How to unlock exec for agent?
What we're trying to do:
Give the AI agent (Patrick) access to the cron and exec tools from inside the sandbox so it can manage its own scheduled tasks and run shell commands autonomously.
What we've tried:
1. Added browser, gateway, cron, exec to tools.sandbox.tools.allow in config
2. Removed cron and exec from tools.sandbox.tools.deny
3. Set tools.elevated.enabled: true
4. Set tools.elevated.allowedByConfig: true
5. Recreated the sandbox container multiple times (openclaw sandbox recreate --all)
6. Restarted the gateway multiple times
Current config state:
• tools.sandbox.tools.allow: ["browser","gateway","cron","exec"]
• tools.sandbox.tools.deny: ["canvas","nodes","telegram","whatsapp","discord","irc","googlechat","slack","signal","imessage"]
• tools.elevated.enabled: true
• Sandbox mode: all
The problem:
Every time the agent tries to call cron or exec, it gets Tool cron not found / Tool exec not found. The agent is running inside a Docker sandbox container, config is correct, but tools aren't being passed through.
Question for support:
What's the correct way to expose cron and exec to a sandboxed agent in OpenClaw 2026.2.17? Is there something beyond the allow/deny config that needs to be set?
Give the AI agent (Patrick) access to the cron and exec tools from inside the sandbox so it can manage its own scheduled tasks and run shell commands autonomously.
What we've tried:
1. Added browser, gateway, cron, exec to tools.sandbox.tools.allow in config
2. Removed cron and exec from tools.sandbox.tools.deny
3. Set tools.elevated.enabled: true
4. Set tools.elevated.allowedByConfig: true
5. Recreated the sandbox container multiple times (openclaw sandbox recreate --all)
6. Restarted the gateway multiple times
Current config state:
• tools.sandbox.tools.allow: ["browser","gateway","cron","exec"]
• tools.sandbox.tools.deny: ["canvas","nodes","telegram","whatsapp","discord","irc","googlechat","slack","signal","imessage"]
• tools.elevated.enabled: true
• Sandbox mode: all
The problem:
Every time the agent tries to call cron or exec, it gets Tool cron not found / Tool exec not found. The agent is running inside a Docker sandbox container, config is correct, but tools aren't being passed through.
Question for support:
What's the correct way to expose cron and exec to a sandboxed agent in OpenClaw 2026.2.17? Is there something beyond the allow/deny config that needs to be set?
The AI that actually does things. Emails, calendar, home automation - all from your favorite chat app. New shell, ready to help. The lobster way.
134,426Members
Resources
Similar Threads
Was this page helpful?
