Agent Peer via Tailscale

Agent Peer via Tailscale

Two OpenClaw agents on different machines — connected as peers over Tailscale VPN. No public IP, no port forwarding, no relay server. Direct sessions_send between them as if on the same LAN.

What You Get

Machine A (You)                         Machine B (Friend)
──────────────                          ───────────────
OpenClaw: :8080                         OpenClaw: :8080
Tailscale: 100.x.x.x                    Tailscale: 100.x.x.x
     ↓                                          ↓
     └────────── Tailscale VPN (encrypted) ──────┘
                    ↓
         sessions_send(sessionKey=...,
           gatewayUrl="http://100.x.x.x:8080")

Both agents can send messages, session context, tips, and task delegations directly to each other.

Prerequisites

1. OpenClaw gateway running on both machines (local gateway, not node mode) 2. Tailscale installed on both machines (free account at tailscale.com) 3. Both machines on the same Tailscale network (one creates the network, shares auth key) 4. Gateway bound to Tailscale interface (not localhost only)

Step 1 — Install and Configure Tailscale

On Machine A (the host)

# Download and install Tailscale
winget install Tailscale.Tailscale   # Windows
or: brew install tailscale         # macOS
or: curl -fsSL https://tailscale.com/install.sh | sh  # Linux
Start Tailscale and authenticate
tailscale up --accept-routes
Note the Tailscale IP (write this down for Machine B)
tailscale ip -4

On Machine B (join the network)

# Install Tailscale the same way
Then join using the auth key from Machine A's Tailscale admin console
tailscale up --accept-routes --authkey=
Note your Tailscale IP
tailscale ip -4

Both machines now have IPs like 100.x.x.x on a private encrypted network.

Step 2 — Configure OpenClaw Gateway for Tailscale

By default, OpenClaw binds to localhost. You need it to bind to all interfaces so the peer can reach it over Tailscale.

Check your gateway config:

openclaw gateway status

Set gateway.bind to 0.0.0.0 (all interfaces) or specifically the Tailscale IP:

{
  "gateway": {
    "bind": "0.0.0.0",
    "port": 8080
  }
}

Apply and restart:

openclaw gateway restart

Security note: Binding to 0.0.0.0 exposes your gateway on all network interfaces. Tailscale traffic is encrypted peer-to-peer, but make sure you have a strong gateway token/password set. Consider gateway.auth to require token authentication.

Step 3 — Exchange Gateway URLs

Once both gateways are reachable over Tailscale, exchange the peer gateway URLs:

Machine A tells Machine B:

Gateway URL: http://:8080
Gateway token: 

Machine B tells Machine A:

Gateway URL: http://:8080
Gateway token: 

Step 4 — Create Peer Config File

On each machine, create a peer configuration at peer-agent/peer-config.md:

Your config (Machine A):

# My Peer Configuration
My Tailscale IP: 
My Gateway URL: http://:8080
My Gateway Token: 
Peer (Machine B)
Peer Name: 
Peer Tailscale IP: 
Peer Gateway URL: http://:8080
Peer Gateway Token: 
How to reach my agent
Use sessions_send with the gatewayUrl pointing to my gateway above.
My agentId for direct targeting: 

Step 5 — Test the Connection

From Machine A, test reaching Machine B's gateway:

# Ping the peer's gateway over Tailscale
curl http://:8080/health --connect-timeout 5

You should get a health response. If not, check that the peer's gateway is bound to 0.0.0.0 and their firewall allows incoming on port 8080 from the Tailscale network.

Step 6 — Send Messages Between Agents

Once connectivity is confirmed, use sessions_send with gatewayUrl pointing to the peer:

sessions_send(
  sessionKey="",
  agentId="",
  message="Hey, need your take on something — I'm stuck on...",
  gatewayUrl="http://:8080",
  gatewayToken=""
)

Daily Collaboration Patterns

Pattern 1: Morning Handoff

sessions_send(
  message="Morning! Here's where I'm at: [project status]. Blockers: [if any]. 
   Any insights on [specific problem]?",
  gatewayUrl="http://:8080",
  gatewayToken=""
)

Pattern 2: Quick Insight

"Something I learned today that might help you: [insight]"

Pattern 3: Code/Review Request

"Can you review my approach to [task]? Here it is: [description]. 
 Is there a better pattern I'm missing?"

Pattern 4: Delegation

"I've got a task that's more your specialty — want to delegate this to you? [task details].
 Let me know if you have capacity."

Reference Files

Security Notes

1. OpenClaw gateway running on both machines (local gateway, not node mode) 2. Tailscale installed on both machines (free account at tailscale.com) 3. Both machines on the same Tailscale network (one creates the network, shares auth key) 4. Gateway bound to Tailscale interface (not localhost only)