Web tools
OpenClaw ships two lightweight web tools:web_search— Search the web via Brave Search API (default), Perplexity Sonar, Gemini with Google Search grounding, Grok, Kimi, or a self-hosted SearXNG instance.web_fetch— HTTP fetch + readable extraction (HTML → markdown/text).
How it works
web_searchcalls your configured provider and returns results.- Brave (default): returns structured results (title, URL, snippet).
- Perplexity: returns AI-synthesized answers with citations from real-time web search.
- Gemini: returns AI-synthesized answers grounded in Google Search with citations.
- Results are cached by query for 15 minutes (configurable).
web_fetchdoes a plain HTTP GET and extracts readable content (HTML → markdown/text). It does not execute JavaScript.web_fetchis enabled by default (unless explicitly disabled).
Choosing a search provider
See Brave Search setup and Perplexity Sonar for provider-specific details.
Auto-detection
If noprovider is explicitly set, OpenClaw auto-detects which provider to use based on available API keys, checking in priority order:
- Brave —
BRAVE_API_KEYenv var orplugins.entries.brave-search.config.webSearch.apiKey - Gemini —
GEMINI_API_KEYenv var orplugins.entries.gemini-search.config.webSearch.apiKey - Perplexity —
PERPLEXITY_API_KEY/OPENROUTER_API_KEYenv var orplugins.entries.perplexity-search.config.webSearch.apiKey - Grok —
XAI_API_KEYenv var orplugins.entries.grok-search.config.webSearch.apiKey - Kimi —
KIMI_API_KEY/MOONSHOT_API_KEYenv var orplugins.entries.kimi-search.config.webSearch.apiKey
Migration note (v2026.5.25+): the per-provider config keys used to live underSearXNG is not auto-detected — it must be configured explicitly with atools.web.search.<provider>.*(e.g.tools.web.search.perplexity.apiKey). After the plugin extraction the canonical location is nowplugins.entries.<provider>-search.config.webSearch.*. The legacy paths are still accepted as a fallback (for compatibility with existing configs and theopenclaw configure --section webwizard / secrets registry), but new configs should prefer the plugin-entry form above. Secret refs caveat: the${secret:…}resolver currently only walks the legacytools.web.search.*.apiKeypaths. If you store API keys asSecretRef-style references rather than literal strings, keep them in the legacy path until the collector is extended to walk plugin entries — otherwise the literal${secret:…}text is sent upstream as the credential.
baseUrl (see SearXNG setup).
If no keys are found, no web_search tool is registered (you’ll see a log message). Configure at least one provider to enable search.
Explicit provider
Set the provider in config:Getting a Brave API key
- Create a Brave Search API account at https://brave.com/search/api/
- In the dashboard, choose the Data for Search plan (not “Data for AI”) and generate an API key.
- Run
openclaw configure --section webto store the key in config (recommended), or setBRAVE_API_KEYin your environment.
Where to set the key (recommended)
Recommended: runopenclaw configure --section web. It stores the key in
~/.openclaw/openclaw.json under plugins.entries.brave-search.config.webSearch.apiKey.
Environment alternative: set BRAVE_API_KEY in the Gateway process
environment. For a gateway install, put it in ~/.openclaw/.env (or your
service environment). See Env vars.
Using Perplexity (direct or via OpenRouter)
Perplexity Sonar models have built-in web search capabilities and return AI-synthesized answers with citations. You can use them via OpenRouter (no credit card required - supports crypto/prepaid).Getting an OpenRouter API key
- Create an account at https://openrouter.ai/
- Add credits (supports crypto, prepaid, or credit card)
- Generate an API key in your account settings
Setting up Perplexity search
OPENROUTER_API_KEY or PERPLEXITY_API_KEY in the Gateway
environment. For a gateway install, put it in ~/.openclaw/.env.
If no base URL is set, OpenClaw chooses a default based on the API key source:
PERPLEXITY_API_KEYorpplx-...→https://api.perplexity.aiOPENROUTER_API_KEYorsk-or-...→https://openrouter.ai/api/v1- Unknown key formats → OpenRouter (safe fallback)
Available Perplexity models
Using Gemini (Google Search grounding)
Gemini models support built-in Google Search grounding, which returns AI-synthesized answers backed by live Google Search results with citations.Getting a Gemini API key
- Go to Google AI Studio
- Create an API key
- Set
GEMINI_API_KEYin the Gateway environment, or configureplugins.entries.gemini-search.config.webSearch.apiKey
Setting up Gemini search
GEMINI_API_KEY in the Gateway environment.
