🦀 openclawd-stack

Solana × xAI Grok agentic trading engine —
sandboxed through NVIDIA OpenShell, powered by $CLAWD.

$CLAWD Contract Address

8cHzQHUS2s2h8TzCmfqPKYiM4dSt4roa3n7MyRLApump

pump.fun · Solscan · DexScreener · Birdeye · Jupiter

---

What is this?

openclawd-stack is an end-to-end runtime for running an autonomous Solana trading agent under hard sandbox policy. It combines:

• 🧠 xAI Grok 4.20 for reasoning, chat, vision, voice, and 4–16-agent research swarms
• 🛡️ NVIDIA OpenShell sandbox with Landlock + seccomp + declarative network policy
• 🦀 $CLAWD as the native token — agent payments, creator fees, buybacks
• 💰 Privy agentic wallets — keys never touch the sandbox filesystem
• 📡 Telegram bridge — real-time wallet narration in natural language
• ⚡ Helius + Pump.fun — sub-second mempool visibility and first-block execution
• 🔌 31 MCP tools exposed to any Grok or Claude client
• 💳 x402 on Solana — pay-per-call agent APIs with on-chain settlement

The agent is given a funded wallet, a strict egress policy, a heartbeat loop, and a vault that logs everything it does. It can keep running unattended without becoming unbounded.

⚡ Quickstart

# Install
npm install -g @mawdbotsonsolana/nemoclaw

# Validate host, run the 9-step wizard, and launch
nemoclaw doctor
nemoclaw launch

# Or drop straight into the Solana operator stack
nemoclaw solana start

Required environment variables

export XAI_API_KEY="..."          # https://x.ai/api — unlocks Grok
export HELIUS_API_KEY="..."       # https://helius.dev — free tier works
export TELEGRAM_BOT_TOKEN="..."   # https://t.me/BotFather
export PRIVY_APP_ID="..."         # https://dashboard.privy.io
export PRIVY_APP_SECRET="..."     # (optional) for server-signed policies
export NVIDIA_API_KEY="..."       # (optional) Nemotron fallback

📖 Full walkthrough → openclawd-stack/NemoClawd-main/docs/get-started/quickstart.md

🗂 Repo Layout

This repo ships two sibling projects that share a sandbox model and the $CLAWD token.

openclawd-stack/ — the runtime

Package	What it does
NemoClawd-main/	The nemoclaw CLI, blueprint, sandbox image, MCP server, Pump-Fun services, and the full 📚 developer docs.
bridge/	Solana ⇄ Telegram narration bridge with heartbeat + vault logging.
gateway/	OpenShell inference gateway wiring.
orchestrator/	Runtime orchestrator — spawns sandboxes, signs payments, manages lifecycle.
payments/	Payment-gated agent surfaces.
template/	Sandbox template assets.
deploy/e2b-solana-clawd/	One-click E2B cloud-sandbox deployment.
docs/	Stack-level architecture docs.
OpenShell-main/	Vendored NVIDIA OpenShell source for reproducible builds.

Open-Clawd/ — the payment primitives

Package	What it does
clawd-vault-master/	Clawd Vault — long-running observer runtime (the "always-on" agent brain).
solana-clawd-x402/	Solana x402 payment worker (Cloudflare).
x402/	x402 reference implementation on Cloudflare Workers.
clawd-vault-program.rs	On-chain vault program (Rust / Anchor).
client-sdk.ts	Client SDK for gateway consumers.
solana-x402-scheme.ts	Solana x402 scheme definition.

