Agent setup
Set up Kilobat in OpenClaw
Let OpenClaw check your Mac’s connection and data use, with local MCP tools and Kilobat skills.
Install the CLI
The Kilobat CLI is free and open source, and it includes the MCP server. Install it with Homebrew:
brew install seifip/kilobat/kilobatCheck it with kilobat --version. kilobat doctor says whether the Kilobat app is running, its network filter is on and Pro is active; the tools work without the app, which adds Wi-Fi names, history and rule enforcement. The CLI needs macOS 14 or later.
Connect the MCP server
Run the agent backend and Kilobat on the Mac you want to check. A cloud runner, Linux server or container cannot use this local command to inspect your Mac.
Add Kilobat to OpenClaw’s MCP registry on this Mac.
openclaw mcp add kilobat --command kilobat --arg mcp --approval promptOpen a connection and check the advertised tools. Saving a server entry alone does not verify it.
openclaw mcp probe kilobatRestart the Gateway or agent runtime that should use the server. A separate CLI process cannot reload an already-running Gateway.
This uses OpenClaw’s native mcp.servers registry. Older mcporter-based setups use a separate registry; do not add a duplicate there. The selected runtime must support OpenClaw-managed MCP servers.
Add the skills
Nine Agent Skills teach the agent to read Kilobat's measurements and to ask before changing settings. Install them for all your projects with skills.sh:
npx skills add seifip/kilobat-skills -g -a openclawThis puts them in ~/.openclaw/skills/. Leave out -g to install them for the current project only, or leave out both flags to pick agents from a list.
The kilobat skill is the entry point: it holds the setup and safety rules and sends the agent to the skill that fits, such as mac-network-troubleshooting or mac-agent-runs. See all nine skills.
Try these prompts
Ask in plain words. The agent picks the tools; these are the ones each request usually needs.
| Ask | MCP tools |
|---|---|
| The internet feels slow. Find out why and tell me what to fix first. | diagnose_network, get_status |
| I'm about to pull a 6 GB Docker image. Is now a good time, or am I on a metered network? | get_conditions |
| Keep the Mac awake for the next two hours while you run the full test suite, then release it. | keep_awake, release_awake |
| What used my hotspot data today, app by app? | get_usage_report, get_status |
| I'm on my phone's hotspot. Which updaters would Kilobat pause, and should I turn that on? | get_conditions, get_updaters, set_updater_pause |
What OpenClaw can and can't change
Kilobat's MCP server marks every tool as read-only or as a change, and each change tool's description tells the agent to get your confirmation first. The kilobat skill holds the same rule: read freely, ask before changing.
Read-only measurements
- Measure Wi-Fi, router, internet and DNS latency, and per-app traffic:
diagnose_network,get_status,get_wifi,scan_wifi. - Find the layer that stops one host, trace a route and compare resolvers:
diagnose_connection,trace_route,benchmark_dns. - Read history, sessions, rules and approvals:
get_usage_report,list_sessions,list_rules,list_approvals. - Check every host it and the commands it ran contacted, with bytes and flags:
agent_network_log. - Ping for latency spikes with
run_stutter_test, which sends pings only.
Asks you first
- A speed test, which uses up to 80 MB (
run_speedtest; on a metered network, 10 MB or less), and a five-second LAN test (run_lan_test). - Looking up your public IP with Cloudflare (
get_exit_pathwithpublic_ip). - Profiles, app rules, blocked hosts, the new-app mode, budgets, quotas, a network's data cost and pausing updaters (
set_profile,set_app_rule,block_destination,set_new_app_mode,set_budget,set_app_quota,set_network_cost,set_updater_pause). - Holding another app's upload, such as Dropbox, until a better network (
hold_upload). - DNS, which macOS also guards with an administrator password prompt (
set_dns). - Keeping the Mac running with the lid closed, every time (
keep_awakewithlid_closed). A plainkeep_awakechanges no settings and ends when it expires.
Can't do
- Let a waiting app connect on its own:
decide_approvalcan block at once, but allowing opens Kilobat's approval window for you to confirm. - Change AirDrop visibility:
set_airdrop_visibilityopens System Settings for you. - Change sleep settings, another app's settings, or anything outside Kilobat. It never reads prompts or replies.
- Enforce rules without the Kilobat app and its network filter (Pro). Without them, rules are saved, not applied, and the agent should say so.
Keep change tools behind confirmation in the runtime and channel you use. The example requests per-call prompting for Codex-backed runs; other adapters have their own approval controls.
If the agent can also run shell commands, the kilobat CLI can do what the MCP tools do. The skills tell it which commands to run freely and which to ask about.
Track agent runs
OpenClaw has no ready-made Kilobat run adapter yet. Connecting MCP does not automatically track its working, waiting or done state. A custom hook can call kilobat agent-event start|working|waiting|done|failed --agent openclaw --session <id> --cwd <folder>. See Connect agents.
Sources
- OpenClaw: manage saved MCP servers
- OpenClaw: MCP and skills configuration
- Kilobat docs: AI agents and MCP
- skills.sh: supported agents and their skill folders
Checked on 1 November 2026. Agents change their settings often; if a step no longer matches, tell us at the support address.