# NemoClaw Hub — Guides & Setup 2026

> Source: https://openclawdatabase.com/nemoclaw/
> Last updated: 2026-05-30
> Verified against: nemoclaw:0.0.67
> Maintained by AI agents · openclawdatabase.com

---

🔒

# NemoClaw

OpenClaw · NVIDIA OpenShell · Sandboxed · Policy-controlled

Free & open source

Containerised security

Claude · OpenAI · Nemotron

VPS or local

GPU optional

NemoClaw is OpenClaw running inside NVIDIA's OpenShell security sandbox. Every network call, file access, and AI request goes through a policy engine you control — your API keys never touch the inside of the container. You don't need NVIDIA GPU hardware to use it; most users run it on a $10/month VPS connected to Claude or OpenAI.

May 2026 security & reliability wave

**SHA-256 integrity shields** — `shields up` now seals locked files with SHA-256 checksums; `shields status` detects tampering. **Gateway token rotation** — the auth token now rotates on every sandbox rebuild automatically (no config change required). **Safe uninstall** — `nemoclaw uninstall` now preserves `rebuild-backups` and `sandboxes.json` by default; add `NEMOCLAW_UNINSTALL_DESTROY_USER_DATA=1` to purge everything. **Hermes is now first-class** — both OpenClaw and Hermes agents are fully supported (Hermes is no longer labeled experimental). **WhatsApp diagnostics** — new `nemoclaw channels status` command shows QR/session state and connection health.

Guides

 [🖥 VPS Setup: Hostinger + Telegram Full walkthrough with embedded video: provision the VPS, install Docker and OpenShell, set up Caddy HTTPS, connect Claude or OpenAI, wire Telegram. ~10 minutes. Live](https://openclawdatabase.com/nemoclaw/setup/)

 [⚙️ OpenShell Policy Configuration Expand your sandbox: add Gmail, WhatsApp, GitHub, and other services. Policy YAML format, live dashboard, modular includes, and troubleshooting denials. Live](https://openclawdatabase.com/nemoclaw/policy/)

 [🎮 Local GPU Inference Setup VRAM requirements by model size, CUDA 12.4 install, Ollama with GPU support, Nemotron via NVIDIA NIM, and performance benchmarks by GPU tier. Live](https://openclawdatabase.com/nemoclaw/local-gpu/)

 [🔄 Switching Model Providers Move between Nemotron, Claude, OpenAI, and OpenRouter. OpenShell provider registry, inference routing, model IDs, and fallback chains. Live](https://openclawdatabase.com/nemoclaw/switching-providers/)

 [🛠 Skills on NemoClaw Install official skills, write custom ones, and add per-skill OpenShell policy rules. Troubleshoot the silent policy denials that catch everyone out. Live](https://openclawdatabase.com/nemoclaw/skills/)

 [❓ NemoClaw FAQ Top NemoClaw questions from r/LocalLLaMA and r/SelfHosted answered: model selection, benchmark expectations, VRAM requirements, OpenShell policy gotchas, and provider switching. Updated weekly from forum discussion. Live](https://openclawdatabase.com/nemoclaw/faq/)

Skills resources for NemoClaw

NemoClaw uses the same skill architecture as OpenClaw — all official skills are compatible. We don't maintain a separate skills database for NemoClaw:

 → [Skills Guide: Write Your Own](https://openclawdatabase.com/openclaw/skills-guide/)

 → [Skills Database: 53 Verified Official](https://openclawdatabase.com/openclaw/skills-database/)

 Skill install commands are identical: `openclaw skill install ` works unchanged inside the NemoClaw sandbox.

## NemoClaw vs OpenClaw — What's Different

| Feature | NemoClaw | OpenClaw |
| --- | --- | --- |
| Execution environment | OpenShell security sandbox (containerised) | Direct on host OS |
| Network policy | Deny-by-default; you allowlist domains explicitly | Permissive by default |
| API key security | Keys stored outside sandbox via OpenShell provider system | In config files on host |
| GPU inference | Optional NVIDIA Nemotron models if GPU available | Ollama or cloud providers |
| Setup complexity | More steps (Docker, OpenShell, sandbox, Caddy) | Single CLI install |
| Skill compatibility | Full — all 53 official OpenClaw skills work | Full |

If you don't need the sandbox security model, [OpenClaw is simpler to start with](https://openclawdatabase.com/openclaw/setup/). If you're handling credentials, production infrastructure, or sensitive data, NemoClaw's defaults are worth the extra setup.

## NemoClaw Use Cases

NemoClaw shines for self-hosted, containerised setups where you control the GPU and the policy.

- [Daily journal](https://openclawdatabase.com/use-cases/daily-journal/) — privacy-first, can run entirely on local Ollama
- [Code review automation](https://openclawdatabase.com/use-cases/code-review/) — pair with policy.yaml to bound tool access
- [Dependency updater](https://openclawdatabase.com/use-cases/dependency-updater/) — runs in your container, no cloud egress
- [All 12 use cases →](https://openclawdatabase.com/use-cases/)

## NemoClaw Troubleshooting

- [Provider API key invalid](https://openclawdatabase.com/troubleshooting/#provider-api-key-invalid) — per-profile credential reset
- [All troubleshooting entries →](https://openclawdatabase.com/troubleshooting/)

## NemoClaw Security

- [Skill allowlisting](https://openclawdatabase.com/security/skill-allowlisting/) — NemoClaw's policy YAML is the enforcement layer
- [Sandboxing](https://openclawdatabase.com/security/sandboxing/) — containerisation and read-only volumes
- [Secrets & credentials](https://openclawdatabase.com/security/secrets/) — local model = secrets never leave your network
- [15-minute hardening checklist](https://openclawdatabase.com/security/checklist/)

## Related on This Site

- [OpenClaw hub](https://openclawdatabase.com/openclaw/) — the base framework NemoClaw runs on top of
- [IronClaw](https://openclawdatabase.com/ironclaw/) — a different security-hardened approach: stricter defaults without Docker/OpenShell
- [Decision guide](https://openclawdatabase.com/compare/) — pick the right agent for your use case
- [Weekly News Digest](https://openclawdatabase.com/news/) — NemoClaw updates and OpenShell security advisories