OpenClaw: `exec` removed from Agent after update

exec disappeared and became not accessible because the tool profile switched to a restrictive mode.

Root cause

tools.profile was set to:

JSON

"tools": { "profile": "messaging" }

messaging does not expose broad runtime tools like exec.

The tools.profile can be set in openclaw.json, which is usually located in ~/.openclaw/openclaw.json

OpenClaw release notes document this change:

Switch profile back to broader access and define exec:

JSON

"tools": {
  "profile": "full",
  "allow": ["*"],
  "exec": { "host": "gateway", "security": "full", "ask": "off" }
}

full is convenient but increases risk (prompt abuse, larger blast radius, broader data access).

Use granular policy instead of all-or-nothing:

Cheers!