NemoClaw Setup Guide: Fastest Way to Install

Overview

NemoClaw is not a replacement for OpenClaw—it's an open-source security and privacy layer that wraps around your existing OpenClaw setup. Built in collaboration with OpenClaw's creator Peter Steinberger, NemoClaw solves one of OpenClaw's biggest challenges: security.

Video Reference: Watch on YouTube
Duration: ~7 minutes
Difficulty: Intermediate

What is NemoClaw?

NemoClaw is a security wrapper that adds enterprise-grade protection to OpenClaw without requiring you to start from scratch.

Key Features

Isolated Sandboxing: Agents run in secure containers
Policy-Based Security: Granular control over agent permissions
Network Isolation: Controlled external access
Data Privacy Controls: Protect sensitive information
Privacy Router: Intelligent data routing
Hybrid Model Strategy: Mix local and cloud models securely

Important: You Don't Need to Start from Scratch

If you already have an OpenClaw agent, you can add NemoClaw as a layer on top. You do not need to reinstall everything.

Prerequisites

Existing OpenClaw agent (recommended) or fresh installation
VPS with 2GB+ RAM (Zebra VPS recommended at $2/month)
Discord bot token (if using Discord integration)
API key for your chosen model

Installation Methods

Method 1: Agent-Assisted Installation (Fastest)

This is the recommended method if you already have an OpenClaw agent.

Step 1: Share Documentation

Send your agent the NemoClaw documentation:

Learn and understand Nvidia's NemoClaw from nvidia.com/nemo

Step 2: Request Installation

Can you set up a NemoClaw agent in our Discord server?

Step 3: Provide Resources

Your agent will ask for:

Zebra VPS credentials (IP, username, password)
Discord bot token
API key preference

Step 4: Let Your Agent Handle It

Your orchestrator agent will:

SSH into the VPS
Install NemoClaw
Configure security layers
Set up Discord integration
Test the installation

Installation time: 10-20 minutes (automated)

NemoClaw Installation

Method 2: Manual VPS Installation

If you prefer hands-on control or don't have an existing agent.

Step 1: Get a VPS

Sign up for Zebra VPS
Choose 2GB RAM plan ($2/month)
Note your credentials:
- IP address
- SSH username
- SSH password

Step 2: Connect to VPS

ssh ubuntu@YOUR_VPS_IP

Step 3: Install NemoClaw

curl -fsSL https://nvidia.com/nemo/install.sh | bash

Step 4: Configure

Follow the setup wizard:

Choose model provider
Enter API key
Configure security policies
Set up messaging platform

Step 5: Verify

nemo status

Model Options

Free Option: Nvidia Nemotron 3 Super

Specs:

$0 per million input tokens
$0 per million output tokens
Available on OpenRouter

Setup:

Sign up at OpenRouter.ai
Create API key
Select "Nvidia Nemotron 3 Super" as model

Paid Options

MiniMax M2.5/M2.7:

Best for task execution
Popular on OpenRouter
Affordable pricing

Claude Opus/Sonnet 4.6:

Recommended for architecture tasks
Higher quality reasoning
More expensive

Hunter Alpha:

Free tier available
Good for experimentation

Discord Integration

Step 1: Create Discord Bot

Go to Discord Developer Portal
Click "New Application"
Name your application
Go to "Bot" section
Click "Add Bot"
Copy the bot token

Step 2: Configure NemoClaw

nemo config discord

Paste your Discord bot token when prompted.

Step 3: Invite Bot to Server

Go to OAuth2 → URL Generator
Select scopes: bot, applications.commands
Select permissions: Send Messages, Read Messages, Embed Links
Copy generated URL
Open URL in browser and invite to your server

Discord Bot Permissions

Security Configuration

Understanding Security Layers

NemoClaw adds multiple security layers:

OpenShell: Core infrastructure providing isolated sandboxes

Policy-Based Guardrails: Control what agents can access

Network Isolation: Restrict external connections

Data Privacy Controls: Protect sensitive information

Configuring Policies

Basic Setup (Recommended for beginners):

nemo policy set --level basic

Custom Setup:

nemo policy edit

Edit policies to allow/deny:

File system access
Network requests
External API calls
System commands

Architecture Integration

If you have multiple OpenClaw agents, NemoClaw can integrate as an additional secure agent.

Example Architecture

Main Orchestrator (Opus 4.6)
├── Research Agent (MiniMax M2.7)
├── Task Executor (MiniMax M2.7)
├── Discord Manager (Sonnet 4.6)
└── NemoClaw Agent (Nemotron 3 Super) ← Secure layer

Benefits

Secure handling of sensitive operations
Isolated environment for risky tasks
Additional layer of verification
Compliance-friendly architecture

Troubleshooting

Installation Fails on Windows

Problem: Docker Desktop issues on Windows

Solution: NemoClaw requires Linux. Use one of these approaches:

Install on VPS (recommended)
Use WSL2 (advanced - see Windows setup guide)
Use agent-assisted installation on VPS

Agent Can't Install NemoClaw

Problem: Your agent encounters errors during installation

Solution:

Ensure VPS has sufficient resources (2GB+ RAM)
Verify SSH credentials are correct
Check that VPS is running Ubuntu/Debian
Try manual installation method

NemoClaw Won't Start

Problem: Service fails to start after installation

Solutions:

Check logs: nemo logs
Verify configuration: nemo config check
Ensure API key is valid
Restart service: nemo restart

Discord Bot Not Responding

Problem: Bot appears online but doesn't respond

Solutions:

Verify bot token is correct
Check bot has proper permissions in Discord
Ensure NemoClaw is running: nemo status
Review logs: nemo logs discord

Comparison: NemoClaw vs Standard OpenClaw

Standard OpenClaw

Pros:

Simpler setup
Direct system access
Faster execution

Cons:

Security risks
No isolation
Harder to audit

NemoClaw