[{"data":1,"prerenderedAt":846},["ShallowReactive",2],{"help-category-\u002Ftroubleshooting\u002Fconnections-blocked-by-a-firewall-or-proxy":3,"help-article-\u002Ftroubleshooting\u002Fconnections-blocked-by-a-firewall-or-proxy":4,"related-articles-\u002Ftroubleshooting\u002Fconnections-blocked-by-a-firewall-or-proxy":285},[],{"id":5,"title":6,"body":7,"category":270,"description":271,"draft":272,"extension":273,"meta":274,"navigation":275,"order":276,"path":277,"relatedArticles":278,"seo":279,"slug":280,"stem":281,"updatedAt":282,"__hash__":283,"excerpt":271,"searchText":284},"help\u002Fhelp\u002Ftroubleshooting\u002F11.connections-blocked-by-a-firewall-or-proxy.md","Connections blocked by a firewall or proxy",{"type":8,"value":9,"toc":261},"minimark",[10,14,17,22,183,186,190,216,220,231,235,243,247],[11,12,13],"p",{},"Share this article with your IT team. The table below lists every host and port MultiClaw needs — allowlisting them is the fastest way to resolve connection issues on managed networks.",[11,15,16],{},"The most common symptoms of a blocked connection are: the gateway starts but agents stay disconnected, cloud desktops won't connect, or auto-updates fail silently.",[18,19,21],"h2",{"id":20},"allowlist","Allowlist",[23,24,25,44],"table",{},[26,27,28],"thead",{},[29,30,31,35,38,41],"tr",{},[32,33,34],"th",{},"Service",[32,36,37],{},"Host",[32,39,40],{},"Protocol",[32,42,43],{},"Port",[45,46,47,67,82,98,114,130,147,167],"tbody",{},[29,48,49,53,59,62],{},[50,51,52],"td",{},"MultiClaw Cloud",[50,54,55],{},[56,57,58],"code",{},"*.multiclaw.io",[50,60,61],{},"HTTPS",[50,63,64],{},[56,65,66],{},"443",[29,68,69,71,75,78],{},[50,70,52],{},[50,72,73],{},[56,74,58],{},[50,76,77],{},"WSS (WebSocket)",[50,79,80],{},[56,81,66],{},[29,83,84,87,92,94],{},[50,85,86],{},"OpenAI",[50,88,89],{},[56,90,91],{},"api.openai.com",[50,93,61],{},[50,95,96],{},[56,97,66],{},[29,99,100,103,108,110],{},[50,101,102],{},"Anthropic",[50,104,105],{},[56,106,107],{},"api.anthropic.com",[50,109,61],{},[50,111,112],{},[56,113,66],{},[29,115,116,119,124,126],{},[50,117,118],{},"Google Gemini",[50,120,121],{},[56,122,123],{},"generativelanguage.googleapis.com",[50,125,61],{},[50,127,128],{},[56,129,66],{},[29,131,132,135,140,143],{},[50,133,134],{},"Cloud desktop relay",[50,136,137],{},[56,138,139],{},"turn.multiclaw.io",[50,141,142],{},"HTTPS (TURN signalling)",[50,144,145],{},[56,146,66],{},[29,148,149,151,155,158],{},[50,150,134],{},[50,152,153],{},[56,154,139],{},[50,156,157],{},"UDP (TURN relay)",[50,159,160,163,164],{},[56,161,162],{},"3478",", ",[56,165,166],{},"5349",[29,168,169,172,177,179],{},[50,170,171],{},"Auto-updater",[50,173,174],{},[56,175,176],{},"cdn.multiclaw.io",[50,178,61],{},[50,180,181],{},[56,182,66],{},[11,184,185],{},"You only need to allowlist the LLM provider APIs for the models you have configured. If you haven't connected a Google Gemini model, for example, you can skip that row.",[18,187,189],{"id":188},"if-udp-is-blocked","If UDP is blocked",[11,191,192,193,195,196,200,201,204,205,208,209,212,213,215],{},"Some networks block outbound UDP entirely. If cloud desktops won't connect after allowlisting ",[56,194,139],{},", go to ",[197,198,199],"strong",{},"Settings > Gateway",", scroll to the ",[197,202,203],{},"Browser Automation"," section, and set ",[197,206,207],{},"WebRTC connection mode"," to ",[197,210,211],{},"TURN relay",". This routes all traffic over TCP port ",[56,214,66],{}," instead of UDP.",[18,217,219],{"id":218},"configuring-a-proxy","Configuring a proxy",[11,221,222,223,226,227,230],{},"MultiClaw respects the system ",[56,224,225],{},"HTTP_PROXY"," and ",[56,228,229],{},"HTTPS_PROXY"," environment variables automatically. Set these in your shell profile or system environment settings before launching the app.",[18,232,234],{"id":233},"deep-packet-inspection-dpi","Deep packet inspection (DPI)",[11,236,237,238,226,240,242],{},"All