memory-get-acl

ACL-aware memory_get plus a tiny "Memory Gateway" HTTP surface, implemented as an in-process OpenClaw plugin.

What it provides

• Gateway HTTP routes (auth: gateway)
  • GET /api/memory/index?agent_id=main&identity=owner&identity_id=<id>
  • GET /api/memory/get?agent_id=main&identity=owner&identity_id=<id>&path=MEMORY.md&from=1&lines=200
• Tool
  • memory_get (reads MEMORY.md / memory/**/*.md with ACL filtering; non-memory paths fall back to local filesystem reads)

This plugin is kind: "memory" and is selected by plugins.slots.memory.

Install (host)

openclaw plugins install memory-get-acl --pin
openclaw config set plugins.allow '["memory-get-acl"]' --strict-json
openclaw config set plugins.slots.memory "memory-get-acl"
openclaw config validate

Restart the gateway after config changes.

Docker (server)

If you are running OpenClaw via the repository docker-compose.yml (or a compatible setup), you can install and enable the plugin through the openclaw-cli container:

docker compose run -T --rm openclaw-cli plugins install memory-get-acl --pin
docker compose run -T --rm openclaw-cli config set plugins.allow '["memory-get-acl"]' --strict-json
docker compose run -T --rm openclaw-cli config set plugins.slots.memory "memory-get-acl"
docker compose run -T --rm openclaw-cli config validate
docker compose restart openclaw-gateway

Then call the routes with your gateway token:

curl -fsSL \
  -H "Authorization: Bearer $OPENCLAW_GATEWAY_TOKEN" \
  "http://127.0.0.1:18789/api/memory/get?agent_id=main&identity=owner&identity_id=owner&path=MEMORY.md"

Publish (npm)

From this directory:

npm publish --access public