[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"article-how-to-set-up-openclaw-safely-zh":3,"article-related-how-to-set-up-openclaw-safely-zh":31,"series-ai-agent-83c2f8f6-3710-466e-b52c-473b811f0535":84},{"id":4,"slug":5,"title":6,"content":7,"summary":8,"source":9,"source_url":10,"author":11,"image_url":12,"cover_image":12,"category":13,"language":14,"translated_content":11,"related_article_id":15,"keywords":16,"key_takeaways":23,"views":27,"created_at":28,"published_at":29,"topic_cluster_id":30},"83c2f8f6-3710-466e-b52c-473b811f0535","how-to-set-up-openclaw-safely-zh","如何安全架設 OpenClaw","\u003Cp data-speakable=\"summary\">在自己的電腦上安裝 \u003Ca href=\"\u002Ftag\u002Fopenclaw\">OpenClaw\u003C\u002Fa>，連上模型、工作區與一個\u003Ca href=\"\u002Fnews\u002Fgame-thread-prompt-turns-nba-chatter-into-template-zh\">聊天\u003C\u002Fa>頻道，並完成基本安全檢查。\u003C\u002Fp>\u003Cp>這篇給想把 AI 助手部署在自己掌控的機器上的開發者。照著做完，你會拿到可運作的 OpenClaw、可用的模型連線、隔離過的工作區，以及一個能收發訊息的聊天頻道。\u003C\u002Fp>\u003Cp>OpenClaw 是自架式 \u003Ca href=\"\u002Ftag\u002Fagent\">agent\u003C\u002Fa> runtime，不是單純聊天機器人。它會透過本機 Gateway 路由請求、執行允許的動作，並把敏感金鑰留在本機配置中，所以第一次安裝就要把安全邊界設好。\u003C\u002Fp>\u003Ch2>開始之前\u003C\u002Fh2>\u003Cul>\u003Cli>Node.js 24，或 Node.js 22.19\u003C\u002Fli>\u003Cli>Git 2.40+\u003C\u002Fli>\u003Cli>Anthropic、OpenAI、Google、AWS Bedrock 的 API key，或本機模型伺服器如 Ollama、LM Studio\u003C\u002Fli>\u003Cli>若使用本機模型，至少 64,000 token context window\u003C\u002Fli>\u003Cli>macOS 13+、Ubuntu 22.04+，或 Windows 11 搭配 WSL2 與 Ubuntu\u003C\u002Fli>\u003Cli>一個不放私人檔案的專用工作區資料夾\u003C\u002Fli>\u003Cli>可選：WhatsApp、Telegram、Discord、Slack、Google Chat、Signal、iMessage、Matrix、Microsoft Teams 的聊天帳號\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>Step 1: 取得 OpenClaw 原始碼\u003C\u002Fh2>\u003Cp>目的：先把官方程式碼抓到本機，後續安裝、設定與啟動都以同一份來源為準。先從 \u003Ca href=\"\u002Ftag\u002Fgithub\">GitHub\u003C\u002Fa> 倉庫開始，避免混用來路不明的分支或打包檔。\u003C\u002Fp>\n\u003Cfigure class=\"my-6\">\u003Cimg src=\"https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780549368665-1t2l.png\" alt=\"如何安全架設 OpenClaw\" class=\"rounded-xl w-full\" loading=\"lazy\" \u002F>\u003C\u002Ffigure>\n\u003Cp>官方文件在 \u003Ca href=\"https:\u002F\u002Fdocs.openclaw.ai\">docs.openclaw.ai\u003C\u002Fa>，原始碼在 \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw\">github.com\u002Fopenclaw\u002Fopenclaw\u003C\u002Fa>。\u003C\u002Fp>\u003Cpre>\u003Ccode>git clone https:\u002F\u002Fgithub.com\u002Fopenclaw\u002Fopenclaw.git\ncd openclaw\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>驗收：你應該看到倉庫檔案、Gateway 相關目錄，以及目前工作目錄已切換到 openclaw。\u003C\u002Fp>\u003Ch2>Step 2: 安裝 Node 相依套件\u003C\u002Fh2>\u003Cp>目的：先把本機 runtime 準備好，讓 Gateway 可以啟動並讀取設定。這一步完成前，不要急著填模型金鑰或測試 channel。