# self-hosting

Claude Tag officially supports only Slack. To get an on-call AI assistant on LINE, build one: run OpenClaw on a VPS, let its gateway receive messages from LINE’s cloud, and have the agent reply. Here’s the reusable skeleton, three security must-haves, and why freedom brings responsibility.

Coworkers tag intranet-hosted OpenClaw in Teams. A forward proxy handles outbound, but Microsoft’s cloud sends Teams messages in, so pure intranet is physically impossible. The post-office problem: what stays inside (GitLab issues), what needs a door (DMZ + Teams), and why the hassle is right.

In early 2026, OpenClaw exposed three boundaries: 20,000+ gateways online, 824 malicious ClawHub skills, and link previews automatically requesting sensitive URLs generated by models. Localhost binding, supply-chain review, and egress controls each cover one segment; none seals every path.

Everyone's installing OpenClaw raw and wondering why it burned $200 organizing Downloads. This guide adds guardrails: Raspberry Pi isolation, Tailscale VPN, Matrix E2E encryption, prompt injection hardening. The goal isn't perfect security—it's knowing where the bullets can get in.