mirage-proxy for OpenClaw

Transparent secrets/PII filter between OpenClaw and LLM providers. Replaces sensitive data with plausible fakes — the LLM never knows.

GitHub: https://github.com/chandika/mirage-proxy

Quick Setup

Run the bundled setup script:

CODEBLOCK0

This downloads the binary, creates an auto-restart wrapper, starts the proxy, and verifies it's running.

To uninstall: INLINECODE0

Configure OpenClaw Providers

After setup.sh succeeds, patch the OpenClaw config. Keep original providers AND add mirage versions for instant fallback:

CODEBLOCK1

OpenAI / Codex (OAuth)

For OAuth-based providers (no API key env var), override the built-in provider baseUrl instead of creating a custom provider:

CODEBLOCK2

⚠️ Do NOT add "apiKey": "${OPENAI_API_KEY}" to custom providers unless the env var exists in your container — it will crash OpenClaw on startup.

Model Aliases

After config, switch with /model:

Persistence

mirage-proxy dies on OpenClaw restarts. Two solutions:

Docker entrypoint (recommended):
CODEBLOCK3

Heartbeat check (fallback):
Add to HEARTBEAT.md:

curl -s -o /dev/null -w "%{http_code}" http://127.0.0.1:8686/

Verify

CODEBLOCK5