Bot Setup Guide
Humanity LabsBot Setup Guide
Build a personal AI that runs 24/7 on your own machine. Each phase unlocks a new capability. Check off steps as you go — progress saves automatically.
Your AI needs its own machine that never turns off. The best option is a Mac mini — it's small (about the size of a sandwich), silent, and uses very little electricity ($2-3/month). A spare laptop with the lid closed also works. If you don't have spare hardware, you can rent a cloud server (VPS) from Hetzner or DigitalOcean for $5-10/month.
This should not be the computer you use every day. Your AI gets its own machine so it can run 24/7 without interrupting your work.
First, open Terminal. Terminal is an app on your Mac that lets you type commands directly to the computer. To open it: press the Command key (⌘) and the Space bar at the same time. A search bar called Spotlight appears. Type terminal and press Enter. A window with a blinking cursor opens — this is Terminal.
Copy the line below (click to copy), go to Terminal, paste with Command + V, and press Enter.
It asks for your Mac password. When you type it, nothing appears on screen — no dots, no stars. That's normal. Type it and press Enter. Wait 2-5 minutes until you see a new blinking cursor.
Your AI can't work if the machine sleeps. Open Terminal and paste:
sudo means "do this with administrator permission." Password prompt works the same (invisible typing).
Also: System Settings → Displays → Advanced → turn off "Automatically adjust brightness." For laptops: System Settings → Battery → Options → "Prevent automatic sleeping on power adapter."
Your AI needs its own email to sign up for services. Go to Gmail signup on your phone (easier for Google's phone verification). Pick any name — it's a throwaway identity.
Then on the AI's computer, open a browser, go to gmail.com, log in with the new account, and leave it logged in.
Open Terminal and paste:
This installs OpenClaw, registers it as a background service (auto-starts on boot), and starts it immediately. It keeps running even if you close Terminal or restart.
Alternative if you have Homebrew: brew install openclaw then openclaw gateway install && openclaw gateway start.
Tailscale (free) creates a private encrypted network between your devices, no matter where they are. You'll use it to access the AI's screen and dashboard from your phone or laptop — even from another country.
Open Tailscale from Applications. Click the menu bar icon (top right) and sign in with Google, Microsoft, or GitHub. The machine gets a Tailscale IP (like 100.x.x.x) — write it down.
Then install Tailscale on your phone (App Store / Play Store) and laptop (tailscale.com/download). Sign in with the same account on each.
vnc://[Tailscale IP]. From your phone: use a VNC app like Screens (iOS) or bVNC (Android). You'll need this when the AI hits CAPTCHAs or browser issues.OpenClaw has a web dashboard for checking status, viewing conversations, and managing settings.
From any device on your Tailscale network, open a browser and go to http://[Tailscale IP]:18789. Bookmark it on your phone for quick health checks.
Telegram is a free messaging app. This is how you'll talk to your AI — you send a message, it replies in the same chat, like texting a friend.
Install it on your phone from the App Store or Play Store. Then follow the OpenClaw Telegram setup guide (~5 minutes — you create a "bot" in Telegram and paste a token into OpenClaw).
Open Telegram and message your AI: "Hello, are you there?"
It should reply within seconds. If not, check the dashboard (Setup phase) for errors. Common fix: openclaw gateway restart in Terminal.
Tell the AI to sign up for developer services. Send it:
"Sign up for GitHub, Vercel, and Supabase using your Gmail account."
It opens a browser, goes to each site, and handles registration. Help with CAPTCHAs via remote screen access from Setup.
For small purchases (like a $11/year domain), create a free virtual card at Privacy.com with a $20/month limit. You type the card number yourself.
Invite the AI to collaborate:
GitHub: Repository → Settings → Collaborators → Add the AI's username.
Vercel: Team → Members → Invite the AI's Gmail.
Supabase: Organization → Members → Invite the AI's Gmail.
Google Docs: Share → Enter the AI's Gmail.
Obsidian is a free app that makes Markdown files (your AI's native format) look beautiful. Open Terminal and paste:
Open Obsidian (Command + Space, type "obsidian"). Click "Open folder as vault." Press Command + Shift + G, type ~/.openclaw/workspace, click Open. You'll see all the AI's files.
Obsidian Sync ($4/month) encrypts your files end-to-end and syncs across all devices. Not even Obsidian can read your content.
In Obsidian: gear icon (⚙️) → Core plugins → toggle on Sync → click Sync in sidebar → log in → Create new remote vault.
In Sync settings, find "Excluded folders" and add Code. Code repos use Git, not Sync.
Obsidian only syncs while open. Auto-launch and self-restart it:
Launches on boot, restarts every 5 minutes if closed.
Phone: App Store or Play Store. Laptop: obsidian.md/download.
On each device: new vault → Settings → Sync → same account → select the remote vault. Everything the AI writes appears on your phone within seconds.
Lets your AI search all notes by meaning, not keywords. "What restaurant did James recommend?" works even if "restaurant" never appears. Runs locally — no data sent anywhere.
Tell it which folders to search. Open the config:
Find memorySearch and add your folders:
Save, close, restart:
First run downloads a model (~313MB) and indexes notes (2-5 min). After that, instant.
The AI should never run on your personal computer or be logged into your personal accounts. Its own machine, Gmail, GitHub, everything. If compromised, the damage is a throwaway Gmail and free-tier accounts — not your personal life.
The OpenClaw gateway only listens on 127.0.0.1 (localhost). No one on the internet can reach it. Never expose it publicly. Tailscale handles remote access through a private tunnel.
Open SOUL.md in your AI's workspace (visible in Obsidian) and add rules:
"Never send emails, make purchases, or post publicly without asking me first. Never access files outside the workspace. Use trash instead of permanent delete."
Like setting expectations with a new employee. Not unbreakable, but significantly reduces unintended actions.
API tokens should have minimum permissions and expire after 90 days. Ask your AI: "Review your API tokens and flag any with excessive permissions or no expiration."
New features and security patches ship frequently. Run weekly:
Or tell the AI: "Run openclaw update."
What's still risky: Prompt injection (malicious content tricking the AI) is unsolved industry-wide — that's why throwaway accounts matter. The LLM provider sees your conversations, so don't share passwords or financial data. Only install OpenClaw skills from trusted sources.