Infrastructure

OpenClaw AI Agent Setup Guide on Contabo VPS

By Olaleye Ibrahim Olanrewaju12 min read
What you'll build: A fully self-hosted AI agent powered by OpenClaw on a Contabo VPS, featuring SSH access, a terminal UI, a web-based control panel, and integrations with OpenAI, Anthropic, Telegram, Discord, and more.

Part 1: What Is OpenClaw?

OpenClaw is an open-source AI agent that runs on your own server. In addition to answering questions, OpenClaw executes actions: automating tasks, interacting with AI models, and building workflows.

Why Self-Host?

FeatureCloud AI ServicesOpenClaw (Self-Hosted)
Data controlOn someone else's servers✅ Entirely on your infrastructure
Integration controlLimited by provider✅ You choose the integrations
Cost controlProvider-set pricing✅ You manage API usage & costs
PrivacyShared infrastructure✅ Fully private
⚠️ Important

OpenClaw is the agent framework. The AI intelligence comes from the provider you connect (OpenAI, Anthropic, etc.). You will need an API key from your chosen provider, which incurs usage-based costs per token.


Part 2: Choosing a Contabo VPS Plan

Step 1: Visit the OpenClaw Hosting Page

  1. Go to the OpenClaw hosting page on Contabo.
  2. Review the recommended configurations for running OpenClaw.

Step 2: Select a Plan

The Cloud VPS 10 is a great starting point, but pick the tier that suits your needs.

💡 Tip

For light usage and experimentation, the Cloud VPS 10 is more than enough. If you plan to run additional services alongside OpenClaw or handle heavier workloads, consider a higher tier.

Step 3: Configure Your Server

  1. Click Configure on your chosen plan.
  2. Choose your server location: pick the region closest to you for lower latency (e.g., Europe, US, Asia).
  3. Set your admin password (this is critical):
Used ForDetails
SSH accessYou'll type this when connecting via SSH
Initial admin credentialYour first login password for the server
⛔ Caution

Choose a strong, unique password and save it somewhere secure. You'll need it repeatedly throughout this guide.

  1. Click Next.

Part 3: Ordering & Setting Up Your Server

For Existing Contabo Customers

  1. Log in with your existing credentials.
  2. You'll go straight to the order confirmation page.

For New Customers

Before reaching the order confirmation, you'll need to:

  1. Enter your personal information.
  2. Add a billing address.
  3. Set up a payment method.
📝 Note

This is a one-time setup. Future orders skip this step entirely.

Confirm Your Order

  1. Double-check your server specs, location, and that OpenClaw is listed as your selected application.
  2. Complete your order.

After Ordering

  1. You'll receive a confirmation email with:
    • Your server's IP address
    • A reminder about the password you set
  2. Log into the Contabo Customer Control Panel at new.contabo.com.
  3. Navigate to Servers and Hosting → VPS.
  4. Your new server will appear here.
📝 Note

The OpenClaw installation can take up to 30 minutes to complete in the background, but usually takes much less. You'll see the server status update while it's installing. Once it's ready, you can connect via SSH.


Part 4: Adding OpenClaw to an Existing VPS

If you already have a Contabo VPS, you can add OpenClaw without ordering a new server.

⛔ Caution

Reinstalling wipes ALL existing data on the server. Make sure you've backed up everything you need before proceeding!

Steps

  1. In your Customer Control Panel, find the server you want to use.
  2. Click the three dots (⋮) in the More section.
  3. Select Reinstall from the menu.
  4. In the installation options, go to Application Installation.
  5. From the dropdown, select OpenClaw.
  6. Set your admin password (same rules as before: this is your SSH and server access password).
  7. Note the warning, then click Install.

The status will change to Installing. Once complete, you're ready for SSH configuration.


Part 5: Connecting via SSH

OpenClaw doesn't have a public web interface by default. All initial configuration is done via SSH.

