NemoClaw Setup Guide: Fastest Way to Install

Overview

NemoClaw is not a replacement for OpenClaw—it's an open-source security and privacy layer that wraps around your existing OpenClaw setup. Built in collaboration with OpenClaw's creator Peter Steinberger, NemoClaw solves one of OpenClaw's biggest challenges: security.

Video Reference: Watch on YouTube
Duration: ~7 minutes
Difficulty: Intermediate

What is NemoClaw?

NemoClaw is a security wrapper that adds enterprise-grade protection to OpenClaw without requiring you to start from scratch.

Key Features

Isolated Sandboxing: Agents run in secure containers
Policy-Based Security: Granular control over agent permissions
Network Isolation: Controlled external access
Data Privacy Controls: Protect sensitive information
Privacy Router: Intelligent data routing
Hybrid Model Strategy: Mix local and cloud models securely

Important: You Don't Need to Start from Scratch

If you already have an OpenClaw agent, you can add NemoClaw as a layer on top. You do not need to reinstall everything.

Prerequisites

Existing OpenClaw agent (recommended) or fresh installation
VPS with 2GB+ RAM (Zebra VPS recommended at $2/month)
Discord bot token (if using Discord integration)
API key for your chosen model

Installation Methods

Method 1: Agent-Assisted Installation (Fastest)

This is the recommended method if you already have an OpenClaw agent.

Step 1: Share Documentation

Send your agent the NemoClaw documentation:

Learn and understand Nvidia's NemoClaw from nvidia.com/nemo

Learn and understand Nvidia's NemoClaw from nvidia.com/nemo

Step 2: Request Installation

Can you set up a NemoClaw agent in our Discord server?

Can you set up a NemoClaw agent in our Discord server?

Step 3: Provide Resources

Your agent will ask for:

Zebra VPS credentials (IP, username, password)
Discord bot token
API key preference

Step 4: Let Your Agent Handle It

Your orchestrator agent will:

SSH into the VPS
Install NemoClaw
Configure security layers
Set up Discord integration
Test the installation

Installation time: 10-20 minutes (automated)

[Image blocked: NemoClaw Installation]

Method 2: Manual VPS Installation

If you prefer hands-on control or don't have an existing agent.

Step 1: Get a VPS

Sign up for Zebra VPS
Choose 2GB RAM plan ($2/month)
Note your credentials:
- IP address
- SSH username
- SSH password

Step 2: Connect to VPS

bash

ssh ubuntu@YOUR_VPS_IP

ssh ubuntu@YOUR_VPS_IP

Step 3: Install NemoClaw

bash

curl -fsSL https://nvidia.com/nemo/install.sh | bash

curl -fsSL https://nvidia.com/nemo/install.sh | bash

Step 4: Configure

Follow the setup wizard:

Choose model provider
Enter API key
Configure security policies
Set up messaging platform

Step 5: Verify

bash

nemo status

nemo status

Model Options

Free Option: Nvidia Nemotron 3 Super

Specs:

$0 per million input tokens
$0 per million output tokens
Available on OpenRouter

Setup:

Sign up at OpenRouter.ai
Create API key
Select "Nvidia Nemotron 3 Super" as model

Paid Options

MiniMax M2.5/M2.7:

Best for task execution
Popular on OpenRouter
Affordable pricing

Claude Opus/Sonnet 4.6:

Recommended for architecture tasks
Higher quality reasoning
More expensive

Hunter Alpha:

Free tier available
Good for experimentation

Discord Integration

Step 1: Create Discord Bot

Go to Discord Developer Portal
Click "New Application"
Name your application
Go to "Bot" section
Click "Add Bot"
Copy the bot token

Step 2: Configure NemoClaw

bash

nemo config discord

nemo config discord

Paste your Discord bot token when prompted.