MultiClaw connections use TLS. If your network uses DPI that intercepts and re-signs TLS traffic, WebSocket and WebRTC connections may break even when the domain is allowlisted. Ask your IT team to exclude ",[56,239,58],{},[56,241,139],{}," from DPI inspection.",[18,244,246],{"id":245},"still-not-connecting","Still not connecting?",[11,248,249,250,256,257,260],{},"If agents remain disconnected after your IT team has applied the allowlist rules, check ",[251,252,253],"a",{"href":253,"rel":254},"https:\u002F\u002Fstatus.multiclaw.io",[255],"nofollow"," for active incidents. If there's no incident, review the gateway log at ",[56,258,259],{},"~\u002F.openclaw\u002Flogs\u002Fgateway.log"," for error details.",{"title":262,"searchDepth":263,"depth":263,"links":264},"",2,[265,266,267,268,269],{"id":20,"depth":263,"text":21},{"id":188,"depth":263,"text":189},{"id":218,"depth":263,"text":219},{"id":233,"depth":263,"text":234},{"id":245,"depth":263,"text":246},"troubleshooting","Allowlist the hosts and ports MultiClaw needs so it works behind corporate firewalls and proxies.",false,"md",{},true,11,"\u002Ftroubleshooting\u002Fconnections-blocked-by-a-firewall-or-proxy",[],{"title":6,"description":271},"connections-blocked-by-a-firewall-or-proxy","help\u002Ftroubleshooting\u002F11.connections-blocked-by-a-firewall-or-proxy","2026-03-30","NYS1jmUvwwz9iryLWmuqVTvDNf_RZdGDeAe-dIySRdA","Connections blocked by a firewall or proxy Allowlist the hosts and ports MultiClaw needs so it works behind corporate firewalls and proxies.",[286,421,664],{"id":287,"title":288,"body":289,"category":270,"description":411,"draft":272,"extension":273,"meta":412,"navigation":275,"order":413,"path":414,"relatedArticles":415,"seo":416,"slug":417,"stem":418,"updatedAt":282,"__hash__":419,"excerpt":411,"searchText":420},"help\u002Fhelp\u002Ftroubleshooting\u002F01.agent-shows-disconnected.md","Agent shows 'Disconnected'",{"type":8,"value":290,"toc":402},[291,305,309,318,322,325,329,336,340,350,354,367,371,379,383,392],[11,292,293,294,297,298,300,301,304],{},"The ",[197,295,296],{},"Disconnected"," badge appears when the local OpenClaw gateway cannot reach MultiClaw Cloud. In most cases, the gateway has stopped — open ",[197,299,199],{}," and click ",[197,302,303],{},"Start gateway"," to fix it.",[18,306,308],{"id":307},"gateway-is-not-running","Gateway is not running",[11,310,311,312,314,315,317],{},"This is the most common cause. Go to ",[197,313,199],{}," and check the gateway status. If it shows as stopped, click ",[197,316,303],{}," and wait a few seconds for the agent status to update.",[18,319,321],{"id":320},"internet-connection-is-unavailable","Internet connection is unavailable",[11,323,324],{},"The gateway requires internet access to reach MultiClaw Cloud. Verify your machine can load a webpage. If your network is down, the agent will reconnect automatically once connectivity is restored.",[18,326,328],{"id":327},"multiclaw-cloud-is-experiencing-an-outage","MultiClaw Cloud is experiencing an outage",[11,330,331,332,335],{},"If your gateway is running and you have internet access, check ",[251,333,253],{"href":253,"rel":334},[255]," for any active incidents. No action is needed on your end — the gateway will reconnect once the service recovers.",[18,337,339],{"id":338},"workspace-session-has-expired","Workspace session has expired",[11,341,342,343,200,346,349],{},"Your session can expire after a period of inactivity. Go to ",[197,344,345],{},"Settings > General",[197,347,348],{},"Account"," card, and sign in again. The gateway will re-authenticate and the agent should show as connected within a few seconds.",[18,351,353],{"id":352},"firewall-or-proxy-blocking-the-connection","Firewall or proxy blocking the connection",[11,355,356,357,359,360,363,364,366],{},"Some corporate firewalls block outbound WebSocket connections. The gateway connects to MultiClaw Cloud