Step 1: Get Your Server IP

Copy your server's IP address from the Contabo Customer Control Panel.

Step 2: Open Your Terminal

Operating SystemApplication to Use
macOSTerminal
LinuxTerminal
Windows 10/11PowerShell

Step 3: Connect

bashssh root@YOUR_SERVER_IP
  • Press Enter.
  • When prompted, type your admin password and press Enter.
  • Once connected, the command prompt indicates you are logged into your server.
💡 Tip

On your first connection, you may be asked to trust the server fingerprint. Type yes and press Enter.


Part 6: Running the Onboarding Wizard

After logging in, OpenClaw may start the onboarding wizard automatically. If it doesn't, run:

bashopenclaw onboard

Step 1: Security Acknowledgment

OpenClaw reads files on your server and executes actions if those capabilities are enabled. Confirm that you understand these implications.

⚠️ Warning

OpenClaw can interact with your server at a deep level. Only enable capabilities you trust and understand.

Action: Confirm that you understand.

Step 2: Choose Onboarding Mode

ModeBest For
Quick Start (recommended)Configures basic settings you can adjust later
ManualFull control over every setting during setup

Action: Select Quick Start.

Step 3: Select Your AI Provider

OpenClaw supports multiple AI providers:

  • OpenAI
  • Anthropic
  • Others

Action: Choose your preferred provider (this guide uses OpenAI as an example).

Step 4: Choose Authentication Method

  • API Key (Recommended)

Step 5: Enter Your API Key

This is the most critical step. OpenClaw will not function without a valid API key.

How to Get an OpenAI API Key

  1. Go to platform.openai.com.
  2. Navigate to API Keys.
  3. Click Create new secret key.
  4. Copy the key immediately (you won't be able to see it again).

Action: Paste your API key into the terminal.

⚠️ Important

Using AI provider APIs incurs usage-based costs per token, which can add up quickly depending on your usage. You are responsible for managing your API keys, usage limits, and OpenClaw security. Contabo does not control or monitor how OpenClaw uses these services.

Step 6: Choose Your Preferred Model

Select the AI model you want OpenClaw to use (e.g., GPT-4, GPT-3.5-turbo, etc.).

Step 7: Configure Messaging Channels (Optional)

OpenClaw can receive messages from multiple platforms:

PlatformSetup
TelegramNow or later
DiscordNow or later
SlackNow or later
WhatsAppNow or later

Action: Set up now or skip and configure later.

Step 8: Enable Skills and Hooks (Optional)

Skills are capabilities you can enable for OpenClaw:

Skill TypeExamplesNotes
Web searchBrowse and summarize web pagesMay require additional API keys
File accessRead/write files on the serverPowerful (enable with caution)
Code executionRun scripts and commandsRequires additional dependencies

Action: Enable what you need or skip for now.

Onboarding Complete

After a few moments, OpenClaw:

  • Installs its gateway service
  • Initializes the agents

OpenClaw is now installed and running on your server! 🎉


Part 7: Interacting via the Terminal UI (TUI)

The Terminal UI is the recommended way to interact with your OpenClaw agent directly from SSH.

Launch the TUI

bashopenclaw tui
💡 Tip

You can also type tui at the end of the onboarding wizard to jump straight in.

Using the TUI

  • Type messages just like you would with any AI assistant.
  • OpenClaw responds using the AI model you configured.
  • If you enabled system tools, you can ask OpenClaw to perform actions on your server directly.

Example Interactions

You: What's my current disk usage?
OpenClaw: [executes df -h and returns results]

You: Summarize the latest system logs.
OpenClaw: [reads /var/log/syslog and provides a summary]

Exit the TUI

  • Press Ctrl + C, or
  • Follow the TUI exit instructions displayed on screen.

Part 8: Accessing the Web-Based Control UI

OpenClaw also has a web-based Control UI with a visual, browser-based experience.

