Web tools
OpenClaw ships two lightweight web tools:web_search— Search the web using Brave Search API, Firecrawl Search, Gemini with Google Search grounding, Grok, Kimi, or Perplexity Search API.web_fetch— HTTP fetch + readable extraction (HTML → markdown/text).
How it works
web_searchcalls your configured provider and returns results.- Results are cached by query for 15 minutes (configurable).
web_fetchdoes a plain HTTP GET and extracts readable content (HTML → markdown/text). It does not execute JavaScript.web_fetchis enabled by default (unless explicitly disabled).- The bundled Firecrawl plugin also adds
firecrawl_searchandfirecrawl_scrapewhen enabled.
Choosing a search provider
| Provider | Result shape | Provider-specific filters | Notes | API key |
|---|---|---|---|---|
| Brave Search API | Structured results with snippets | country, language, ui_lang, time | Supports Brave llm-context mode | BRAVE_API_KEY |
| Firecrawl Search | Structured results with snippets | Use firecrawl_search for Firecrawl-specific search options | Best for pairing search with Firecrawl scraping/extraction | FIRECRAWL_API_KEY |
| Gemini | AI-synthesized answers + citations | — | Uses Google Search grounding | GEMINI_API_KEY |
| Grok | AI-synthesized answers + citations | — | Uses xAI web-grounded responses | XAI_API_KEY |
| Kimi | AI-synthesized answers + citations | — | Uses Moonshot web search | KIMI_API_KEY / MOONSHOT_API_KEY |
| Perplexity Search API | Structured results with snippets | country, language, time, domain_filter | Supports content extraction controls; OpenRouter uses Sonar compatibility path | PERPLEXITY_API_KEY / OPENROUTER_API_KEY |
Auto-detection
The table above is alphabetical. If noprovider is explicitly set, runtime auto-detection checks providers in this order:
- Brave —
BRAVE_API_KEYenv var ortools.web.search.apiKeyconfig - Gemini —
GEMINI_API_KEYenv var ortools.web.search.gemini.apiKeyconfig - Grok —
XAI_API_KEYenv var ortools.web.search.grok.apiKeyconfig - Kimi —
KIMI_API_KEY/MOONSHOT_API_KEYenv var ortools.web.search.kimi.apiKeyconfig - Perplexity —
PERPLEXITY_API_KEY,OPENROUTER_API_KEY, ortools.web.search.perplexity.apiKeyconfig - Firecrawl —
FIRECRAWL_API_KEYenv var ortools.web.search.firecrawl.apiKeyconfig
- Web tool SecretRefs are resolved atomically at gateway startup/reload.
- In auto-detect mode, OpenClaw resolves only the selected provider key. Non-selected provider SecretRefs stay inactive until selected.
- If the selected provider SecretRef is unresolved and no provider env fallback exists, startup/reload fails fast.
Setting up web search
Useopenclaw configure --section web to set up your API key and choose a provider.
Brave Search
- Create a Brave Search API account at brave.com/search/api
- In the dashboard, choose the Search plan and generate an API key.
- Run
openclaw configure --section webto store the key in config, or setBRAVE_API_KEYin your environment.
Perplexity Search
- Create a Perplexity account at perplexity.ai/settings/api
- Generate an API key in the dashboard
- Run
openclaw configure --section webto store the key in config, or setPERPLEXITY_API_KEYin your environment.
OPENROUTER_API_KEY instead, or configure tools.web.search.perplexity.apiKey with an sk-or-... key. Setting tools.web.search.perplexity.baseUrl or model also opts Perplexity back into the chat-completions compatibility path.
See Perplexity Search API Docs for more details.
Where to store the key
Via config: runopenclaw configure --section web. It stores the key under the provider-specific config path:
- Brave:
tools.web.search.apiKey - Firecrawl:
tools.web.search.firecrawl.apiKey - Gemini:
tools.web.search.gemini.apiKey - Grok:
tools.web.search.grok.apiKey - Kimi:
tools.web.search.kimi.apiKey - Perplexity:
tools.web.search.perplexity.apiKey
- Brave:
BRAVE_API_KEY - Firecrawl:
FIRECRAWL_API_KEY - Gemini:
GEMINI_API_KEY - Grok:
XAI_API_KEY - Kimi:
KIMI_API_KEYorMOONSHOT_API_KEY - Perplexity:
PERPLEXITY_API_KEYorOPENROUTER_API_KEY
~/.openclaw/.env (or your service environment). See Env vars.
Config examples
Brave Search:openclaw configure --section web, OpenClaw enables the bundled Firecrawl plugin automatically so web_search, firecrawl_search, and firecrawl_scrape are all available.
Brave LLM Context mode:
llm-context returns extracted page chunks for grounding instead of standard Brave snippets.
