solution gateway high linux macos windows

Gateway won't start: 'refusing to bind ... without auth'

Fix gateway startup failures when binding to LAN/tailnet without token/password auth configured.

By CoClaw Team •

Symptoms

  • Gateway immediately exits and logs show:
    • refusing to bind gateway to <host>:18789 without auth (...)
  • openclaw gateway status shows the service restarting/crashing.

Cause

When the gateway binds to a non-loopback interface (LAN/tailnet/custom), OpenClaw requires auth to be configured (token or password). This prevents exposing an unauthenticated gateway on the network.

Fix

1) Set gateway auth (token or password)

Simplest: token auth.

  • Set gateway.auth.mode to token
  • Set gateway.auth.token (or OPENCLAW_GATEWAY_TOKEN)

Then restart the gateway.

2) Or bind only to loopback (local-only)

If you do not need LAN access, bind to loopback (127.0.0.1) and use SSH tunnel / local access.

Verify

  • openclaw gateway status shows running.
  • You can open the Control UI and it stays connected.

Verification & references

  • Reviewed by:CoClaw Code Team
  • Last reviewed:March 14, 2026
  • Verified on: Linux · macOS · Windows

References

Official docs

  1. OpenClaw docs: /gateway/authentication
  2. OpenClaw docs: /gateway/troubleshooting
Want to explore more? Browse all solutions or ask in the Community Forum .
Report a problem

Related Resources

Gateway fails to start: EADDRINUSE / another gateway instance is already listening
Fix
Fix OpenClaw gateway port conflicts (EADDRINUSE) by stopping the other process or choosing a new gateway port/profile.
Linux/systemd: OpenClaw leaves orphan gateway processes or port 18789 conflicts
Fix
Fix Linux hosts where CLI-triggered gateway respawn collides with a systemd-managed OpenClaw gateway, causing orphan processes, EADDRINUSE, or 'another gateway instance is already listening'.
Gateway: service says running but the CLI/UI can't connect (probe fails)
Fix
Fix 'running but unreachable' gateway states by checking you're probing the right URL, confirming the port is listening, and aligning auth/bind settings.
Gateway: CLI/UI is probing the wrong machine (local vs remote mode mismatch)
Fix
Fix confusing 'gateway unreachable' states by aligning gateway.mode, gateway.remote.url, profiles/state dirs, and the URL you probe.
OpenClaw Configuration Guide: openclaw.json, Models, Gateway, Channels, and Plugins
Guide
Set up openclaw.json without guesswork: confirm the active config path, choose a safe baseline, add providers and channels in the right order, and verify each change before it becomes a production problem.
OpenClaw Control UI Auth & Pairing: Fix 'unauthorized', 1008, and Remote Dashboard Access
Guide
Restore stable Control UI access by separating gateway auth from device pairing, fixing unauthorized and 1008 loops, and verifying that your remote path stays stable.