Agent Optimizer
Stop burning money on misconfigured AI agents
Your OpenClaw 🦞 agents are leaking tokens, running stale configs, and loading skills that phone home to billing APIs. You just don't know it yet. Agent Optimizer finds every issue in one command — and fixes most of them automatically.
Features
What it does.
Cost Estimator
See your estimated monthly spend in £/$ based on your model, context window, and heartbeat. Recognises subscription models (Claude CLI, Codex), self-hosted models (LM Studio, Ollama), and flags expensive fallback models that could spike costs.
Config Audit
Catches invalid thinkingDefault values that crash your gateway, duplicate fallback models wasting slots, missing cross-provider redundancy, and unknown config keys that cause silent failures.
Cache Efficiency
Detects heartbeats in the Anthropic 5-minute cache dead zone, missing cacheRetention settings, frequent heartbeats without lightContext, and expensive compaction models burning tokens on summarization.
Security Scanner
Per-skill risk scoring (clean/suspicious/dangerous). Detects hidden billing, eval(), obfuscated code, risky npm dependencies, suspicious URLs, and unexpected executable files. Checks provenance — ClawHub vs local.
Bootstrap File Analysis
Checks every workspace file (SOUL.md, TOOLS.md, MEMORY.md, IDENTITY.md) against the 20K per-file and 150K total budget. Catches files that will be silently truncated or dropped from context entirely.
Channel Security
Audits DM and group policies across Telegram, WhatsApp, Discord, Slack, and more. Flags open DM policies, empty allowlists, mutable ID risks, and missing default security policies.
Token Efficiency
Flags context windows burning 5x more tokens than needed, heartbeats firing 24 times a day for no reason, and subagent concurrency eating your API budget.
Legacy Override Detection
Finds Codex transport overrides that shadow your OAuth path, hardcoded API keys in models.json, stale model API entries, allowPrivateNetwork misuse, and placeholder gateway credentials that crash v2026.4.12+.
Fleet Audit via SSH
Audit every OpenClaw instance in your fleet with one command. SSH into your agents wherever they live. Per-host status, config drift detection, gateway health.
Auto-Fix with Profiles
Three optimization profiles — minimal, balanced, aggressive — that automatically apply token-saving changes with a config backup. One command to go from bleeding money to running lean.
How it works
4 simple steps.
Install (free)
npm install -g @drakon-systems/agent-optimizer — works on macOS, Linux, and Windows. Node 20+ required. No account, no sign-up.
Audit (free)
Run agent-optimizer audit — full config scan, token analysis, security check, legacy override detection. See every issue with specific fix instructions. Completely free, no license needed.
See what you'd save (free)
Run agent-optimizer optimize --dry-run to preview exactly what would change and how much you'd save. No changes applied, no license required.
Activate & fix
Buy a license, run agent-optimizer activate, then agent-optimizer audit --fix to auto-apply everything. Fleet license unlocks multi-host SSH auditing.
Install in 10 seconds
macOS, Linux, and Windows. Requires Node.js 20+.
# Install
npm install -g @drakon-systems/agent-optimizer
# Run your first audit (free — no license needed)
agent-optimizer audit
# Preview optimizations (also free)
agent-optimizer optimize --dry-run
# Scan skills for malware and hidden billing (also free)
agent-optimizer scan# FREE COMMANDS
agent-optimizer audit # Full config, token, security, and cache audit
agent-optimizer audit --json # Machine-readable output
agent-optimizer scan # Scan skills/plugins for malware and billing
agent-optimizer optimize --dry-run # Preview optimization changes
agent-optimizer drift --name golden # Compare config against snapshot
# LICENSED COMMANDS (Solo £29+)
agent-optimizer audit --fix # Auto-apply safe fixes
agent-optimizer optimize # Apply token-saving optimizations
agent-optimizer optimize --only heartbeat # Selective optimization
agent-optimizer optimize --skip context # Skip specific changes
# FLEET COMMANDS (Fleet £79+)
agent-optimizer fleet --hosts jarvis,edith,tars # SSH fleet audit
# UTILITY
agent-optimizer snapshot save --name golden # Save config baseline
agent-optimizer snapshot list # List saved snapshots
agent-optimizer rollback # Restore pre-optimize backup
agent-optimizer update # Check for and install updates
agent-optimizer activate <key> # Activate license
agent-optimizer license # Show license statusNo account. No sign-up. No credit card. Just install and audit.