In this mode, country and language / search_lang still work, but ui_lang,
freshness, date_after, and date_before are rejected.
Perplexity Search:
Using Gemini (Google Search grounding)
Gemini models support built-in Google Search grounding, which returns AI-synthesized answers backed by live Google Search results with citations.Getting a Gemini API key
- Go to Google AI Studio
- Create an API key
- Set
GEMINI_API_KEYin the Gateway environment, or configuretools.web.search.gemini.apiKey
Setting up Gemini search
GEMINI_API_KEY in the Gateway environment.
For a gateway install, put it in ~/.openclaw/.env.
Notes
- Citation URLs from Gemini grounding are automatically resolved from Google’s redirect URLs to direct URLs.
- Redirect resolution uses the SSRF guard path (HEAD + redirect checks + http/https validation) before returning the final citation URL.
- Redirect resolution uses strict SSRF defaults, so redirects to private/internal targets are blocked.
- The default model (
gemini-2.5-flash) is fast and cost-effective. Any Gemini model that supports grounding can be used.
web_search
Search the web using your configured provider.Requirements
tools.web.search.enabledmust not befalse(default: enabled)- API key for your chosen provider:
- Brave:
BRAVE_API_KEYortools.web.search.apiKey - Firecrawl:
FIRECRAWL_API_KEYortools.web.search.firecrawl.apiKey - Gemini:
GEMINI_API_KEYortools.web.search.gemini.apiKey - Grok:
XAI_API_KEYortools.web.search.grok.apiKey - Kimi:
KIMI_API_KEY,MOONSHOT_API_KEY, ortools.web.search.kimi.apiKey - Perplexity:
PERPLEXITY_API_KEY,OPENROUTER_API_KEY, ortools.web.search.perplexity.apiKey
- Brave:
- All provider key fields above support SecretRef objects.
Config
Tool parameters
Parameters depend on the selected provider. Perplexity’s OpenRouter / Sonar compatibility path supports onlyquery and freshness.
If you set tools.web.search.perplexity.baseUrl / model, use OPENROUTER_API_KEY, or configure an sk-or-... key, Search API-only filters return explicit errors.
| Parameter | Description |
|---|---|
query | Search query (required) |
count | Results to return (1-10, default: 5) |
country | 2-letter ISO country code (e.g., “US”, “DE”) |
language | ISO 639-1 language code (e.g., “en”, “de”) |
freshness | Time filter: day, week, month, or year |
date_after | Results after this date (YYYY-MM-DD) |
date_before | Results before this date (YYYY-MM-DD) |
ui_lang | UI language code (Brave only) |
domain_filter | Domain allowlist/denylist array (Perplexity only) |
max_tokens | Total content budget, default 25000 (Perplexity only) |
max_tokens_per_page | Per-page token limit, default 2048 (Perplexity only) |
web_search supports query and count. For Firecrawl-specific controls like sources, categories, result scraping, or scrape timeout, use firecrawl_search from the bundled Firecrawl plugin.
Examples:
llm-context mode is enabled, ui_lang, freshness, date_after, and
date_before are not supported. Use Brave web mode for those filters.
web_fetch
Fetch a URL and extract readable content.web_fetch requirements
tools.web.fetch.enabledmust not befalse(default: enabled)- Optional Firecrawl fallback: set
tools.web.fetch.firecrawl.apiKeyorFIRECRAWL_API_KEY. tools.web.fetch.firecrawl.apiKeysupports SecretRef objects.
web_fetch config
web_fetch tool parameters
url(required, http/https only)extractMode(markdown|text)maxChars(truncate long pages)
web_fetchuses Readability (main-content extraction) first, then Firecrawl (if configured). If both fail, the tool returns an error.- Firecrawl requests use bot-circumvention mode and cache results by default.
- Firecrawl SecretRefs are resolved only when Firecrawl is active (
tools.web.fetch.enabled !== falseandtools.web.fetch.firecrawl.enabled !== false). - If Firecrawl is active and its SecretRef is unresolved with no
FIRECRAWL_API_KEYfallback, startup/reload fails fast. web_fetchsends a Chrome-like User-Agent andAccept-Languageby default; overrideuserAgentif needed.web_fetchblocks private/internal hostnames and re-checks redirects (limit withmaxRedirects).maxCharsis clamped totools.web.fetch.maxCharsCap.web_fetchcaps the downloaded response body size totools.web.fetch.maxResponseBytesbefore parsing; oversized responses are truncated and include a warning.web_fetchis best-effort extraction; some sites will need the browser tool.- See Firecrawl for key setup and service details.
- Responses are cached (default 15 minutes) to reduce repeated fetches.
- If you use tool profiles/allowlists, add
web_search/web_fetchorgroup:web. - If the API key is missing,
web_searchreturns a short setup hint with a docs link.