openclaw - 💡(How to fix) Fix tools.exec.ask=off not respected by gateway after 2026.3.31 update [3 comments, 3 participants]

TL;DR

The issue may be resolved by re-examining the configuration for tools.exec.ask and ensuring that the auth hardening changes are properly configured.

Guidance

• Verify that the tools.exec.ask configuration is correctly set to off and that the change has been successfully applied to the gateway.
• Check the documentation for the auth hardening changes, specifically the trusted-proxy and local-direct fallback configurations, to ensure that they are properly set up and compatible with the tools.exec.ask setting.
• Review the release notes for version 2026.3.31 to see if there are any specific instructions or considerations for configuring tools.exec.ask with the new auth hardening features.
• Test the configuration with a simple command to see if the exec approval prompt still appears.

Notes

The issue may be specific to the interaction between the tools.exec.ask configuration and the new auth hardening features introduced in version 2026.3.31. Further investigation and testing may be needed to determine the root cause and find a solution.

Recommendation

Apply workaround: The user should try to re-configure the tools.exec.ask setting and auth hardening features to see if it resolves the issue, as the problem may be due to a misconfiguration or incompatibility between the two features.