@mnemo-bot/zalo-oa
v0.1.0
Published
Zalo Official Account plugin (Open Platform v3.0) for OpenClaw — by Mnemo / ClawdBot.
Downloads
24
Maintainers
Readme
@openclaw/zalo-oa
Zalo Official Account (OA) channel plugin for OpenClaw, using the Zalo Open
Platform API v3.0 — the official, sanctioned API for OA brands. Independent
from @openclaw/zalo (Bot API) and @openclaw/zalouser (personal account).
Status: Phase 1 (skeleton). OAuth, webhook, and outbound land in Phase 2-4. See
docs/plugins/zalo-oa-design.mdfor the full RFC.
Features (planned)
- OAuth 2.0 onboarding (web wizard, no SSH required)
- Auto token refresh (access_token TTL 25h, refresh_token TTL 90 days)
- Webhook ingress with HMAC-SHA256 signature + replay protection
- Outbound messaging (cs / transaction / promotion tags)
- Follower & tag CRUD
- Multi-OA / multi-tenant support
- Admin UI (
extensions/zalo-oa/admin-ui/) — Lit web dashboard
Install
openclaw plugins install @openclaw/zalo-oaConfig (planned)
{
channels: {
"zalo-oa": {
enabled: true,
defaultAccount: "main",
accounts: {
main: {
name: "Brand OA",
appId: "1234567890",
appSecret: { source: "env", provider: "zalo-oa", id: "ZALO_OA_APP_SECRET" },
oaId: "987654321",
webhookUrl: "https://example.com/webhook/zalo-oa/main",
webhookSecret: { source: "env", provider: "zalo-oa", id: "ZALO_OA_WEBHOOK_SECRET" },
webhookPath: "/webhook/zalo-oa/main",
redirectUri: "https://example.com/admin/zalo-oa/callback",
dmPolicy: "pairing",
defaultMessageTag: "cs"
}
}
}
}
}Third-party attribution
Portions of the OA HTTP client, OAuth flow, and webhook signature verification
are ported from zalo-agent-cli
(MIT, © 2026 Phuc M. Pham). See THIRD_PARTY_NOTICES.md.
