// the find
rookiestar28/ComfyUI-OpenClaw
Your own personal AIGC Factory. Any picture. Any reel. The Comfy way. ©️
ComfyUI-OpenClaw is a custom node pack that adds LLM-assisted prompt nodes, a sidebar inside the ComfyUI interface, a standalone admin page, and a token-gated HTTP API for webhooks, schedules and approvals. An optional sidecar process can drive the same API from Telegram, Discord, Slack, WhatsApp and four other chat platforms. It is aimed at people who run ComfyUI as a shared or remote service and want automation without leaving it wide open.
The defaults fail closed in ways you can check. Webhooks reject everything until bearer or HMAC auth is configured, admin writes fall back to localhost only when no admin token is set, and remote admin needs OPENCLAW_ALLOW_REMOTE_ADMIN=1 on top of the token. Chat button actions go through signed envelopes with timestamp and replay guards, and outbound callbacks and custom LLM base URLs pass through SSRF-safe host validation. The verification side goes beyond a unit test folder: the tree includes an OpenAPI sync check, an API route contract verifier, an audit chain verifier, a mutation test runner and a real-ComfyUI browser smoke workflow. Legacy Moltbot class names still load, so saved workflows survive the rename.
The scope is the main risk. One node pack now covers prompt planning, refinement, vision, batch variants, a model downloader, a scheduler, an approval queue, a parameter sweep tool, a pack manager and eight chat connectors, with more promised. The README does not say how deep each one goes, and a feature list that long usually means several of them are thin. The configuration matches that breadth: a first remote setup involves an admin token, a remote-admin flag, an observability token, a webhook auth mode, possibly a deployment profile with an acknowledgement, and separate SSRF allowances for any LAN-hosted LLM. Each gate is defensible, but expect more than a few minutes before anything works from a phone. Compatibility is the other constraint: Python 3.13 is the only locally validated version, and the sidebar is verified against specific ComfyUI frontend builds, so a host update is the likeliest thing to break it. The README also reads more like a release log than a product page, full of terms like hardening lanes, route drift and ratchet. The Atlas Cloud section is a promotional link with UTM tracking inside the LLM setup steps, which is worth knowing when weighing its provider recommendations.