Moltbot Security Guide

Your Moltbot gateway was designed for local use. When exposed to the internet without proper security, attackers can access your API keys, private messages, and full system access.

Based on: Real vulnerability research that found 1,673+ exposed OpenClaw/Moltbot gateways on Shodan.

TL;DR - The 5 Essentials

1. Bind to loopback — Never expose gateway to public internet
2. Set auth token — Require authentication for all requests
3. Fix file permissions — Only you should read config files
4. Update Node.js — Use v22.12.0+ to avoid known vulnerabilities
5. Use Tailscale — Secure remote access without public exposure

What Gets Exposed (The Real Risk)