over port ",[197,358,66],{}," using the ",[197,361,362],{},"WSS"," protocol. Ask your IT administrator to allow outbound WSS traffic on port 443 to ",[56,365,58],{},".",[18,368,370],{"id":369},"auth-token-has-expired-or-been-revoked","Auth token has expired or been revoked",[11,372,373,374,200,376,378],{},"If signing in again does not help, your local auth token may be corrupted or revoked. Go to ",[197,375,345],{},[197,377,348],{}," card, sign out completely, then sign back in. This replaces the stored token and typically resolves the issue.",[18,380,382],{"id":381},"gateway-is-running-but-agent-stays-disconnected","Gateway is running but agent stays disconnected",[11,384,385,386,300,388,391],{},"Transient WebSocket errors can leave the gateway in a stuck state. Go to ",[197,387,199],{},[197,389,390],{},"Restart gateway",". The gateway reconnects with exponential back-off — waiting 30–60 seconds after a brief network interruption often resolves it without a manual restart.",[393,394,396],"callout",{"type":395},"tip",[11,397,398,399,401],{},"If none of the steps above work, check the gateway log at ",[56,400,259],{}," for error messages that may point to the cause.",{"title":262,"searchDepth":263,"depth":263,"links":403},[404,405,406,407,408,409,410],{"id":307,"depth":263,"text":308},{"id":320,"depth":263,"text":321},{"id":327,"depth":263,"text":328},{"id":338,"depth":263,"text":339},{"id":352,"depth":263,"text":353},{"id":369,"depth":263,"text":370},{"id":381,"depth":263,"text":382},"Fix a disconnected agent status caused by gateway, network, session, or firewall issues.",{},1,"\u002Ftroubleshooting\u002Fagent-shows-disconnected",[],{"title":288,"description":411},"agent-shows-disconnected","help\u002Ftroubleshooting\u002F01.agent-shows-disconnected","9zuPiU2Ea9ivpf9-W_pFwN6PdgHplZxnykc7tldh_5k","Agent shows 'Disconnected' Fix a disconnected agent status caused by gateway, network, session, or firewall issues.",{"id":422,"title":423,"body":424,"category":270,"description":655,"draft":272,"extension":273,"meta":656,"navigation":275,"order":263,"path":657,"relatedArticles":658,"seo":659,"slug":660,"stem":661,"updatedAt":282,"__hash__":662,"excerpt":655,"searchText":663},"help\u002Fhelp\u002Ftroubleshooting\u002F02.gateway-fails-to-start.md","Gateway fails to start",{"type":8,"value":425,"toc":647},[426,455,459,465,470,506,510,513,517,535,539,542,546,571,575,578,582,607,611,614,618,637,641],[11,427,428,429,432,433,436,437,439,440,443,444,447,448,451,452,454],{},"If your gateway shows a red ",[197,430,431],{},"Error"," or ",[197,434,435],{},"Stopped"," status in ",[197,438,199],{}," and won't start, a port conflict is the most common cause. The gateway port is configured in your OpenClaw configuration file (",[56,441,442],{},"~\u002F.openclaw\u002Fopenclaw.json",") — if port ",[56,445,446],{},"18789"," is taken, update the ",[56,449,450],{},"port"," value there, then click ",[197,453,390],{},". If that doesn't help, work through the causes below.",[18,456,458],{"id":457},"port-conflict","Port conflict",[11,460,461,462,464],{},"Another process on your machine is already using port ",[56,463,446],{}," (the default gateway port). The gateway cannot bind to a port that's taken.",[11,466,467],{},[197,468,469],{},"To fix:",[471,472,473,480,491,499],"ol",{},[474,475,476,477,479],"li",{},"Open ",[56,478,442],{}," in a text editor.",[474,481,482,483,486,487,490],{},"Change the ",[56,484,485],{},"\"port\""," value to an unused port (e.g. ",[56,488,489],{},"18790",").",[474,492,493,494,496,497,366],{},"Save the file and click ",[197,495,390],{}," in ",[197,498,199],{},[474,500,501,502,505],{},"If you're on macOS or Linux and want to identify the conflicting process first, run ",[56,503,504],{},"lsof -i :18789"," in your terminal.",[18,507,509],{"id":508},"missing-or-corrupt-openclaw-binary","Missing or corrupt OpenClaw binary",[11,511,512],{},"The OpenClaw