\u003C\u002Fp>\n\u003Cfigure class=\"my-6\">\u003Cimg src=\"https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780549366024-dhp8.png\" alt=\"如何安全架設 OpenClaw\" class=\"rounded-xl w-full\" loading=\"lazy\" \u002F>\u003C\u002Ffigure>\n\u003Cpre>\u003Ccode>npm install\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>驗收：你應該看到安裝完成訊息，且 node_modules 目錄已出現。\u003C\u002Fp>\u003Ch2>Step 3: 建立環境設定檔\u003C\u002Fh2>\u003Cp>目的：把模型 provider、基礎 URL 與金鑰放進 Gateway 的環境變數，避免直接寫進聊天端或其他外部應用。這一步是整個安全設定的核心。\u003C\u002Fp>\u003Cpre>\u003Ccode>cp .env.example .env\n# 編輯 .env，加入你的 provider key\n# 可能的欄位包含 OPENAI_API_KEY、ANTHROPIC_API_KEY、OLLAMA_BASE_URL\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>驗收：你應該能打開 .env，確認模型設定已存在，而且聊天客戶端仍看不到這些金鑰。\u003C\u002Fp>\u003Ch2>Step 4: 啟動 Gateway 服務\u003C\u002Fh2>\u003Cp>目的：讓 OpenClaw 的請求路由、工具執行與\u003Ca href=\"\u002Fnews\u002Ftether-turboquant-cuts-ai-memory-use-5x-zh\">記憶\u003C\u002Fa>管理開始運作。Gateway 是整個系統的控制點，先把它跑起來，後面才能接 channel。\u003C\u002Fp>\u003Cpre>\u003Ccode>npm run gateway\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>驗收：你應該看到 Gateway 已啟動的訊息，並且本機 18789 埠口正在監聽。\u003C\u002Fp>\u003Ch2>Step 5: 建立隔離工作區與記憶檔\u003C\u002Fh2>\u003Cp>目的：把持久化記憶與任務狀態放到獨立\u003Ca href=\"\u002Fnews\u002Fcoinstats-api-turns-crypto-data-into-one-stack-zh\">資料\u003C\u002Fa>夾，不要混進家目錄或私人文件。OpenClaw 會使用 MEMORY.md、SOUL.md、AGENTS.md 之類的 Markdown 檔來保存狀態，所以工作區要乾淨。\u003C\u002Fp>\u003Cpre>\u003Ccode>mkdir -p ~\u002F.openclaw\u002Fworkspace\nprintf \"workspace ready\\n\" > ~\u002F.openclaw\u002Fworkspace\u002FMEMORY.md\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>驗收：你應該看到工作區資料夾與 MEMORY.md 檔案，且下一次 session 會讀取這個位置。\u003C\u002Fp>\u003Ch2>Step 6: 連接一個頻道並執行測試任務\u003C\u002Fh2>\u003Cp>目的：確認 OpenClaw 能接收訊息、經由 Gateway 路由，並回傳工具輔助結果。先只接一個 channel，例如 Slack 或 Telegram，等流程穩定再加其他整合。\u003C\u002Fp>\u003Cpre>\u003Ccode># 這裡以設定檔為準，接上你選的 channel\n# 然後送出測試提示：\n# \"列出我的工作區檔案並摘要內容。\"\u003C\u002Fcode>\u003C\u002Fpre>\u003Cp>驗收：你應該在同一個頻道收到回覆，Gateway logs 也應顯示一次成功的 routed request 與 tool call 或檔案讀取。\u003C\u002Fp>\u003Ctable>\u003Cthead>\u003Ctr>\u003Cth>指標\u003C\u002Fth>\u003Cth>基準／優化前\u003C\u002Fth>\u003Cth>結果／優化後\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd>模型連線\u003C\u002Ftd>\u003Ctd>尚未設定 provider\u003C\u002Ftd>\u003Ctd>OpenClaw 可把提示送到指定模型\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>動作執行\u003C\u002Ftd>\u003Ctd>只有聊天回覆\u003C\u002Ftd>\u003Ctd>Gateway 可執行 shell、檔案與瀏覽器工具\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>工作區安全\u003C\u002Ftd>\u003Ctd>家目錄或混合檔案\u003C\u002Ftd>\u003Ctd>獨立隔離工作區與記憶檔\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch2>常見錯誤\u003C\u002Fh2>\u003Cul>\u003Cli>Node 版本不符：升級到 Node.js 24，或在固定環境使用 Node.js 22.19。