openclaw - ✅(Solved) Fix [Bug]: Dashboard token missing operator.write scope in v2026.3.13 [1 pull requests, 3 comments, 4 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openclaw/openclaw#52087Fetched 2026-04-08 01:15:47
View on GitHub
Comments
3
Participants
4
Timeline
26
Reactions
0
Author
Timeline (top)
referenced ×18commented ×3labeled ×2closed ×1

Title: Dashboard token missing operator.write scope in v2026.3.13

Version: OpenClaw 2026.3.13 (61d171a) OS: macOS 15.3.2 (arm64)
Node: v25.5.0 Gateway Mode: local, ws://127.0.0.1:18789 Auth Mode: token

Problem: Dashboard webchat token lacks operator.write scope, causing all agent RPC calls to fail with: errorCode=INVALID_REQUEST errorMessage=missing scope: operator.write

Steps to Reproduce:

  1. Run openclaw dashboard
  2. Use the provided URL with token
  3. Dashboard webchat fails to send messages

Expected: Dashboard token should have full operator scopes including operator.write

Workaround: Use Feishu channel instead, which works fine.

Root Cause

Title: Dashboard token missing operator.write scope in v2026.3.13

Version: OpenClaw 2026.3.13 (61d171a) OS: macOS 15.3.2 (arm64)
Node: v25.5.0 Gateway Mode: local, ws://127.0.0.1:18789 Auth Mode: token

Problem: Dashboard webchat token lacks operator.write scope, causing all agent RPC calls to fail with: errorCode=INVALID_REQUEST errorMessage=missing scope: operator.write

Steps to Reproduce:

  1. Run openclaw dashboard
  2. Use the provided URL with token
  3. Dashboard webchat fails to send messages

Expected: Dashboard token should have full operator scopes including operator.write

Workaround: Use Feishu channel instead, which works fine.

Fix Action

Fix / Workaround

Workaround: Use Feishu channel instead, which works fine.

Workaround: Use Feishu channel instead, which works fine.

Workaround: Use Feishu channel instead, which works fine.

PR fix notes

PR #52104: fix(control-ui): add missing operator.read and operator.write scopes to connect params

Description (problem / solution / changelog)

Summary

  • Add operator.read and operator.write to the Control UI websocket connect params scope array
  • The dashboard webchat was missing these scopes, causing all agent RPC calls to fail with missing scope: operator.write

Root Cause

ui/src/ui/gateway.ts line 245 declared connect scopes as only ["operator.admin", "operator.approvals", "operator.pairing"], omitting operator.read and operator.write. The gateway enforces scope-based access control, so the dashboard webchat couldn't send messages or read session state.

Test plan

  • npm run build passes
  • openclaw dashboard → webchat can send messages without "missing scope: operator.write" error

Fixes #52087

🤖 Generated with Claude Code

Changed files

  • ui/src/ui/gateway.node.test.ts (modified, +7/-1)
  • ui/src/ui/gateway.ts (modified, +7/-1)
RAW_BUFFERClick to expand / collapse

Bug type

Regression (worked before, now fails)

Summary

Title: Dashboard token missing operator.write scope in v2026.3.13

Version: OpenClaw 2026.3.13 (61d171a) OS: macOS 15.3.2 (arm64)
Node: v25.5.0 Gateway Mode: local, ws://127.0.0.1:18789 Auth Mode: token

Problem: Dashboard webchat token lacks operator.write scope, causing all agent RPC calls to fail with: errorCode=INVALID_REQUEST errorMessage=missing scope: operator.write

Steps to Reproduce:

  1. Run openclaw dashboard
  2. Use the provided URL with token
  3. Dashboard webchat fails to send messages

Expected: Dashboard token should have full operator scopes including operator.write

Workaround: Use Feishu channel instead, which works fine.

Steps to reproduce

Title: Dashboard token missing operator.write scope in v2026.3.13

Version: OpenClaw 2026.3.13 (61d171a) OS: macOS 15.3.2 (arm64)
Node: v25.5.0 Gateway Mode: local, ws://127.0.0.1:18789 Auth Mode: token

Problem: Dashboard webchat token lacks operator.write scope, causing all agent RPC calls to fail with: errorCode=INVALID_REQUEST errorMessage=missing scope: operator.write

Steps to Reproduce:

  1. Run openclaw dashboard
  2. Use the provided URL with token
  3. Dashboard webchat fails to send messages

Expected: Dashboard token should have full operator scopes including operator.write

Workaround: Use Feishu channel instead, which works fine.

