Put OpenClaw into production without giving it every key
Alter's open-source OpenClaw plugin lets a team, or each of your clients, share one OpenClaw in Slack or Discord. Everyone signs in, uses their own accounts, and approves what the agent does for them.
A shared OpenClaw usually runs on the accounts of whoever set it up. Everyone in the channel reads and sends as that person, nothing waits for approval, and removing someone means rotating keys for everyone. OpenClaw's own multi-user mode is built for trusted people: its documentation (opens in a new tab) says session ownership is a usability feature, not a security boundary, and that people who must not reach each other's credentials need separate agents or gateways.
Each person, their own accounts
People sign in with your identity provider (Okta, Auth0, Clerk, WorkOS or any OIDC provider) and connect their own Gmail, Google Calendar, Drive, Slack, GitHub, Linear, Notion and more. One person's requests can never reach another person's accounts.
Writes can wait for the person who asked
Add an approval policy for writes in Alter, and sending, posting, creating or cancelling then waits for the person who made the request, never for whoever else is in the channel.
No account tokens on the gateway
Alter holds each person's Gmail, Slack and other account tokens and makes the call for them. Remove someone in your identity provider and their next request is refused.
Add it to your OpenClaw gateway
Create a free Alter account, connect your identity provider, turn on the accounts your team will use with an approval policy for writes, then install the plugin on your gateway. The guide walks through each step, Slack or Discord setup, and a ready Fly.io deployment.
openclaw plugins install npm:@alter-ai/openclaw-pluginopenclaw alter enable-tools
Running OpenClaw for clients?
Deploy one OpenClaw per client in the client's own Slack, each with its own Alter app and the client's own sign-in. Each of the client's people uses their own accounts, and you can show the client every call the agent made.
Beyond the built-in tools
The plugin ships tools for Gmail, Google Calendar, Drive, Slack, GitHub, Linear, Notion, Calendly, LinkedIn, X and web search. Alter connects 140+ services, and adding one to the plugin is a small tool file.
What the plugin does not cover
The plugin works in Slack and Discord. It controls the calls it makes to these services, not what OpenClaw does in a browser or on its host. Private messages stay private only when OpenClaw's session.dmScope is set per person, its built-in memory search is not left on its defaults, and sessions from before that change are removed. The plugin's multi-user limits guide (opens in a new tab) covers each step.
Keep reading
Put your agents under privileged access control.
Book a 30-minute walkthrough with the founders.