClaw Kimi Coding Provider
Official OpenClaw provider plugin for Kimi Coding.
Install from OpenClaw:
openclaw plugins install @openclaw/kimi-provider
openclaw gateway restart
See https://docs.openclaw.ai/providers/moonshot for setup and configuration.
Catalog notes
Model rows live in openclaw.plugin.json under modelCatalog.providers.kimi.
k3serves up to 1M context, tier-gated server-side;k3-256kis the cheaper 256K variant of the same weights. Both point atmoonshot/kimi-k3throughupstreamModel, which keeps theircompatcapability tiers aligned with themoonshotcatalog for the same model.- Legacy
k3[1m]was retired upstream and normalizes tok3for shipped configurations. KIMI_K3_MODEL_IDSinprovider-policy-api.tsmust cover exactly the catalog rows that carry a K3thinkingLevelMap;provider-catalog.test.tsasserts it.
