Anthropic (Claude)
Anthropic builds the Claude model family and provides access via an API. In OpenClaw you can authenticate with an API key or a setup-token.Option A: Anthropic API key
Best for: standard API access and usage-based billing. Create your API key in the Anthropic Console.CLI setup
Config snippet
Prompt caching (Anthropic API)
OpenClaw supports Anthropic’s prompt caching feature. This is API-only; subscription auth does not honor cache settings.Configuration
Use thecacheRetention parameter in your model config:
| Value | Cache Duration | Description |
|---|---|---|
none | No caching | Disable prompt caching |
short | 5 minutes | Default for API Key auth |
long | 1 hour | Extended cache (requires beta flag) |
Defaults
When using Anthropic API Key authentication, OpenClaw automatically appliescacheRetention: "short" (5-minute cache) for all Anthropic models. You can override this by explicitly setting cacheRetention in your config.
Legacy parameter
The oldercacheControlTtl parameter is still supported for backwards compatibility:
"5m"maps toshort"1h"maps tolong
cacheRetention parameter.
OpenClaw includes the extended-cache-ttl-2025-04-11 beta flag for Anthropic API
requests; keep it if you override provider headers (see /gateway/configuration).
Option B: Claude setup-token
Best for: using your Claude subscription.Where to get a setup-token
Setup-tokens are created by the Claude Code CLI, not the Anthropic Console. You can run this on any machine:CLI setup
Config snippet
Notes
- Generate the setup-token with
claude setup-tokenand paste it, or runopenclaw models auth setup-tokenon the gateway host. - If you see “OAuth token refresh failed …” on a Claude subscription, re-auth with a setup-token. See /gateway/troubleshooting#oauth-token-refresh-failed-anthropic-claude-subscription.
- Auth details + reuse rules are in /concepts/oauth.
Troubleshooting
401 errors / token suddenly invalid- Claude subscription auth can expire or be revoked. Re-run
claude setup-tokenand paste it into the gateway host. - If the Claude CLI login lives on a different machine, use
openclaw models auth paste-token --provider anthropicon the gateway host.
- Auth is per agent. New agents don’t inherit the main agent’s keys.
- Re-run onboarding for that agent, or paste a setup-token / API key on the
gateway host, then verify with
openclaw models status.
anthropic:default
- Run
openclaw models statusto see which auth profile is active. - Re-run onboarding, or paste a setup-token / API key for that profile.
- Check
openclaw models status --jsonforauth.unusableProfiles. - Add another Anthropic profile or wait for cooldown.