OpenClaw Zero Token

Use LLMs without API tokens — log in via browser once, then call ChatGPT, Claude, Gemini, DeepSeek, Qwen (intl/cn), Doubao, Kimi, Zhipu GLM, Grok, Xiaomi MiMo, Manus and more for free through a unified gateway.

License: MIT

English | 简体中文

Table of Contents

• Overview
• Zero Token docs (index)
• Product requirements (tracking, 中文)
• Upstream sync (Zero Token)
• Web models browser modes
• How It Works
• Quick Start
• Usage
• Configuration
• Troubleshooting
• Roadmap
• Adding New Platforms
• File Structure
• Security Notes
• Sync With Upstream
• Contributing
• License
• Acknowledgments
• Disclaimer

Overview

OpenClaw Zero Token is a fork of OpenClaw that focuses on removing API token cost by driving the official web UIs (browser login) instead of paid API keys.

Why Zero Token?

Supported providers

Tool calling

Web models can call local tools (web_search, web_fetch, exec, read, write, message) via prompt-injected tool definitions. Based on arXiv:2407.04997 and ComfyUI LLM Party (5k+ stars).

11/13 web models support tool calling (verified):

The middleware (src/zero-token/tool-calling/) only injects tool prompts when keywords in the user message suggest a tool action — normal chat stays short to reduce ban risk.

Agent file access is restricted by the configured workspace directory (see agents.defaults.workspace).

Extra features

AskOnce: one question, answers from all models.
AskOnce can broadcast a single query to multiple configured providers and show their replies side by side.

How It Works

High-level architecture

┌─────────────────────────────────────────────────────────────────────────────┐
│                              OpenClaw Zero Token                            │
├─────────────────────────────────────────────────────────────────────────────┤
│                                                                              │
│  ┌─────────────┐    ┌─────────────┐    ┌─────────────┐    ┌─────────────┐  │
│  │   Web UI    │    │  CLI/TUI    │    │   Gateway   │    │  Channels   │  │
│  │  (Lit 3.x)  │    │             │    │  (Port API) │    │ (Telegram…) │  │
│  └──────┬──────┘    └──────┬──────┘    └──────┬──────┘    └──────┬──────┘  │
│         │                  │                  │                  │          │
│         └──────────────────┴──────────────────┴──────────────────┘          │
│                                    │                                         │
│                           ┌────────▼────────┐                               │
│                           │   Agent Core    │                               │
│                           │  (PI-AI Engine) │                               │
│                           └────────┬────────┘                               │
│                                    │                                         │
│  ┌───────────────────────────────────────────────────────────────────────┐  │
│  │  Provider Layer                                                       │  │
│  │  DeepSeek Web (Zero Token)                                       ✅   │  │
│  │  Qwen Web intl/cn (Zero Token)                                  ✅   │  │
│  │  Kimi (Zero Token)                                              ✅   │  │
│  │  Claude Web (Zero Token)                                        ✅   │  │
│  │  Doubao (Zero Token)                                            ✅   │  │
│  │  ChatGPT Web (Zero Token)                                       ✅   │  │
│  │  Gemini Web (Zero Token)                                        ✅   │  │
│  │  Grok Web (Zero Token)                                          ✅   │  │
│  │  GLM Web (Zero Token)                                           ✅   │  │
│  │  Xiaomi MiMo (Zero Token)                                       ✅   │  │
│  │  Manus API (Token)                                              ✅   │  │
│  └───────────────────────────────────────────────────────────────────────┘  │
│                                                                              │
└─────────────────────────────────────────────────────────────────────────────┘

DeepSeek auth flow (example)

1. Start browser
   openclaw gateway  ──▶  Chrome (CDP: 18892, user-data-dir)

2. User logs in
   Browser  ──▶  https://chat.deepseek.com  (scan / password login)

3. Capture credentials
   Playwright CDP  ──▶  listen network requests
                    └─▶ intercept Authorization header + cookies

4. Store credentials
   auth.json  ◀──  { cookie, bearer, userAgent }

5. Call web API
   DeepSeek WebClient  ──▶  DeepSeek Web API  ──▶  chat.deepseek.com
   (reuses stored cookie + bearer token)

Quick Start

Platforms

• 🍎 macOS / 🐧 Linux: follow START_HERE.md; full install/config in INSTALLATION.md.
• 🪟 Windows: use WSL2 and then follow the Linux steps. Install WSL2: wsl --install, docs: https://docs.microsoft.com/windows/wsl/install

Requirements

• Node.js >= 22.12.0
• pnpm >= 9.0.0
• Chrome browser
• OS: macOS, Linux, or Windows (via WSL2)

Helper scripts (first-time & daily use)

First-time:
  1. Build          pnpm install && pnpm build && pnpm ui:build
  2. Start Chrome   ./start-chrome-debug.sh
  3. Login sites    Qwen intl/cn, Kimi, DeepSeek, ...
  4. Onboard        ./onboard.sh webauth
  5. Start server   ./server.sh

Daily:
  start-chrome-debug.sh → onboard.sh → server.sh
  server.sh [start|stop|restart|status] manages the gateway

Script overview (core 3 scripts):

Installation

Clone and build

git clone https://github.com/linuxhsj/openclaw-zero-token.git
cd openclaw-zero-token
pnpm install
pnpm build
pnpm ui:build

Configure authentication

# Start Chrome in debug mode (keep this terminal open)
./start-chrome-debug.sh

# Log into each web model in the browser tabs that open
# (DeepSeek, Qwen, Kimi, Claude, ChatGPT, Gemini, Grok, etc.)

# In a NEW terminal, run the auth wizard
./onboard.sh webauth

Start the gateway

./server.sh

Open the Web UI at the URL printed in the terminal.