🏗 Architecture

flowchart TB
    subgraph Host["Host"]
        CLI["nemoclaw CLI"]
        BP["NemoClawd blueprint"]
        OS["OpenShell gateway"]
        CLI --> BP --> OS
    end

    subgraph SB["OpenShell Sandbox · strict policy"]
        AGENT["OpenClawd agent"]
        MCP["31 MCP tools"]
        VAULT["~/.nemoclaw/vault"]
        AGENT --- MCP
        AGENT --- VAULT
    end

    subgraph INF["Inference"]
        GROK["xAI Grok 4.20"]
        NEMO["NVIDIA Nemotron"]
        OLLAMA["Ollama DeepSolana"]
    end

    subgraph SOL["Solana"]
        RPC["Helius RPC"]
        WALLET["Privy wallet"]
        CLAWD["\$CLAWD token"]
        PUMP["Pump.fun"]
    end

    TG["Telegram bridge"]

    OS --> AGENT
    AGENT -.routed.-> GROK
    AGENT -.fallback.-> NEMO
    AGENT -.offline.-> OLLAMA
    AGENT --> RPC
    AGENT --> WALLET
    WALLET --> CLAWD
    AGENT --> PUMP
    AGENT --> TG

    classDef sol fill:#9945FF,stroke:#333,color:#fff
    classDef nv fill:#76b900,stroke:#333,color:#1a1a1a
    classDef xai fill:#000,stroke:#333,color:#fff
    class RPC,WALLET,CLAWD,PUMP sol
    class OS,NEMO nv
    class GROK xai

Loading

🧠 Inference Providers

NemoClawd ships with three swappable inference backends. Switch any time without restarting the sandbox.

Provider	Default model	Context	When to use	Credential
xAI (default)	grok-4.20-reasoning	256K	Production, voice, vision, multi-agent	XAI_API_KEY
xAI multi-agent	grok-4.20-multi-agent	256K	4–16 agents collaborating on research	XAI_API_KEY
NVIDIA Cloud	nvidia/nemotron-3-super-120b-a12b	131K	GPU-cloud fallback	NVIDIA_API_KEY
Ollama local	8bit/DeepSolana	32K	Offline, Solana-tuned, no API key	—

# Swap at runtime — the sandbox keeps running
openshell inference set --provider xai --model grok-4.20-multi-agent

🛡 Security Model

Every agent runs closed-by-default. Egress is declarative, not discovered:

• Network policy — YAML allowlist per binary + HTTP method + path. Unknown hosts are blocked and surface in the TUI for operator approval.
• Filesystem — /sandbox + /tmp read-write; everything else read-only.
• Identity — dedicated sandbox user with Landlock LSM enforcement.
• Wallets — Privy-managed. Private keys never enter the sandbox filesystem.
• Heartbeat — balance + funding state checked continuously. Below floor → protection mode.
• Vault — append-only JSONL audit trail at ~/.nemoclaw/vault/.

📖 See Network Policies for the full baseline.

🚀 Deploy

Target	Command	Notes
Local	nemoclaw launch	Docker + OpenShell on your machine
Brev GPU	nemoclaw deploy my-gpu-box	Provisions a remote VM with GPU + sandbox
E2B	See deploy/e2b-solana-clawd	One-click cloud sandbox
DGX Spark	sudo nemoclaw setup-spark	Ubuntu 24.04 cgroup-v2 fixes

📚 Documentation

🚀 Quickstart	Install, launch, first prompt
🧭 How It Works	Financial runtime loop, heartbeat, vault
⌨️ CLI Commands	Full nemoclaw + openclaw nemoclaw reference
🧠 Inference Profiles	Grok, Nemotron, DeepSolana
🛡 Network Policies	Egress rules, operator approval
🏗 Architecture	Plugin, blueprint, sandbox
☁️ Deploy to Remote GPU	Brev end-to-end
📨 Telegram Bridge	Chat with the agent
👀 Monitoring	Logs, TUI, debugging

🤝 Contributing

Contributions welcome — see CONTRIBUTING.md and the docs style guide.

Found a security issue? See SECURITY.md. Please do not open a public issue for vulnerabilities.

📜 License

Apache 2.0 — copyright 2025-2026 x402agent / openclawd-stack contributors.

_{Built with 🦀 $CLAWD on Solana · Reasoned by xAI Grok · Sandboxed by NVIDIA OpenShell}