ContextQMD
Back to Openclaw

Publishing on ClawHub

docs/clawhub/publishing.md

2026.7.12.7 KB
Original Source

Publishing on ClawHub

ClawHub publishing is owner-scoped: every publish targets a publisher, and the server decides whether the signed-in user can publish there.

Owners

An owner is a ClawHub publisher handle, such as @alice or @openclaw. Every user gets a personal owner; org owners can have multiple members with owner, admin, or publisher roles.

When you publish, you use your personal owner or an org owner where you have publisher access.

Skills

Skills publish from a skill folder (clawhub skill publish <path>). The public page is:

text
https://clawhub.ai/<owner>/<slug>

Example:

text
https://clawhub.ai/alice/review-helper

The publish request includes the selected owner, slug, version, changelog, and files. The server verifies the actor can publish as that owner before creating the release.

Plugins

Plugins use npm-style package names (clawhub package publish <source>). Scoped names include the owner in the first path segment:

text
@owner/package-name

The scope must match the selected publish owner. A package named @openclaw/dronzer can only be published as @openclaw. To publish as @vintageayu, rename the package to @vintageayu/dronzer.

This stops a package from claiming an org namespace the publisher does not control.

Release flow

  1. The UI, CLI, or GitHub workflow gathers package metadata and files.
  2. The publish request goes to ClawHub with the selected owner.
  3. The server validates owner permissions, package scope, package name, version, file limits, and source metadata. Validation failure means no release is created.
  4. ClawHub stores the release and starts automated security checks.
  5. The release stays hidden from normal install/download surfaces until review and verification finish.

FAQ

Package scope must match selected owner

If the package scope and selected owner do not match, ClawHub rejects the publish:

text
Package scope "@openclaw" must match selected owner "@vintageayu".
Publish as "@openclaw" or rename this package to "@vintageayu/dronzer".

Fix it by either publishing as the owner named in the scope, or renaming the package so its scope matches the owner you can publish as.

If the package already has the right scope but the wrong publisher owns it, transfer it instead:

sh
clawhub package transfer @opik/opik-openclaw --to opik

Package transfer needs admin access to both the current owner and the destination publisher; it does not let you publish into a scope you do not control. This is the same namespace protection: a package named @openclaw/dronzer claims the @openclaw namespace, so only publishers with access to @openclaw can publish or transfer into it.