openclaw-syncralis

⚠️SECURITY WARNING:Generating a download link creates a public tunnel. This makes the specific local workspace file accessible toanyone who possesses the linkwhen you share that link. Ensure you understand this exposure boundary before sharing sensitive local files.

"mcp": { "servers": { "syncralis": { "command": "node", "args": [ "/home/node/.openclaw/extensions/openclaw-syncralis/server.js" ], "env": { "NODE_ENV": "production", "FILE_SERVER_HOST": "127.0.0.1", "WORKSPACE_DIR": "", "PUBLIC_TUNNEL_URL": "https://your-ngrok-url.ngrok-free.app", "NGROK_API_PORT": 4040, "TAVILY_API_KEY": "your_tavily_key", "BRAVE_API_KEY": "your_brave_key", "URL_SIGNING_SECRET": "your_custom_32_character_secret_here" } } } }, "plugins": { "entries": { "openclaw-syncralis": { "enabled": true } } }

Option 2: Docker Environment Setup (Recommended for Production):

OpenClaw often executes tools as ephemeral child processes. In a containerized setup, it is highly recommended to run openclaw alongside Ngrok to serve the workspace volume 24/7. This guarantees your download links remain active even after the MCP process shuts down.
- Configure youropenclaw.jsongenerally inside (/home/node/.openclaw/openclaw.json):

"mcp": { "servers": { "syncralis": { "command": "node", "args": [ "/home/node/.openclaw/extensions/openclaw-syncralis/server.js" ], "env": { "NODE_ENV": "production", "FILE_SERVER_HOST": "0.0.0.0", "WORKSPACE_DIR": "", "PUBLIC_TUNNEL_URL": "https://your-static-domain.ngrok-free.app", "NGROK_API_PORT": 4040, "TAVILY_API_KEY": "your_tavily_key", "BRAVE_API_KEY": "your_brave_key", "URL_SIGNING_SECRET": "your_custom_32_character_secret_here" } } } }, "plugins": { "entries": { "openclaw-syncralis": { "enabled": true } } }

- 🐳 Complete Docker Compose (Just an example only):

If you are running OpenClaw entirely inside Docker, here is a complete, production-readydocker-compose.ymltemplate to get Syncralis and Ngrok running together seamlessly.

version: '3.8' networks: mcp_network: driver: bridge services: # Your main OpenClaw instance openclaw_gateway: image: ghcr.io/openclaw/openclaw:latest # Replace with your actual OpenClaw image or version container_name: openclaw_gateway restart: unless-stopped networks: - mcp_network ports: - "127.0.0.1:18789:18789" extra_hosts: - "host.docker.internal:host-gateway" volumes: - ./claw_data:/home/node/.openclaw:rw - # Your config file - ./workspace:/home/node/.openclaw/workspace:rw environment: - FILE_SERVER_HOST=0.0.0.0 - FILE_SERVER_PORT=8080 - PUBLIC_TUNNEL_URL=https://<your-custom-domain>.ngrok-free.app - TAVILY_API_KEY=${TAVILY_API_KEY} - BRAVE_API_KEY=${BRAVE_API_KEY} deploy: resources: limits: cpus: '2.0' # Hard cap: Cannot exceed 2 CPU cores memory: 2G reservations: memory: 512M logging: driver: "json-file" options: max-size: "10m" max-file: "5" compress: "true" healthcheck: test: ["CMD", "curl", "-f", "http://localhost:18789"] interval: 30s timeout: 10s retries: 3 start_period: 40s # The Ngrok tunnel pointing to Syncralis's internal file server ngrok_tunnel: image: ngrok/ngrok:latest container_name: ngrok_tunnel restart: unless-stopped ports: - "4040:4040" networks: - mcp_network command: http openclaw_gateway:8080 --url=https://<your-custom-domain>.ngrok-free.app --log=stdout environment: - NGROK_AUTHTOKEN=${NGROK_AUTHTOKEN} depends_on: openclaw_gateway: condition: service_healthy

🔐 Advanced Configuration (The.envMethod):

If you prefer to maintain "Industry Grade" security and not keep your API keys exposed in your mainopenclaw.jsonfile, you can securely configure the plugin using a standard.envfile directly inside the extension's folder and remove the env block at mcp server configuration inopenclaw.json.

💻 Native OpenClaw (Local / NPM Installation):
-

Navigate to the plugin's directory:

cd ~/.openclaw/extensions/openclaw-syncralis

NODE_ENV=production WORKSPACE_DIR="" PUBLIC_TUNNEL_URL="https://your-domain.ngrok-free.app" NGROK_API_PORT=4040 URL_SIGNING_SECRET="your_custom_32_character_secret_here" TAVILY_API_KEY=your_tavily_key_here BRAVE_API_KEY=your_brave_key_here FILE_SERVER_HOST=127.0.0.1

Save the file (Ctrl + O,Enter,Ctrl + X) and restart your OpenClaw instance.
-

Write your API keys directly into a new.envfile using notepad:

NODE_ENV=production WORKSPACE_DIR="" PUBLIC_TUNNEL_URL="https://your-domain.ngrok-free.app" NGROK_API_PORT=4040 URL_SIGNING_SECRET="your_custom_32_character_secret_here" TAVILY_API_KEY=your_tavily_key_here BRAVE_API_KEY=your_brave_key_here FILE_SERVER_HOST=0.0.0.0

Open a terminal session directly inside the gateway's plugin directory:

docker cp "C:/path/to/your/.env" container_name:/home/node/.openclaw/extensions/openclaw-syncralis/.env

Restart your OpenClaw gateway to apply the secure variables:

-

MAX_QUERY_LENGTH: Defaults to 2000 characters.

TIMEOUT_MS: Defaults to 10000ms (10 seconds) to prevent hung API calls.

MAX_DOWNLOAD_ATTEMPTS: Defaults to 3 attempts with same generated download link.

CONFIRM_TOKEN_TTL_MS: Defaults to 5 minutes and specifies the time window within which the user must verify and confirm the correct file to generate a secure download link.

Size Limits:Syncralis enforces a hard limit of50MBfor all file reads and downloads to prevent memory exhaustion.

If you need to remove the plugin, follow the instructions for your specific environment below.

💻 Native OpenClaw (Local / NPM Installation):

openclaw plugins uninstall openclaw-syncralis

docker exec -it container_name rm -rf /home/node/.openclaw/extensions/openclaw-syncralis

- Open youropenclaw.jsonfile.
- Delete theopenclaw-syncralisblocks from both the"plugins"and"mcp"sections.
- Restart your OpenClaw environment (or rundocker restart container_name) for a perfectly clean boot.

Once connected, you can ask your OpenClaw agent to perform complex I/O tasks: