Skip to main content
ironclaw serve starts the web interface — the primary way to use IronClaw. It runs on your own machine and serves the chat, extension management, and settings surfaces.
By default it binds to 127.0.0.1:3000, which is reachable only from the local machine. Both --host and --port override [webui].listen_host and [webui].listen_port in your configuration file.

​
Signing In

Setup writes a bearer token to ~/.ironclaw/reborn/webui-token and prints a login link:
Open that link once and the browser keeps the session. To retrieve the token later:
Set IRONCLAW_REBORN_WEBUI_TOKEN to supply your own token instead of the generated file.
The token grants full operator access, including configuration changes. Treat it like a password and don’t put it in a shared shell history or a URL you paste somewhere.

​
Single Sign-On

For deployments with more than one person, IronClaw can authenticate through Google or GitHub instead of a shared token. Configure a provider with environment variables:
Restrict which accounts may sign in with IRONCLAW_REBORN_WEBUI_ALLOWED_EMAIL_DOMAINS.
The export lines above are shown for clarity. Don’t type the client secret into an interactive shell in production — it persists in shell history and is visible to child processes. Inject these from your service unit, container runtime, or secret manager.
Sign-in sessions carry user identity only. They do not inherit operator configuration privileges — the bearer token remains the separate operator credential. A signed-in user who is not an operator sees a permission error on configuration surfaces rather than the surface itself.

​
What’s In the Interface

1

Chat

The default view. Conversations stream as the agent works, showing tool calls and their results inline. You can cancel or retry a run, and approve requests when the agent asks permission to do something sensitive.
2

Workspace

Browse the files and notes your agent has stored. See Memory for how the agent reads and writes this.
3

Automations

Recurring and event-driven work the agent performs on its own. See Routines.
4

Extensions

Install, configure, and remove extensions, split into a registry of available packages, your connected channels, and the tools each extension exposes. See Extensions.
5

Settings

Configure inference providers and models, appearance, tool permissions, skills, Trace Commons participation, and interface language.
6

Admin

User management and deployment configuration. Only available to operators; authorization is enforced on the server, so non-operators get a permission error rather than the page.
Projects, Jobs, Routines, Missions, and Logs have pages in the interface but are not yet listed in the sidebar while their APIs are being finished. The underlying capabilities work — see the Capabilities section.

​
Exposing It Beyond Your Machine

serve binds to loopback on purpose. To reach it from elsewhere, either bind a different interface or put it behind a tunnel:
Binding a non-loopback interface makes the web interface reachable by anything that can route to the host. Put it behind TLS and configure single sign-on before you do this — a shared bearer token on an open port is a full compromise of the agent and every credential it holds.
A safer path that opens no port at all is an SSH tunnel from the machine you’re browsing from:
Then open http://127.0.0.1:3000 locally.

CLI Reference

Every command the binary provides.

Run as a Service

Keep IronClaw running in the background.