ClawHub
Code Pluginsource linkedVerified

Lobsterv2026.10.6

Lobster workflow tool plugin for typed pipelines and resumable approvals.

@openclaw/lobster·runtime lobster·by @openclaw
openclaw plugins install clawhub:@openclaw/lobster
Latest release: v2026.10.6Download zip

Compatibility

Built With Open Claw Version
2026.10.6
Min Gateway Version
>=2026.4.25
Plugin Api Range
>=2026.10.6
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Credentials
Workflow execution inherits the Gateway environment. The tool is optional and unavailable to sandboxed contexts; its working-directory restriction does not isolate filesystem access.
✓
Install Mechanism
Standard plugin installation uses pinned dependencies and a bundled runtime entry. No package lifecycle scripts are declared; dependency internals are outside the supplied files.
✓
Instruction Scope
Instructions require presenting approval requests to the user. Side effects are disclosed, and tight tool allowlists are recommended.
ℹ
Persistence & Privilege
Startup registers the optional tool without running workflows. Resumable checkpoints fit the purpose; the supplied code adds no scheduler, background worker, or privilege escalation.
✓
Purpose & Capability
Typed workflows and resumable approvals match the package description and [upstream design](https://github.com/openclaw/lobster).
Assessment
Enable this tool only for trusted agents and workflows. Workflows run with Gateway permissions; place approval gates before sending, posting, or deleting, and restrict tools reachable through the bridge. Keep resume tokens private, as explained in the [Lobster documentation](https://docs.openclaw.ai/tools/lobster).

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Source
github.com/openclaw/openclaw
Commit
fe06181dc5ec
Tag
fe06181dc5ecc01cf8904abbfc26925925efefbc
Provenance
No
Scan status
clean

Tags

alpha
2026.5.19-alpha.1
beta
2026.10.10-beta.3
latest
2026.10.6

Lobster (plugin)

Adds the lobster agent tool as an optional plugin tool.

Install

openclaw plugins install @openclaw/lobster

Restart the Gateway after installing or updating the plugin.

What this is

  • Lobster is a standalone workflow shell (typed JSON-first pipelines + approval/input checkpoints).
  • This plugin integrates Lobster with OpenClaw without core changes.
  • Input checkpoints return the question and schema; resume with responseJson containing the user's answer as JSON. See structured input.

Enable

Because this tool can trigger side effects (via workflows), it is registered with optional: true.

Enable it in an agent allowlist:

{
  "agents": {
    "entries": {
      "main": {
        "default": true,
        "tools": {
          "allow": [
            "lobster" // plugin id (enables all tools from this plugin)
          ]
        }
      }
    }
  }
}

Using openclaw.invoke (Lobster → OpenClaw tools)

Some Lobster pipelines may include a openclaw.invoke step to call back into OpenClaw tools/plugins (for example: gog for Google Workspace, gh for GitHub, message.send, etc.).

For this to work, the OpenClaw Gateway must expose the tool bridge endpoint and the target tool must be allowed by policy:

  • OpenClaw provides an HTTP endpoint: POST /tools/invoke.
  • The request is gated by gateway auth (e.g. Authorization: Bearer … when token auth is enabled).
  • The invoked tool is gated by tool policy (global + per-agent + provider + group policy). If the tool is not allowed, OpenClaw returns 404 Tool not available.

Allowlisting recommended

To avoid letting workflows call arbitrary tools, set a tight allowlist on the agent that will be used by openclaw.invoke.

Example (allow only a small set of tools):

{
  "agents": {
    "entries": {
      "main": {
        "default": true,
        "tools": {
          "allow": ["lobster", "web_fetch", "web_search", "gog", "gh"],
          "deny": ["gateway"],
        },
      },
    },
  },
}

Notes:

  • If tools.allow is omitted or empty, it behaves like "allow everything (except denied)". For a real allowlist, set a non-empty allow.
  • Tool names depend on which plugins you have installed/enabled.

Security

  • Runs Lobster in process via the published @clawdbot/lobster/core runtime.
  • Does not manage OAuth/tokens.
  • Uses timeouts, stdout caps, and strict JSON envelope parsing.

Docs

Package

  • Plugin id: lobster
  • Tool: lobster
  • Package: @openclaw/lobster
  • Minimum OpenClaw host: 2026.4.25