For a gateway install, put it in ~/.openclaw/.env.
Notes
- Citation URLs from Gemini grounding are automatically resolved from Google’s redirect URLs to direct URLs.
- Redirect resolution uses the SSRF guard path (HEAD + redirect checks + http/https validation) before returning the final citation URL.
- Redirect resolution uses strict SSRF defaults, so redirects to private/internal targets are blocked.
- The default model (
gemini-2.5-flash) is fast and cost-effective. Any Gemini model that supports grounding can be used.
Using SearXNG (self-hosted)
SearXNG is a self-hosted, privacy-respecting meta-search engine. There is no API key — you provide your own instance URL.Setting up SearXNG search
Select the SearXNG provider intools.web.search, then configure the instance
under the searxng-search plugin entry (the SearXNG extension reads its config
from plugins.entries.searxng-search.config.webSearch):
SEARXNG_BASE_URL in the gateway environment
(for example in ~/.openclaw/.env) to skip the plugins.entries block entirely.
SearXNG notes
- Private-network addresses (
localhost,127.x,10.x,192.168.x,172.16-31.x) are permitted — they are expected when running a local SearXNG instance. - External
https://SearXNG instances are also supported. - SearXNG is never auto-detected; it must be configured explicitly with
provider: "searxng-search". - Set
SEARXNG_BASE_URLin the gateway environment, or configureplugins.entries.searxng-search.config.webSearch.baseUrlin~/.openclaw/openclaw.json.
web_search
Search the web using your configured provider.Requirements
tools.web.search.enabledmust not befalse(default: enabled)- API key / endpoint for your chosen provider (set via env var or
plugins.entries.<provider>-search.config.webSearch.apiKey):- Brave:
BRAVE_API_KEYorplugins.entries.brave-search.config.webSearch.apiKey - Perplexity:
OPENROUTER_API_KEY,PERPLEXITY_API_KEY, orplugins.entries.perplexity-search.config.webSearch.apiKey - Gemini:
GEMINI_API_KEYorplugins.entries.gemini-search.config.webSearch.apiKey - Grok:
XAI_API_KEYorplugins.entries.grok-search.config.webSearch.apiKey - Kimi:
KIMI_API_KEY,MOONSHOT_API_KEY, orplugins.entries.kimi-search.config.webSearch.apiKey - SearXNG:
SEARXNG_BASE_URLorplugins.entries.searxng-search.config.webSearch.baseUrl(no API key needed)
- Brave:
Config
Note: the legacytools.web.search.apiKeylocation is still accepted as a fallback for compatibility with existing configs andopenclaw configure --section web, but new configs should use theplugins.entries.brave-search.config.webSearch.apiKeyform above.
Tool parameters
query(required)count(1–10; default from config)country(optional): 2-letter country code for region-specific results (e.g., “DE”, “US”, “ALL”). If omitted, Brave chooses its default region.search_lang(optional): ISO language code for search results (e.g., “de”, “en”, “fr”)ui_lang(optional): ISO language code for UI elementsfreshness(optional): filter by discovery time- Brave:
pd,pw,pm,py, orYYYY-MM-DDtoYYYY-MM-DD - Perplexity:
pd,pw,pm,py
- Brave:
web_fetch
Fetch a URL and extract readable content.web_fetch requirements
tools.web.fetch.enabledmust not befalse(default: enabled)- Optional Firecrawl fallback: set
tools.web.fetch.firecrawl.apiKeyorFIRECRAWL_API_KEY.
web_fetch config
web_fetch tool parameters
url(required, http/https only)extractMode(markdown|text)maxChars(truncate long pages)
web_fetchuses Readability (main-content extraction) first, then Firecrawl (if configured). If both fail, the tool returns an error.- Firecrawl requests use bot-circumvention mode and cache results by default.
web_fetchsends a Chrome-like User-Agent andAccept-Languageby default; overrideuserAgentif needed.web_fetchblocks private/internal hostnames and re-checks redirects (limit withmaxRedirects).maxCharsis clamped totools.web.fetch.maxCharsCap.web_fetchcaps the downloaded response body size totools.web.fetch.maxResponseBytesbefore parsing; oversized responses are truncated and include a warning.web_fetchis best-effort extraction; some sites will need the browser tool.- See Firecrawl for key setup and service details.
- Responses are cached (default 15 minutes) to reduce repeated fetches.
- If you use tool profiles/allowlists, add
web_search/web_fetchorgroup:web. - If no provider is configured and no API keys are found,
web_searchis not registered (check logs for provider details).