unraidclaw

OpenClaw plugin to manage your Unraid server through AI agents — Docker, VMs, array, shares, system, notifications, and more, with permission control.

This is the OpenClaw plugin for UnraidClaw. It exposes 55 tools to any AI agent running on OpenClaw, letting it monitor and manage your Unraid server. The plugin talks to the UnraidClaw gateway (a permission-enforcing REST API) running on your Unraid box.

Prerequisites

1. The UnraidClaw plugin installed on your Unraid server — install it from the Unraid Community Apps store, or see the main repo. It runs the gateway on port 9876 (HTTPS).
2. An UnraidClaw API key — generate one on the Settings → UnraidClaw page in the Unraid WebGUI.
3. OpenClaw installed (openclaw --version).

Install

npm pack unraidclaw && openclaw plugins install unraidclaw-*.tgz && rm unraidclaw-*.tgz

To update to the latest version:

rm -rf ~/.openclaw/extensions/unraidclaw && npm pack unraidclaw && openclaw plugins install unraidclaw-*.tgz && rm unraidclaw-*.tgz

Configure

Edit ~/.openclaw/openclaw.json.

Single server:

{
  "plugins": {
    "allow": ["unraidclaw"],
    "entries": {
      "unraidclaw": {
        "config": {
          "serverUrl": "https://YOUR_UNRAID_IP:9876",
          "apiKey": "YOUR_API_KEY",
          "tlsSkipVerify": true
        }
      }
    }
  }
}

Multiple servers:

{
  "plugins": {
    "allow": ["unraidclaw"],
    "entries": {
      "unraidclaw": {
        "config": {
          "servers": [
            { "name": "home", "serverUrl": "https://192.168.1.100:9876", "apiKey": "...", "tlsSkipVerify": true, "default": true },
            { "name": "work", "serverUrl": "https://10.0.0.50:9876", "apiKey": "..." }
          ]
        }
      }
    }
  }
}

With multi-server config, every tool accepts an optional server parameter (e.g. unraid_docker_list(server: "work")); the default server is used when it's omitted.

Set tlsSkipVerify: true when using UnraidClaw's auto-generated self-signed certificate.

Keeping the API key out of the config file

You don't have to hard-code the key in openclaw.json. Two options:

Environment variable — OpenClaw expands ${VAR} references at config-load time:

"apiKey": "${UNRAID_API_KEY}"

Provider-backed secret (SecretRef) — point apiKey at one of your configured secret providers; OpenClaw resolves it before the plugin loads, so the plugin only ever sees the resolved string:

"apiKey": { "source": "file", "provider": "default", "id": "/unraidclaw_key" }

source is one of file, env, or exec; provider names a provider from your secrets.providers config; id is the lookup key. Both forms also work per-server on servers[].apiKey. (Requires unraidclaw 0.1.12+.)

Usage

Once installed and configured, just ask your agent:

• "List all running Docker containers"
• "Stop the plex container"
• "What's the array status?"
• "Show me disk temperatures"
• "Create a new nginx container with port 8080"
• "Find me a Community Applications backup tool"
• "Install Jellyfin from Community Applications, media on /mnt/user/media"
• "Update the jellyfin container to the latest image"
• "Which of my Unraid plugins have updates?"
• "Check parity status"
• "Reboot the server"

Tools

55 tools across 13 categories:

unraid_ca_update and unraid_ca_remove act on an installed app, so their name is the container's name from the Docker tab, not the app's name in the catalog. Update keeps the configuration saved on the server and restores the running or stopped state; remove deletes the container and leaves appdata, volumes, the image and the template alone. Both take dryRun.

The six plugin tools manage Unraid .plg plugins through Unraid's own plugin manager. Installing one runs vendor code as root, checking for an update downloads a plugin file and stages it, and removing one runs the plugin's removal script, which may take its data with it. All four mutating tools take dryRun.

Every tool is gated by a 30-key resource:action permission matrix configured from the Unraid WebGUI, so you control exactly what agents can do.

Links

• GitHub
• Issues
• Unraid Community Apps

License

MIT