Manage your Linux and Windows servers from OpenClaw using natural language. 17 tools for server management, security audits, inventory scans, and cross-fleet search — works with any LLM model.
OpenClaw is an open-source personal AI assistant that runs locally. The ManageLM plugin adds 17 tools that let you manage your entire server infrastructure using natural language — from any LLM model (Claude, GPT, Gemini, Llama, and more).
You describe what you need in plain English. OpenClaw selects the right tool, sends the instruction to the agent running on your server via the ManageLM portal, and returns the result.
List servers, run tasks, check status, view security findings, scan inventory, search SSH keys, and more.
Works with Claude, GPT, Gemini, Llama, or any model supported by OpenClaw. Tools are model-agnostic.
Run security audits on any server and review findings with severity levels, explanations, and remediation.
Discover installed packages, running services, and containers across your servers.
Search inventory, security findings, SSH keys, and sudo rules across all servers without dispatching commands.
Real-time alerts when agents go online/offline, tasks complete or fail, and new servers enroll.
The plugin communicates with the ManageLM portal via REST API. The portal dispatches tasks to agents over WebSocket. Agents execute tasks using a local LLM and report results back. No SSH, no inbound ports on your servers.
openclaw plugins install managelm
Download the tarball from GitHub Releases and install locally:
openclaw plugins install managelm-openclaw-1.0.0.tar.gz
The plugin uses an API key for authentication. Configure it via the OpenClaw CLI:
Set your API Key — find it in your ManageLM portal under Settings > MCP & API
Trust the plugin: openclaw config set plugins.allow '["managelm"]'
Enable tools: openclaw config set tools.allow '["managelm"]' and openclaw config set tools.profile "full"
Restart the gateway and start a fresh session
# Set API key openclaw config set plugins.entries.managelm.config.apiKey "mlm_ak_your_key" # Trust plugin and enable tools openclaw config set plugins.allow '["managelm"]' openclaw config set tools.allow '["managelm"]' openclaw config set tools.profile "full" # Restart gateway openclaw gateway stop openclaw gateway
Self-hosted users: Set the Portal URL to your own portal address: openclaw config set plugins.entries.managelm.config.portalUrl "https://portal.example.com"
The plugin provides 17 tools that OpenClaw's agent uses to interact with your infrastructure:
| Tool | Description |
|---|---|
managelm_agents | List all servers with status, health metrics, OS info, and IP addresses |
managelm_agent_info | Get detailed information about a specific server |
managelm_run | Execute a skill-based task on a server (requires target, skill, instruction) |
managelm_answer_task | Answer an interactive task question (agent needs input) |
| Tool | Description |
|---|---|
managelm_task_status | Check status and result of a task by its ID |
managelm_task_history | View recent tasks for a server |
managelm_task_changes | View file changes made by a task |
managelm_revert_task | Revert file changes from a previous task |
| Tool | Description |
|---|---|
managelm_security_audit | Run a security audit (SSH, firewall, ports, TLS, Docker, kernel) |
managelm_inventory_scan | Run an inventory scan (services, packages, containers, storage) |
| Tool | Description |
|---|---|
managelm_search_agents | Search servers by health metrics, OS, status, or group |
managelm_search_inventory | Search installed packages, running services, and containers |
managelm_search_security | Search security audit findings by severity or category |
managelm_search_ssh_keys | Search SSH keys across infrastructure with identity mapping |
managelm_search_sudo | Search sudo privileges across all servers |
| Tool | Description |
|---|---|
managelm_account | Get account plan, usage limits, and consumption details |
managelm_send_email | Send an email report or summary to yourself |
When using managelm_run, you specify a skill that determines what the agent can do. The LLM automatically selects the right skill based on your request.
| Skill | Description |
|---|---|
base | Read files, system info, resource monitoring, network diagnostics |
system | OS config, performance tuning, hostname, timezone, kernel parameters |
packages | Install, remove, update packages across apt/dnf/yum/pacman |
services | Systemd units, cron jobs, logs, process management |
users | User accounts, groups, SSH keys, sudo, password policies |
network | Interfaces, routes, DNS, ports, connectivity testing |
security | Audits, fail2ban, SSH hardening, SELinux/AppArmor, SSL/TLS |
files | Read, write, and manage files on remote servers |
firewall | iptables, nftables, firewalld, ufw |
docker | Containers, images, compose, volumes, networks |
apache | Virtual hosts, modules, SSL, configuration |
nginx | Server blocks, reverse proxy, SSL, load balancing |
mysql | Databases, users, queries, backups, replication |
postgresql | Databases, roles, queries, backups, extensions |
backup | Create, schedule, restore, verify backups |
certificates | Let's Encrypt, self-signed, inspection, renewal |
git | Clone, pull, status, log on remote servers |
Tip: You don't need to know skill names. Just describe what you want — "install nginx on web-01" — and the LLM will select the right skill automatically.
Open the OpenClaw TUI and type your request naturally:
# Server overview list my servers which servers have CPU above 80%? # System administration check disk usage on web-prod-01 list running services on lb-01 # Package management install nginx on web-prod-01 update all packages on db-primary # Security run a security audit on db-primary show me all critical security findings # Infrastructure search search inventory for postfix who has SSH access to production servers? show all NOPASSWD sudo rules
Optionally receive real-time events from ManageLM. The plugin exposes a /managelm/webhook HTTP route on the OpenClaw gateway that accepts HMAC-signed events.
openclaw config set plugins.entries.managelm.config.webhookSecret "whsec_your_secret"
Point a ManageLM webhook (Portal > Settings > Webhooks) to your gateway's /managelm/webhook endpoint. Supported events:
agent.enrolled — new server awaiting approvalagent.online / agent.offline — connectivity changestask.completed / task.failed — task resultstask.needs_input — agent needs a responsebase skill has no write commands. Mutating skills must be explicitly assigned by an admin.Run openclaw config set plugins.entries.managelm.config.apiKey "mlm_ak_...". You can find your key in the portal under Settings > MCP & API.
Make sure plugin tools are enabled: openclaw config set tools.allow '["managelm"]' and openclaw config set tools.profile "full". Restart the gateway after changes.
Start a fresh session — type /new in the TUI or use openclaw tui --session fresh. Old sessions may have cached failed responses.
Verify the portal URL is correct. The default is https://app.managelm.com. If self-hosting, set your portal URL in the plugin config.
Either no agents are enrolled, or your API key doesn't have access. Check the portal dashboard to verify agents are enrolled and online.
Run openclaw plugins inspect managelm to check plugin status. Ensure it shows "Status: loaded" and lists 17 tools. If not, reinstall with openclaw plugins install managelm --force.