Resolving Disconnection Issues in OpenClaw Control UI

If you're working with OpenClaw and encounter the 'Disconnected (1008): control ui requires HTTPS or localhost (secure context)' error, you're not alone. This issue often arises when attempting to run the interface on a Hostinger VPS, as outlined in a user query on Reddit.
The core of this issue is that the control UI requires a secure connection provided by HTTPS or localhost, but your setup might be using HTTP. To restore access, you have a few options:
Solution Options
- Switch to HTTPS: Implement HTTPS using a tool like Tailscale Serve. This involves setting up Tailscale on your VPS to create a secure connection, ultimately preventing your browser from blocking the device identity.
- Use Localhost: If possible, run the application on localhost by visiting
http://127.0.0.1:18789directly on the gateway host. - Allow Insecure HTTP Auth: For those who need to stay on HTTP, modify the configuration to allow insecure authentication. This involves setting
gateway.controlUi.allowInsecureAuth: truein the configuration file, though this should only be done with care as it reduces your security posture.
Practical Steps
Start by determining which solution best fits your environment:
- For HTTPS: Follow the Tailscale Serve documentation to configure HTTPS access.
- For Localhost: Ensure your application and the machine accessing it are both on the same network, then open the specified URL.
- For Insecure HTTP: Update your VPS configuration file to include
gateway.controlUi.allowInsecureAuth: true. Be sure you understand the security implications.
This needs some configuration on your VPS. You'll typically be editing a configuration file, often found either in your project's directory or a system-wide configuration path depending on your setup.
📖 Read the full source: r/clawdbot
👀 See Also

Mastering OpenClaw Skills: A Step-by-Step Guide
Unlock the full potential of OpenClaw with this comprehensive guide on building new skills. Learn key strategies to enhance your projects using AI coding agents.

Running OpenClaw Locally with Ollama to Avoid API Costs
A Reddit user shares their experience switching from API-based OpenClaw to running it locally with Ollama, eliminating API costs while maintaining workflows. They created a step-by-step installation video guide.

Claude API Rate Limits: Timezone Windows, Context Management, and MCP Overhead
Analysis of Claude API rate limits reveals tighter restrictions during peak hours (5am-11am PT / 8am-2pm ET weekdays), with context management and MCP server usage significantly impacting token consumption. Practical strategies include working outside peak windows, starting fresh conversations for new tasks, and auditing MCP integrations.

OpenClaw Failure Patterns: 42 Real Incidents in 28 Days
A developer running OpenClaw daily documented 42 specific failures across eight categories, including AI hallucinations, authentication breakdowns, and automation that costs more time than it saves. The source provides concrete examples like Google OAuth 7-day token expiration and Opus 4.6 adding unwanted metadata to files.