Step 3: Invite Bot to Server

Go to OAuth2 → URL Generator
Select scopes: bot, applications.commands
Select permissions: Send Messages, Read Messages, Embed Links
Copy generated URL
Open URL in browser and invite to your server

[Image blocked: Discord Bot Permissions]

Security Configuration

Understanding Security Layers

NemoClaw adds multiple security layers:

OpenShell: Core infrastructure providing isolated sandboxes

Policy-Based Guardrails: Control what agents can access

Network Isolation: Restrict external connections

Data Privacy Controls: Protect sensitive information

Configuring Policies

Basic Setup (Recommended for beginners):

bash

nemo policy set --level basic

nemo policy set --level basic

Custom Setup:

bash

nemo policy edit

nemo policy edit

Edit policies to allow/deny:

File system access
Network requests
External API calls
System commands

Architecture Integration

If you have multiple OpenClaw agents, NemoClaw can integrate as an additional secure agent.

Example Architecture

Main Orchestrator (Opus 4.6)
├── Research Agent (MiniMax M2.7)
├── Task Executor (MiniMax M2.7)
├── Discord Manager (Sonnet 4.6)
└── NemoClaw Agent (Nemotron 3 Super) ← Secure layer

Main Orchestrator (Opus 4.6)
├── Research Agent (MiniMax M2.7)
├── Task Executor (MiniMax M2.7)
├── Discord Manager (Sonnet 4.6)
└── NemoClaw Agent (Nemotron 3 Super) ← Secure layer

Benefits

Secure handling of sensitive operations
Isolated environment for risky tasks
Additional layer of verification
Compliance-friendly architecture

Troubleshooting

Installation Fails on Windows

Problem: Docker Desktop issues on Windows

Solution: NemoClaw requires Linux. Use one of these approaches:

Install on VPS (recommended)
Use WSL2 (advanced - see Windows setup guide)
Use agent-assisted installation on VPS

Agent Can't Install NemoClaw

Problem: Your agent encounters errors during installation

Solution:

Ensure VPS has sufficient resources (2GB+ RAM)
Verify SSH credentials are correct
Check that VPS is running Ubuntu/Debian
Try manual installation method

NemoClaw Won't Start

Problem: Service fails to start after installation

Solutions:

Check logs: nemo logs
Verify configuration: nemo config check
Ensure API key is valid
Restart service: nemo restart

Discord Bot Not Responding

Problem: Bot appears online but doesn't respond

Solutions:

Verify bot token is correct
Check bot has proper permissions in Discord
Ensure NemoClaw is running: nemo status
Review logs: nemo logs discord

Comparison: NemoClaw vs Standard OpenClaw

Standard OpenClaw

Pros:

Simpler setup
Direct system access
Faster execution

Cons:

Security risks
No isolation
Harder to audit

NemoClaw

Pros:

Enterprise-grade security
Isolated sandboxes
Policy-based controls
Audit trails

Cons:

Slightly more complex setup
Small performance overhead
Requires understanding of security policies

When to Use NemoClaw

Use NemoClaw If:

✅ You handle sensitive data
✅ You need compliance (GDPR, HIPAA, etc.)
✅ You want granular permission control
✅ You're in an enterprise environment
✅ You need audit trails

Stick with Standard OpenClaw If:

✅ You're just experimenting
✅ You don't handle sensitive data
✅ You want maximum simplicity
✅ You're comfortable with security risks

Best Practices

Start with Basic Policies: Don't over-restrict initially—learn what your agent needs
Monitor Logs: Regularly check logs for security events
Update Regularly: Keep NemoClaw updated for latest security patches
Test Policies: Verify policies work as expected before production use
Document Changes: Keep track of policy modifications

Next Steps

After installation:

Test Basic Commands: Verify agent responds correctly
Configure Policies: Set up security rules for your use case
Integrate with Existing Agents: Connect to your orchestrator
Monitor Performance: Check that security layers don't impact speed significantly
Review Logs: Understand what security events are being logged

Related Resources

NemoClaw Windows Setup Guide [blocked]
Hermes Agent Setup on VPS [blocked]
OpenClaw Security Best Practices [blocked]

Community Feedback

If you successfully set up NemoClaw:

Share your configuration in the community Discord
Report any unique features you discover
Help others troubleshoot issues
Contribute to documentation improvements

Getting Help

Official Documentation: nvidia.com/nemo
Community Discord: Join for setup assistance
GitHub Issues: Report bugs and feature requests
Ask Your Agent: Use your existing OpenClaw agent to troubleshoot

Last Updated: 2026-05-06