binary was deleted, moved, or never fully downloaded. Without it, the gateway cannot run.",[11,514,515],{},[197,516,469],{},[471,518,519,528],{},[474,520,521,522,527],{},"Reinstall the MultiClaw desktop app from ",[251,523,526],{"href":524,"rel":525},"https:\u002F\u002Fmulticlaw.io\u002Fdownload",[255],"multiclaw.io\u002Fdownload"," — this restores the OpenClaw binary.",[474,529,530,531,496,533,366],{},"Once reinstalled, click ",[197,532,390],{},[197,534,199],{},[18,536,538],{"id":537},"empty-or-invalid-workspace-token","Empty or invalid workspace token",[11,540,541],{},"Your gateway token was cleared — this can happen after a failed sign-in or an app reset. The gateway won't start without a valid token.",[11,543,544],{},[197,545,469],{},[471,547,548,556,562,565],{},[474,549,476,550,552,553,555],{},[197,551,345],{}," and scroll to the ",[197,554,348],{}," card.",[474,557,558,559,366],{},"Click ",[197,560,561],{},"Log out",[474,563,564],{},"Sign back in with your account credentials.",[474,566,567,568,570],{},"Your token is regenerated automatically. Click ",[197,569,390],{}," once signed in.",[18,572,574],{"id":573},"binary-not-executable-macos-and-linux","Binary not executable (macOS and Linux)",[11,576,577],{},"The OpenClaw binary exists but does not have execute permissions. This often happens after a manual file move or a filesystem restore.",[11,579,580],{},[197,581,469],{},[471,583,584,595,601],{},[474,585,586,587,590,591,594],{},"The OpenClaw binary is located at ",[56,588,589],{},"~\u002F.openclaw\u002Fbin\u002Fopenclaw"," on macOS and Linux (or ",[56,592,593],{},"%APPDATA%\\OpenClaw\\bin\\openclaw.exe"," on Windows).",[474,596,597,598,366],{},"In your terminal, run ",[56,599,600],{},"chmod +x ~\u002F.openclaw\u002Fbin\u002Fopenclaw",[474,602,558,603,496,605,366],{},[197,604,390],{},[197,606,199],{},[18,608,610],{"id":609},"data-directory-inaccessible","Data directory inaccessible",[11,612,613],{},"The OpenClaw data directory no longer exists or your user account cannot write to it. The gateway needs a writable directory to store its data.",[11,615,616],{},[197,617,469],{},[471,619,620,624,631],{},[474,621,476,622,479],{},[56,623,442],{},[474,625,626,627,630],{},"Update the ",[56,628,629],{},"\"data_dir\""," value to a folder that exists and that you have write access to.",[474,632,558,633,496,635,366],{},[197,634,390],{},[197,636,199],{},[18,638,640],{"id":639},"still-not-working","Still not working?",[11,642,643,644,646],{},"Check the gateway log at ",[56,645,259],{}," — it will usually identify the exact failure line.",{"title":262,"searchDepth":263,"depth":263,"links":648},[649,650,651,652,653,654],{"id":457,"depth":263,"text":458},{"id":508,"depth":263,"text":509},{"id":537,"depth":263,"text":538},{"id":573,"depth":263,"text":574},{"id":609,"depth":263,"text":610},{"id":639,"depth":263,"text":640},"Diagnose and fix port conflicts, missing binaries, token errors, and permission problems.",{},"\u002Ftroubleshooting\u002Fgateway-fails-to-start",[],{"title":423,"description":655},"gateway-fails-to-start","help\u002Ftroubleshooting\u002F02.gateway-fails-to-start","_0wciXQlb9TxhMmXBMEySTf8zKPz2-_ue4yZEGoHNvI","Gateway fails to start Diagnose and fix port conflicts, missing binaries, token errors, and permission problems.",{"id":665,"title":666,"body":667,"category":270,"description":836,"draft":272,"extension":273,"meta":837,"navigation":275,"order":838,"path":839,"relatedArticles":840,"seo":841,"slug":842,"stem":843,"updatedAt":282,"__hash__":844,"excerpt":836,"searchText":845},"help\u002Fhelp\u002Ftroubleshooting\u002F03.cannot-sign-in.md","Cannot sign in",{"type":8,"value":668,"toc":828},[669,672,676,686,701,705,708,713,724,729,745,749,756,770,774,777,791,795,798,809,813,816],[11,670,671],{},"If you cannot sign in, start by checking your workspace URL — most sign-in failures are caused by using the wrong subdomain. Open your