\u003C\u002Fli>\u003Cli>把工作區指到家目錄：改用專用資料夾，並把私人檔案與金鑰移出去。\u003C\u002Fli>\u003Cli>直接安裝未審核的技能：先看 SKILL.md，再決定是否允許 shell 指令或陌生二進位檔。\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>接下來可以看什麼\u003C\u002Fh2>\u003Cp>OpenClaw 跑起來後，下一步是加上權限邊界、限制工具可用範圍、設定 \u003Ca href=\"\u002Ftag\u002Ftoken\">token\u003C\u002Fa> 上限，然後先測一個小型自動化，再擴到瀏覽器控制、倉庫工作流或定時摘要。\u003C\u002Fp>","在自己的電腦上安裝 OpenClaw，連上模型、工作區與一個聊天頻道，並完成基本安全檢查。","www.datacamp.com","https:\u002F\u002Fwww.datacamp.com\u002Fblog\u002Fwhat-is-openclaw",null,"https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780549368665-1t2l.png","ai-agent","zh","39acb8a3-431d-49bc-b3ff-aa74800eabfa",[17,18,19,20,21,22],"OpenClaw","Node.js","Gateway","workspace","API key","self-hosted agent",[24,25,26],"先用官方 GitHub 倉庫與文件完成安裝，再進行任何模型或 channel 設定。","把 API key 留在 .env 與 Gateway，並使用獨立工作區避免碰到私人檔案。","先跑通單一頻道與測試任務，再逐步加入更多工具與自動化。",2,"2026-06-04T05:02:21.26625+00:00","2026-06-04T05:02:21.25+00:00","e3b68196-9e64-4c18-a3b6-a73e73bfb367",{"tags":32,"relatedLang":43,"relatedPosts":47},[33,35,37,39,41],{"name":21,"slug":34},"api-key",{"name":19,"slug":36},"gateway",{"name":18,"slug":38},"nodejs",{"name":17,"slug":40},"openclaw",{"name":42,"slug":20},"Workspace",{"id":15,"slug":44,"title":45,"language":46},"how-to-set-up-openclaw-safely-en","How to Set Up OpenClaw Safely","en",[48,54,60,66,72,78],{"id":49,"slug":50,"title":51,"cover_image":52,"image_url":52,"created_at":53,"category":13},"0ba5b1a8-82c5-464a-bea5-9a2c8730da74","aws-devops-agent-turns-incident-chaos-into-triage-zh","AWS DevOps Agent 把事故排查變成三步","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780466689960-g1sv.png","2026-06-03T06:03:14.154923+00:00",{"id":55,"slug":56,"title":57,"cover_image":58,"image_url":58,"created_at":59,"category":13},"841eac88-b0f0-4a4c-9e1e-efc3b5c16281","kimi-k26-live-300-agent-workflows-zh","Kimi K2.6 上線：300 代理工作流","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780430574285-hqpn.png","2026-06-02T20:02:24.972179+00:00",{"id":61,"slug":62,"title":63,"cover_image":64,"image_url":64,"created_at":65,"category":13},"f0411957-bcdb-42d9-a267-3e90ae7d9cb1","how-to-take-a-sabbatical-at-openai-zh","怎麼申請 OpenAI sabbatical","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780398216422-8fi7.png","2026-06-02T11:02:25.74372+00:00",{"id":67,"slug":68,"title":69,"cover_image":70,"image_url":70,"created_at":71,"category":13},"37a5e429-4235-439c-9b05-bb377085462c","8-steps-build-production-rag-with-langchain-zh","8 步驟打造可上線的 LangChain