claude-connect

Connect your Claude subscription to Clawdbot in one step.

Automatically:

• - ✅ Reads Claude OAuth tokens from Keychain
• ✅ Writes them to Clawdbot in proper OAuth format
• ✅ Auto-refreshes every 2 hours (before expiry)
• ✅ Notifies you on success/failure
• ✅ Works with clawdbot onboard (fixes OAuth auth-profiles bug)

Quick Start

1. Install the skill:
CODEBLOCK0

2. Ensure Claude CLI is logged in:
CODEBLOCK1

3. Run installer:
CODEBLOCK2

That's it! Tokens will refresh automatically every 2 hours.

What It Does

Fixes clawdbot onboard OAuth Bug

When you run clawdbot onboard --auth-choice claude-cli, it sometimes doesn't properly write OAuth tokens to auth-profiles.json.

This skill:

1. 1. Reads OAuth tokens from macOS Keychain (where Claude CLI stores them)
2. Writes them to ~/.clawdbot/agents/main/agent/auth-profiles.json in proper OAuth format:

   {
     "profiles": {
       "anthropic:claude-cli": {
         "type": "oauth",
         "provider": "anthropic",
         "access": "sk-ant-...",
         "refresh": "sk-ant-ort...",
         "expires": 1234567890
       }
     }
   }
   

1. 3. Sets up auto-refresh (runs every 2 hours via launchd)
2. Keeps your connection alive 24/7

Installation

Automatic (Recommended)

CODEBLOCK4

The installer will:

• - ✅ Verify Claude CLI is set up
• ✅ Create config file
• ✅ Set up auto-refresh job (launchd)
• ✅ Run first refresh to test

Manual

1. 1. Copy example config:

1. 2. Edit config (optional):

1. 3. Test refresh:

1. 4. Install launchd job (optional - for auto-refresh):

   cp com.clawdbot.claude-oauth-refresher.plist ~/Library/LaunchAgents/
   launchctl load ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist
   

Configuration

Edit claude-oauth-refresh-config.json:

CODEBLOCK9

Options:

• - refresh_buffer_minutes: Refresh when token has this many minutes left (default: 30)
• INLINECODE7: Where to log refresh activity
• INLINECODE8: Notify on successful refresh (default: true)
• INLINECODE9: Notify on failure (default: true)
• INLINECODE10: Your Telegram chat ID (or leave empty to disable)

Usage

Manual Refresh

CODEBLOCK10

Check Status

CODEBLOCK11

Disable Notifications

Ask Clawdbot:
CODEBLOCK12

Or edit config:

{
  "notifications": {
    "on_success": false,
    "on_failure": true
  }
}

How It Works

Refresh Process

1. 1. Read from Keychain: Gets OAuth tokens from INLINECODE11
2. Check Expiry: Only refreshes if < 30 minutes left (or --force)
3. Call OAuth API: Gets new access + refresh tokens
4. Update auth-profiles.json: Writes proper OAuth format
5. Update Keychain: Syncs new tokens back
6. Restart Gateway: Picks up new tokens
7. Notify: Sends success/failure message (optional)

Auto-Refresh (launchd)

Runs every 2 hours via INLINECODE13

Controls:

# Stop auto-refresh
launchctl unload ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist

# Start auto-refresh
launchctl load ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist

# Check if running
launchctl list | grep claude

Troubleshooting

OAuth not working after onboard

Symptom: clawdbot onboard --auth-choice claude-cli completes but Clawdbot can't use tokens

Fix:
CODEBLOCK15

This will write tokens in proper OAuth format.

Tokens keep expiring

Symptom: Auth keeps failing after 8 hours

Fix: Ensure launchd job is running:
CODEBLOCK16

No tokens in Keychain

Symptom: INLINECODE15

Fix: Log in with Claude CLI:
CODEBLOCK17

Then run refresh again:

./refresh-token.sh --force

Uninstall

CODEBLOCK19

Or manually:

# Stop auto-refresh
launchctl unload ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist
rm ~/Library/LaunchAgents/com.clawdbot.claude-oauth-refresher.plist

# Remove skill
rm -rf ~/clawd/skills/claude-connect

Upgrade

If you previously installed an older version:

CODEBLOCK21

See Also

• - QUICKSTART.md - 60-second setup guide
• UPGRADE.md - Upgrading from older versions
• Clawdbot docs - Model authentication