invite email and copy the URL directly from it.",[18,673,675],{"id":674},"wrong-workspace-url","Wrong workspace URL",[11,677,678,679,226,682,685],{},"Your workspace has a unique subdomain. ",[56,680,681],{},"acme.multiclaw.io",[56,683,684],{},"acme.app.multiclaw.io"," are different addresses — only one is yours.",[471,687,688,691,694],{},[474,689,690],{},"Open your original invite email.",[474,692,693],{},"Copy the workspace URL exactly as written.",[474,695,696,697,700],{},"Paste it into your browser or the Desktop app's ",[197,698,699],{},"Workspace URL"," field.",[18,702,704],{"id":703},"expired-or-invalid-session","Expired or invalid session",[11,706,707],{},"Your session token may have expired, especially after a long period of inactivity.",[11,709,710],{},[197,711,712],{},"On the web dashboard:",[471,714,715,721],{},[474,716,717,718,366],{},"Open your browser's cookie settings and clear all cookies for ",[56,719,720],{},"multiclaw.io",[474,722,723],{},"Return to your workspace URL and sign in again.",[11,725,726],{},[197,727,728],{},"On the Desktop app:",[471,730,731,738,742],{},[474,732,733,734,552,736,555],{},"Go to ",[197,735,345],{},[197,737,348],{},[474,739,558,740,366],{},[197,741,561],{},[474,743,744],{},"Sign back in with your credentials.",[18,746,748],{"id":747},"sign-in-with-multiplai-error","Sign in with Multiplai error",[11,750,751,752,755],{},"If you use ",[197,753,754],{},"Sign in with Multiplai"," and see an error, the issue is usually a session mismatch between Multiplai and MultiClaw.",[471,757,758,761,767],{},[474,759,760],{},"Sign out of both Multiplai and MultiClaw completely.",[474,762,763,764,766],{},"Return to the MultiClaw sign-in screen and click ",[197,765,754],{}," again.",[474,768,769],{},"If the error persists, try signing in with email and password instead, or contact support.",[18,771,773],{"id":772},"email-not-confirmed","Email not confirmed",[11,775,776],{},"If you signed up recently and have never signed in before, your email address may not be confirmed yet.",[471,778,779,782,785],{},[474,780,781],{},"Check your inbox and spam\u002Fjunk folder for a confirmation email from MultiClaw.",[474,783,784],{},"Click the link inside that email.",[474,786,787,788,366],{},"If the email has expired or you cannot find it, return to the sign-in screen and click ",[197,789,790],{},"Resend confirmation",[18,792,794],{"id":793},"account-locked","Account locked",[11,796,797],{},"After repeated failed sign-in attempts, access may be temporarily restricted.",[471,799,800,803],{},[474,801,802],{},"Wait a few minutes, then try again.",[474,804,805,806,366],{},"If you still cannot sign in, ask your workspace admin to check your account status in MultiClaw Cloud under ",[197,807,808],{},"Settings → Members",[18,810,812],{"id":811},"multiclaw-cloud-is-down","MultiClaw Cloud is down",[11,814,815],{},"Occasionally, sign-in fails because the service itself is unavailable.",[471,817,818,825],{},[474,819,820,821,824],{},"Visit ",[251,822,253],{"href":253,"rel":823},[255]," to check for active incidents.",[474,826,827],{},"If an incident is reported, wait for it to be resolved — no action is needed on your end.",{"title":262,"searchDepth":263,"depth":263,"links":829},[830,831,832,833,834,835],{"id":674,"depth":263,"text":675},{"id":703,"depth":263,"text":704},{"id":747,"depth":263,"text":748},{"id":772,"depth":263,"text":773},{"id":793,"depth":263,"text":794},{"id":811,"depth":263,"text":812},"Resolve sign-in failures caused by wrong workspace URL, expired sessions, SSO errors, or unconfirmed email.",{},3,"\u002Ftroubleshooting\u002Fcannot-sign-in",[],{"title":666,"description":836},"cannot-sign-in","help\u002Ftroubleshooting\u002F03.cannot-sign-in","59H6ZnK81o4O-gYFOFiVOMekfEPx496CxJfHU7S5Myw","Cannot sign in Resolve sign-in failures caused by wrong workspace URL, expired sessions, SSO errors, or unconfirmed email.",1778463887239]