RAG","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780178597493-4hz7.png","2026-05-30T22:02:48.14022+00:00",{"id":73,"slug":74,"title":75,"cover_image":76,"image_url":76,"created_at":77,"category":13},"e73c041b-852b-44c3-85aa-0f1e2e5848e3","ai-agents-hit-chaos-mode-claude-code-openclaw-zh","Claude Code＋OpenClaw 讓 AI 代理失控升溫","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780160576178-yqcs.png","2026-05-30T17:02:25.725767+00:00",{"id":79,"slug":80,"title":81,"cover_image":82,"image_url":82,"created_at":83,"category":13},"a708dcdf-cae4-4483-a256-5df230e66543","how-to-use-claude-4-8-models-in-python-zh","怎麼用 Python 呼叫 Claude 4.8","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1780009366539-s0pd.png","2026-05-28T23:02:20.794444+00:00",[85,90,95,100,105,110,115,120,125,130],{"id":86,"slug":87,"title":88,"created_at":89},"4ae1e197-1d3d-4233-8733-eafe9cb6438b","claude-now-uses-your-pc-to-finish-tasks-zh","Claude 開始幫你操作電腦","2026-03-26T07:20:48.457387+00:00",{"id":91,"slug":92,"title":93,"created_at":94},"5bede67f-e21c-413d-9ab8-54a3c3d26227","googles-2026-ai-agent-report-decoded-zh","Google 2026 AI Agent 報告解讀","2026-03-26T11:15:22.651956+00:00",{"id":96,"slug":97,"title":98,"created_at":99},"2987d097-563f-46c7-b76f-b558d8ef7c2b","kimi-k25-review-stronger-still-not-legend-zh","Kimi K2.5 評測：更強，但還不是神作","2026-03-27T07:15:55.277513+00:00",{"id":101,"slug":102,"title":103,"created_at":104},"95c9053b-e3f4-4cb5-aace-5c54f4c9e044","claude-code-controls-mac-desktop-zh","Claude Code 也能操控 Mac 了","2026-03-28T03:01:58.58121+00:00",{"id":106,"slug":107,"title":108,"created_at":109},"dc58e153-e3a8-4c06-9b96-1aa64eabbf5f","cloudflare-100x-faster-ai-agent-sandbox-zh","Cloudflare 的 AI 沙箱跑超快","2026-03-28T03:09:44.142236+00:00",{"id":111,"slug":112,"title":113,"created_at":114},"1c8afc56-253f-47a2-979f-1065ff072f2a","openai-backs-isara-agent-swarm-bet-zh","OpenAI 挺 Isara 的 agent swarm …","2026-03-28T03:15:27.513155+00:00",{"id":116,"slug":117,"title":118,"created_at":119},"7379b422-576e-45df-ad5a-d57a0d9dd467","openai-plan-automated-ai-researcher-zh","OpenAI 想做自動化 AI 研究員","2026-03-28T03:17:42.090548+00:00",{"id":121,"slug":122,"title":123,"created_at":124},"48c9889e-86df-450b-a356-e4a4b7c83c5b","harness-engineering-ai-agent-reliability-2026-zh","駕馭工程：從「馬具」到「作業系統」，AI Agent 可靠性的終極密碼","2026-03-31T06:42:53.556721+00:00",{"id":126,"slug":127,"title":128,"created_at":129},"96d8e8c8-1edd-475d-9145-b1e7a1b02b65","mcp-explained-from-prompts-to-production-zh","MCP 怎麼把提示詞變工作流","2026-04-01T09:24:39.321274+00:00",{"id":131,"slug":132,"title":133,"created_at":134},"f2ca7720-b471-4ce5-9336-2a9ac2a876fd","amazon-bedrock-agents-multi-agent-workflows-zh","Amazon Bedrock Agents 進入多代理工作流","2026-04-01T09:30:29.945429+00:00"]