Expected behavior

Title: Dashboard token missing operator.write scope in v2026.3.13

Version: OpenClaw 2026.3.13 (61d171a) OS: macOS 15.3.2 (arm64)
Node: v25.5.0 Gateway Mode: local, ws://127.0.0.1:18789 Auth Mode: token

Problem: Dashboard webchat token lacks operator.write scope, causing all agent RPC calls to fail with: errorCode=INVALID_REQUEST errorMessage=missing scope: operator.write

Steps to Reproduce:

  1. Run openclaw dashboard
  2. Use the provided URL with token
  3. Dashboard webchat fails to send messages

Expected: Dashboard token should have full operator scopes including operator.write

Workaround: Use Feishu channel instead, which works fine.

Actual behavior

Title: Dashboard token missing operator.write scope in v2026.3.13

Version: OpenClaw 2026.3.13 (61d171a) OS: macOS 15.3.2 (arm64)
Node: v25.5.0 Gateway Mode: local, ws://127.0.0.1:18789 Auth Mode: token

Problem: Dashboard webchat token lacks operator.write scope, causing all agent RPC calls to fail with: errorCode=INVALID_REQUEST errorMessage=missing scope: operator.write

Steps to Reproduce:

  1. Run openclaw dashboard
  2. Use the provided URL with token
  3. Dashboard webchat fails to send messages

Expected: Dashboard token should have full operator scopes including operator.write

Workaround: Use Feishu channel instead, which works fine.

OpenClaw version

OpenClaw 2026.3.13 (61d171a)

Operating system

macOS 15.3.2 (arm64)

Install method

No response

Model

local, ws://127.0.0.1:18789

Provider / routing chain

token

Additional provider/model setup details

token

Logs, screenshots, and evidence

Impact and severity

No response

Additional information

No response

extent analysis

Fix Plan

To fix the issue of the dashboard token missing the operator.write scope, follow these steps:

  • Update the token generation code to include the operator.write scope.
  • Modify the openclaw configuration to include the operator.write scope in the token.

Example code snippet:

// Update token generation code
const tokenScopes = ['operator.read', 'operator.write']; // Add 'operator.write' scope
const token = generateToken(tokenScopes);

// Modify openclaw configuration
const openclawConfig = {
  // ...
  tokenScopes: ['operator.read', 'operator.write'], // Add 'operator.write' scope
  // ...
};
  • Restart the openclaw service to apply the changes.

Verification

To verify that the fix worked:

  1. Run openclaw dashboard and use the provided URL with the updated token.
  2. Check that the dashboard webchat can send messages successfully.
  3. Verify that the agent RPC calls no longer return an INVALID_REQUEST error with a missing scope: operator.write message.

Extra Tips

  • Ensure that the operator.write scope is properly configured and enabled in the openclaw settings.
  • If using a custom token generation script, update the script to include the operator.write scope.
  • Test the fix thoroughly to ensure that it resolves the issue and does not introduce any new problems.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

FAQ

Expected behavior

Title: Dashboard token missing operator.write scope in v2026.3.13

Version: OpenClaw 2026.3.13 (61d171a) OS: macOS 15.3.2 (arm64)
Node: v25.5.0 Gateway Mode: local, ws://127.0.0.1:18789 Auth Mode: token

Problem: Dashboard webchat token lacks operator.write scope, causing all agent RPC calls to fail with: errorCode=INVALID_REQUEST errorMessage=missing scope: operator.write

Steps to Reproduce:

  1. Run openclaw dashboard
  2. Use the provided URL with token
  3. Dashboard webchat fails to send messages

Expected: Dashboard token should have full operator scopes including operator.write

Workaround: Use Feishu channel instead, which works fine.

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

openclaw - ✅(Solved) Fix [Bug]: Dashboard token missing operator.write scope in v2026.3.13 [1 pull requests, 3 comments, 4 participants]