Reddit 实战：Week1 保守起步配置，先稳住成本与行为再扩展
问题/场景：新手上手前两周易因默认配置和过度扩展导致 token 费用失控。前置条件：可编辑 openclaw.json 与 SOUL.md。实施步骤：1) 先固定单模型+低 token 上限；2) gateway 仅监听 127.0.0.1；3) 在 SOUL.md 写负面约束减少无效输出；4) 暂缓多代理/外部技能接入。关键配置：ai.maxTokens 4096、gateway.host 127.0.0.1。验证方法：连续 7 天日成本可控且响应风格稳定。风险与边界：社区经验帖非官方基线，需结合官方安全审计。来源归因：Reddit 贴文 + 官方 security audit 文档交叉。
REDDITDiscovered 2026-03-10Author u/twiceburneddev
Prerequisites
- You can modify local openclaw.json and workspace SOUL.md files.
- You can monitor provider token usage daily.
Steps
- Start with one primary model and cap maxTokens (example from post: 4096) to avoid runaway costs.
- Bind gateway to 127.0.0.1 in week 1 unless you explicitly need remote access.
- Add concrete negative constraints to SOUL.md (no filler, no guessing, no long preamble).
- Delay clawhub skill installs and multi-agent setups until baseline behavior/cost is stable.
- Run periodic safety checks with openclaw security audit before connecting sensitive accounts.
Commands
openclaw statusopenclaw security auditVerify
For at least 7 days, daily token spend stays within your target budget and no unsafe external exposure is detected.
Caveats
- The post includes user-provided model/version examples; verify model availability in your own provider account（需验证）.
- Localhost-only binding improves baseline safety but does not replace host-level hardening and auth hygiene.
Source attribution
This tip is aggregated from community/public sources and preserved with attribution.
Open original source ↗