Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
The plugin contacts Z.AI-compatible endpoints, including api.z.ai and open.bigmodel.cn, and sends the configured API key for endpoint probing and normal provider usage, which is expected for this integration.
Install Mechanism
The package manifest declares an OpenClaw runtime extension at ./dist/index.js, no package install scripts, and onStartup is false in the plugin manifest.
Instruction Scope
No bundled skill instructions or prompt-injection style directives were found; the runtime surface is provider registration and onboarding/auth helpers.
Persistence & Privilege
It can store or update an OpenClaw API-key auth profile through SDK helpers and has a scoped legacy fallback that reads ~/.pi/agent/auth.json for z-ai/zai tokens for usage auth; this is sensitive but purpose-aligned and limited.
Purpose & Capability
The artifacts implement an OpenClaw provider for Z.AI models, endpoint selection, model catalog configuration, reasoning parameter handling, media metadata registration, and usage lookup, all aligned with the provider-plugin purpose.
Assessment
Install this only if you intend to use Z.AI through OpenClaw. Expect it to handle a Z.AI API key, make provider endpoint probes, store provider auth in OpenClaw's auth profile flow, and potentially read a legacy Pi Agent auth file for a Z.AI token fallback; verify publisher provenance if the official OpenClaw origin matters to you.Verification
Tags
Z.AI OpenClaw provider
Official OpenClaw provider plugin for Z.AI.
Install
openclaw plugins install @openclaw/zai-provider
Docs
See docs/providers/zai.md in the OpenClaw repository, or the published docs at https://docs.openclaw.ai/providers/zai.