Clean rebuild (if you get ERR_MODULE_NOT_FOUND)

rm -rf dist dist-runtime node_modules
pnpm install
pnpm build
pnpm ui:build
./server.sh restart

Note: Always use pnpm build (not npm run build). If you see hash mismatch errors like Cannot find module dist/xxx-HASH.js, do a clean rebuild as shown above.

Step 3: Start the gateway

./server.sh

This will start the HTTP gateway and Web UI.

Usage

Web UI

After ./server.sh the Web UI is started automatically. Open it in your browser and chat with any configured model.

Switch models

Use /model inside the chat box:

# Switch to Claude Web
/model claude-web

# Switch to Doubao
/model doubao-web

# Switch to DeepSeek
/model deepseek-web

# Or specify exact models
/model claude-web/claude-sonnet-4-6
/model doubao-web/doubao-seed-2.0
/model deepseek-web/deepseek-chat

Claude Web: Prefer the full model id: /model claude-web/claude-sonnet-4-6 (matches the catalog default). /model claude-web alone can fail to resolve or pick the intended model in some setups.

List available models

/models

Important: Only providers configured via ./onboard.sh webauth are written into openclaw.json and shown in /models.

The output shows:

• All available providers (e.g. claude-web, doubao-web, deepseek-web)
• Models under each provider
• Currently active model
• Aliases and config

Example:

Model                                      Input      Ctx      Local Auth  Tags
doubao-web/doubao-seed-2.0                 text       63k      no    no    default,configured,alias:Doubao Browser
claude-web/claude-sonnet-4-6         text+image 195k     no    no    configured,alias:Claude Web
deepseek-web/deepseek-chat                 text       64k      no    no    configured

HTTP API

curl http://127.0.0.1:3001/v1/chat/completions \
  -H "Authorization: Bearer YOUR_GATEWAY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "deepseek-web/deepseek-chat",
    "messages": [{"role": "user", "content": "Hello!"}]
  }'

CLI / TUI

node openclaw.mjs tui

Configuration

Example openclaw.json

{
  "auth": {
    "profiles": {
      "deepseek-web:default": {
        "provider": "deepseek-web",
        "mode": "api_key"
      }
    }
  },
  "models": {
    "providers": {
      "deepseek-web": {
        "baseUrl": "https://chat.deepseek.com",
        "api": "deepseek-web",
        "models": [
          {
            "id": "deepseek-chat",
            "name": "DeepSeek Chat",
            "contextWindow": 64000,
            "maxTokens": 4096
          },
          {
            "id": "deepseek-reasoner",
            "name": "DeepSeek Reasoner",
            "reasoning": true,
            "contextWindow": 64000,
            "maxTokens": 8192
          }
        ]
      }
    }
  },
  "gateway": {
    "port": 3001,
    "auth": {
      "mode": "token",
      "token": "your-gateway-token"
    }
  }
}

Troubleshooting

First run: use the onboarding wizard (recommended)

./onboard.sh webauth

The wizard will create all required directories and basic files.

Fix issues: doctor command

If you already ran the project but see missing-directories or similar errors:

node dist/index.mjs doctor

The doctor command will:

• ✅ Check all required directories
• ✅ Create missing directories
• ✅ Fix common permission issues
• ✅ Validate config file structure
• ✅ Detect multiple conflicting state directories
• ✅ Print detailed suggestions

Limitations:

• ❌ Does not create openclaw.json
• ❌ Does not create auth-profiles.json
• ✅ If those are missing/corrupt, rerun ./onboard.sh webauth

Roadmap

Current focus

• ✅ DeepSeek Web, Qwen intl/cn, Kimi, Claude Web, Doubao, ChatGPT Web, Gemini Web, Grok Web, GLM Web, GLM intl, Xiaomi MiMo, Manus API — all tested
• 🔧 Improve credential capture robustness
• 📝 Documentation improvements

Planned

• 🔜 Auto-refresh for expired web sessions

Adding New Platforms

To add a new web provider you usually need:

1. Auth module (src/zero-token/providers/{platform}-web-auth.ts)

export async function loginPlatformWeb(params: {
  onProgress: (msg: string) => void;
  openUrl: (url: string) => Promise<boolean>;
}): Promise<{ cookie: string; bearer: string; userAgent: string }> {
  // Automate browser login and capture credentials
}

2. API client (src/zero-token/providers/{platform}-web-client*.ts)

exp