OpenClaw Guild: Multi-user AI agent server for teams
What It Is
OpenClaw Guild is a multi-user AI agent server built on top of OpenClaw, designed to solve the problem of restricting access to different agents for different employees in a business environment. It transforms the single-user OpenClaw into a shared, private instance for teams.
Key Features
- Multi-user architecture: Role-based access control with isolated data per agent
- 4-tier memory: Agent, user, role, and company-level scoped visibility
- Admin dashboard: Web UI for user management without CLI requirements
- Skill system: Reusable workflows like "linkedin-poster" and "seo-audit"
- Docker-compose deployment: 15-minute setup process
Architecture
- Supabase backend (Postgres + pgvector + RLS) running locally
- JWT auth per agent for isolated contexts
- Envoy proxy for per-agent network filtering
- OpenClaw tool policies for capability control
Security Model
Three-layer defense-in-depth approach:
- Supabase Row Level Security for data isolation at database level
- OpenClaw tool policies for capability control
- Envoy proxy for network filtering with per-agent domain allowlists
No single layer is considered sufficient; together they provide comprehensive security.
Practical Use Case
The developers are running 15+ agents across their company, with marketing alone using 7 autonomous agents working 24/7:
- marketing-lead: Strategy, coordination, client communication
- marketing-content: Blog posts, newsletters, long-form content
- marketing-seo: Search optimization, keyword research, AEO
- marketing-social: LinkedIn, social posting, engagement
- marketing-website: WordPress management, landing pages
- marketing-adwords: Google Ads campaign management
- marketing-prospect-research: B2B prospect research, enrichment
Additional agents cover management (executive reporting, decision support, KPI tracking), coding (development tasks, code review, audit-focused security), and local LLM testing (Ollama integration, embedding generation, model evaluation).
Data is isolated between departments (marketing can't see finance or HR), and agents have network access proxied and restricted to only what they need. Unlike NemoClaw, it works with WebSocket-dependent applications like Discord.
Web Admin Dashboard
The admin UI allows:
- Creating and managing users and roles
- Assigning agents to departments
- Configuring tool policies per agent
- Setting network allowlists at domain level
- Browsing audit logs
- Viewing memory tiers (agent/user/role/company)
Availability
Open-source under AGPL-3.0 License. Free to self-host, customize, or resell. Available on GitHub:
- Guild Core: https://github.com/SpireTech/openclaw-guild
- Admin UI: https://github.com/SpireTech/openclaw-guild-admin
📖 Read the full source: r/openclaw
👀 See Also
Hipocampus: A Persistent Memory System for AI Agents Using Compaction Trees
Hipocampus addresses the problem of AI agents forgetting context between sessions by implementing a compaction tree that compresses conversation history through five levels: raw → daily → weekly → monthly → root, with a topic index called ROOT.md.
Building a Self-Improving Knowledge System with Claude Code and Obsidian
A developer built a 25-tool system that gives Claude Code persistent memory through semantic search, knowledge graphs, and spaced repetition over an Obsidian vault. The system indexes content with bge-m3 embeddings, detects contradictions, auto-prunes stale notes, and generates Obsidian Canvas maps automatically.
Skill Scaffolder: Build OpenClaw Skills Without Writing Code
Skill Scaffolder is an open-source tool that lets users create OpenClaw skills by describing what they want in plain English. It handles the entire process—interviewing users, writing skill files, testing, and installation—without requiring YAML, Python, or config files.
Claude Code Adds Auto Mode for Permission Decisions
Claude Code now has an auto mode that lets Claude handle permission decisions instead of requiring manual approval for every file write and bash command. This mode includes safeguards that check each action before it runs, with a classifier reviewing tool calls for potentially destructive actions.