​

Synology Chat (plugin)

​

Plugin required

openclaw plugins install ./extensions/synology-chat

​

Quick setup

1. Install and enable the Synology Chat plugin.
2. In Synology Chat integrations:
   • Create an incoming webhook and copy its URL.
   • Create an outgoing webhook with your secret token.
3. Point the outgoing webhook URL to your OpenClaw gateway:
   • https://gateway-host/webhook/synology by default.
   • Or your custom channels.synology-chat.webhookPath.
4. Configure channels.synology-chat in OpenClaw.
5. Restart gateway and send a DM to the Synology Chat bot.

{
  channels: {
    "synology-chat": {
      enabled: true,
      token: "synology-outgoing-token",
      incomingUrl: "https://nas.example.com/webapi/entry.cgi?api=SYNO.Chat.External&method=incoming&version=2&token=...",
      webhookPath: "/webhook/synology",
      dmPolicy: "allowlist",
      allowedUserIds: ["123456"],
      rateLimitPerMinute: 30,
      allowInsecureSsl: false,
    },
  },
}

​

Environment variables

• SYNOLOGY_CHAT_TOKEN
• SYNOLOGY_CHAT_INCOMING_URL
• SYNOLOGY_NAS_HOST
• SYNOLOGY_ALLOWED_USER_IDS (comma-separated)
• SYNOLOGY_RATE_LIMIT
• OPENCLAW_BOT_NAME

​

DM policy and access control

• dmPolicy: "allowlist" is the recommended default.
• allowedUserIds accepts a list (or comma-separated string) of Synology user IDs.
• In allowlist mode, an empty allowedUserIds list is treated as misconfiguration and the webhook route will not start (use dmPolicy: "open" for allow-all).
• dmPolicy: "open" allows any sender.
• dmPolicy: "disabled" blocks DMs.
• Pairing approvals work with:
  • openclaw pairing list synology-chat
  • openclaw pairing approve synology-chat <CODE>

​

Outbound delivery

openclaw message send --channel synology-chat --target 123456 --text "Hello from OpenClaw"
openclaw message send --channel synology-chat --target synology-chat:123456 --text "Hello again"

​

Multi-account

{
  channels: {
    "synology-chat": {
      enabled: true,
      accounts: {
        default: {
          token: "token-a",
          incomingUrl: "https://nas-a.example.com/...token=...",
        },
        alerts: {
          token: "token-b",
          incomingUrl: "https://nas-b.example.com/...token=...",
          webhookPath: "/webhook/synology-alerts",
          dmPolicy: "allowlist",
          allowedUserIds: ["987654"],
        },
      },
    },
  },
}

​

Security notes

• Keep token secret and rotate it if leaked.
• Keep allowInsecureSsl: false unless you explicitly trust a self-signed local NAS cert.
• Inbound webhook requests are token-verified and rate-limited per sender.
• Prefer dmPolicy: "allowlist" for production.

​

Configuration reference

• channels.synology-chat.enabled: enable/disable channel startup.
• channels.synology-chat.token: outgoing webhook secret token.
• channels.synology-chat.incomingUrl: incoming webhook URL for sending messages.
• channels.synology-chat.webhookPath: webhook path (default: /webhook/synology).
• channels.synology-chat.dmPolicy: pairing | allowlist | open | disabled.
• channels.synology-chat.allowedUserIds: DM allowlist (Synology user IDs).
• channels.synology-chat.rateLimitPerMinute: rate limit per sender (default: 30).
• channels.synology-chat.allowInsecureSsl: allow self-signed NAS certs (default: false).
• channels.synology-chat.accounts: multi-account configuration.

​

Related

• Pairing
• Channel routing
• Configuration
• Troubleshooting