openclaw - 💡(How to fix) Fix Feature request: Add OAuth usage quota endpoint to session_status or new tool [1 participants]

TL;DR

Implement a secure internal call to the Anthropic OAuth usage endpoint within OpenClaw to fetch and return utilization data without exposing the Bearer token.

Guidance

• Extend the session_status endpoint to include OAuth usage data when available, ensuring the Bearer token is handled securely within OpenClaw.
• Consider adding a new usage or quota tool as an alternative, with the same security considerations for token handling.
• Verify the implementation by checking the response from the GET https://api.anthropic.com/api/oauth/usage endpoint and ensuring the utilization data is correctly returned to the agent without exposing the Bearer token.
• Ensure the solution adheres to security principles by not granting the agent direct access to the OAuth Bearer token.

Example

import requests

def get_usage_data(bearer_token):
    headers = {
        'Authorization': f'Bearer {bearer_token}',
        'anthropic-beta': 'oauth-2025-04-20'
    }
    response = requests.get('https://api.anthropic.com/api/oauth/usage', headers=headers)
    return response.json()

# Example usage within OpenClaw, assuming secure token storage and handling
usage_data = get_usage_data(securely_stored_bearer_token)
print(usage_data)

Notes

The solution must ensure the security of the OAuth Bearer token, handling it internally within OpenClaw without exposing it to the agent. The choice between extending session_status and adding a new tool should consider the existing architecture and future scalability needs.

Recommendation

Apply a workaround by extending the session_status endpoint to include OAuth usage data, as this seems to be the most straightforward approach to provide agents with the necessary quota information without compromising security.