Purpose-built for OpenClaw
Agent Optimizer isn't a generic config linter. Every check, every scanner, every optimization profile is built specifically for OpenClaw's config format, auth system, plugin architecture, and ClawHub skill ecosystem.
🦞 What we audit
- openclaw.json — model config, compaction, heartbeat, pruning, dreaming, activeMemory
- auth-profiles.json — token expiry, duplicates, provider coverage, placeholder credentials
- models.json — legacy overrides, hardcoded keys, allowPrivateNetwork
- ClawHub skills — billing integrations, malware, eval() calls
- Plugin allowlist — stale installs, orphaned entries
- Tool permissions — allow/deny conflicts, elevated config
🦞 What we've caught
- ClawHub skill charging 0.001 USDT per call via hidden SkillPay.me
- thinkingDefault: "auto" crashing gateways on startup
- 1M context tokens burning £150/month when 200K would do
- Legacy Codex transport overrides shadowing OAuth paths
- Stale API keys from credential exposures still in auth profiles
- Heartbeats firing 24x/day burning tokens on idle agents
Built from production fleet management
Every check in Agent Optimizer exists because we hit that problem ourselves — running 5 AI agents across 4 servers, managing auth profiles, rotating keys, catching skills with hidden billing, and fixing config drift after every update.
Real fleet. Real problems.
Jarvis, Edith, TARS, CASE, Friday — each running OpenClaw on different hardware with different models, different auth, and different failure modes. Every auditor catches something we actually broke.
Security-first scanning
We found a ClawHub skill charging 0.001 USDT per API call through a hidden SkillPay.me integration. That's why the scanner exists. Your agents deserve better than trust-by-default.
CLI-native. No dashboard tax.
No web UI to maintain. No SaaS subscription. No account. Install, activate, run. Results in your terminal in under 2 seconds. Because operators live in terminals.
60+
Audit Checks
12
Auditor Modules
83
Tests Passing
0
Phone-Home Calls
Pricing
Simple, transparent pricing.
Free
£0
See every issue. No license, no sign-up, no limits on audits.
- ✓Full config audit — every check, every result
- ✓Token efficiency analysis with savings estimate
- ✓Security scanner for skills, plugins, and hooks
- ✓Legacy override detection
- ✓Optimize --dry-run (preview changes)
- ✓Unlimited runs, forever
Solo
£29
Auto-fix everything the free audit finds. One machine.
- ✓Everything in Free
- ✓audit --fix (auto-apply safe fixes)
- ✓optimize (apply token-saving profiles)
- ✓Config backup before every change
- ✓Offline license (RSA-signed, no phone-home)
Fleet
£79
Audit and fix your entire agent fleet from one terminal.
- ✓Everything in Solo
- ✓Fleet audit via SSH (unlimited hosts)
- ✓Per-host config comparison
- ✓Config drift detection across agents
- ✓Gateway status monitoring
Lifetime
£149
One payment. Never pay again. Everything we build, forever.
- ✓Everything in Fleet
- ✓12 months of updates included
- ✓Priority email support
- ✓Early access to new auditors
- ✓Future fleet dashboard (when released)
Frequently Asked Questions
What is Agent Optimizer?+
How much can I actually save?+
Does it phone home or require an account?+
What does the security scanner catch?+
Can I use this on a server I don't have local access to?+
What OpenClaw versions are supported?+
What if I lose my license key?+
agent-optimizer license to check your current status, or email support@drakonsystems.com.Is there a free version?+
How do I install and activate it?+
🦞 Your agents are bleeding tokens. Find out where.
One install, one command, one report. Every misconfiguration, every security issue, every wasted token — found and fixed.