Why It's Not Publicly Accessible

The Control UI runs on localhost:18789, making it accessible only from the server itself. This layout keeps the AI agent secure.

Access It with SSH Port Forwarding

SSH port forwarding creates a secure tunnel from your local computer to the server.

Step 1: Open a New Terminal Window

On your local computer, open a new terminal window (keep any existing SSH sessions open).

Step 2: Create the SSH Tunnel

bashssh -L 18789:localhost:18789 root@YOUR_SERVER_IP
  • Enter your password when prompted.
  • The terminal will appear to hang, which is normal. The tunnel is running.
⚠️ Important

Keep this terminal window open for as long as you need access to the Control UI. Closing it will close the tunnel.

Step 3: Generate a Tokenized Link

In a separate terminal window, SSH into your server:

bashssh root@YOUR_SERVER_IP

Then run:

bashopenclaw dashboard

After a few moments, OpenClaw will output a tokenized link.

Step 4: Open the Control UI

  1. Copy the tokenized link.
  2. Paste it into your browser.
  3. The OpenClaw Control UI appears! 🎉

What You Can Do in the Control UI

  • 💬 Chat with your agent
  • ⚙️ Adjust settings
  • 🔌 Enable or disable skills
  • 📊 Monitor activity

Closing the Control UI

  1. When you're done, press Ctrl + C in the terminal running the SSH tunnel.
  2. The Control UI will become inaccessible until you create the tunnel again.
📝 Note

This is a security feature, not a bug. Your agent is only accessible when you explicitly create the tunnel.



Part 9: Next Steps & Advanced Configuration

Now that OpenClaw is installed, here's what to explore next:

Connect Messaging Platforms

Link OpenClaw to your preferred messaging apps so you can interact with your agent from anywhere:

  • Telegram (useful for mobile interaction)
  • Discord (useful if you are already active in Discord communities)
  • Slack (designed for team and work environments)
  • WhatsApp (suited for personal use)

Enable Advanced Skills

Extend OpenClaw's capabilities through skills:

  • Web browsing and research
  • File management
  • Code execution and scripting
  • Custom integrations

Build Custom Workflows

Create AI-powered automation workflows tailored to your specific needs:

  • Task automation
  • Data processing pipelines
  • Scheduled operations
  • Multi-step AI chains

Part 10: Security Best Practices

⛔ Caution

OpenClaw has access to your server and can execute actions. Treat security seriously.

Essential Security Measures

MeasureWhy It Matters
Use strong passwordsPrevents brute-force attacks on SSH and admin access
Keep software updatedPatches known vulnerabilities
Use SSH keysMore secure than password-based SSH authentication
Monitor AI provider usageAPI costs can escalate quickly with heavy usage
Limit enabled skillsOnly enable capabilities you actually need
Review agent activityRegularly check what actions your agent is performing

Monitor API Costs

OpenClaw's power comes with API costs that vary based on usage:

FactorImpact on Cost
Model choiceGPT-4 is more expensive than GPT-3.5
Message lengthLonger prompts and responses = more tokens
Frequency of useMore interactions = higher bills
Skills with API callsWeb search and similar skills may use additional API credits
💡 Tip

Set usage limits in your AI provider's dashboard (e.g., OpenAI's usage page) to avoid unexpected bills. Start with conservative limits and adjust as you understand your usage patterns.


Quick Reference: All Commands

bash# --- Connect to Your Server ---
ssh root@YOUR_SERVER_IP

# --- Run the Onboarding Wizard ---
openclaw onboard

# --- Launch the Terminal UI ---
openclaw tui

# --- Generate the Control UI Dashboard Link ---
openclaw dashboard

# --- SSH Port Forwarding (run on your LOCAL machine) ---
ssh -L 18789:localhost:18789 root@YOUR_SERVER_IP

# --- Open the Dashboard in Browser (after port forwarding) ---
# Copy the tokenized link from 'openclaw dashboard' and paste into your browser

Continue Reading

Related articles