Multi-tenant AI agent hosting with zero-cost idle
OpenClaw Serverless is a free, open-source deployment architecture for running AI agents on GCP Cloud Run with complete per-tenant isolation. It features GCSFuse workspace persistence, webhook integration for Telegram and Slack, and scales to zero when idle. Available on GitHub at github.com/cloudon-one/openclaw-serverless.
Core Features
Multi-Tenant Isolation
Complete resource separation between tenants with zero cross-tenant data access.
- Separate Cloud Run services per tenant
- Individual service accounts with strict IAM
- Isolated GCS workspace buckets
- Network segmentation and secret scoping
Serverless Architecture
Scale-to-zero GCP Cloud Run instances with persistent workspace storage.
- Zero minimum instances for idle tenants
- 15-20 second cold start when activated
- GCSFuse mounts for workspace persistence
- ~$50-70/month per warm tenant
Messaging Integration
Production-ready webhook handling for Telegram and Slack with security validation.
- Telegram bot webhook with timing-safe signature validation
- Slack app with HMAC-SHA256 signature verification
- Centralized router for tenant routing
- Replay attack prevention
How It Works
Configure Tenants
Define tenants in a YAML configuration file. Each tenant gets its own Cloud Run service, service account, and workspace.
Deploy with Terraform
Apply Terraform to provision all GCP infrastructure: Cloud Run services, GCS buckets, IAM bindings, and secrets.
Register Webhooks
Set up Telegram bot tokens or Slack app credentials. The router automatically routes incoming messages to the correct tenant.
Scale Automatically
Active tenants scale up on demand. Idle tenants scale to zero. You only pay for compute when agents are actually working.
Why Choose OpenClaw Serverless?
Zero-Cost Idle
Tenants with no activity scale to zero instances, costing nothing. Warm tenants run at approximately $50-70/month.
Complete Isolation
Every tenant has its own service account, workspace bucket, and Cloud Run service. No shared state, no cross-tenant data access.
One-File Tenant Addition
Adding a new tenant is a YAML change and a Terraform apply. No code changes, no new deployments, no manual configuration.
Persistent Agent Workspaces
GCSFuse mounts Google Cloud Storage directly into containers, persisting agent state across container restarts without sync daemons.
Tech Stack
Frequently Asked Questions
What is OpenClaw Serverless?
How much does it cost to run?
What messaging platforms are supported?
How is tenant isolation achieved?
Can I add custom agent skills?
Other CloudOn Tools
FinOps Guardian
FinOps Guardian is a free, open-source cost governance toolkit for AWS and GCP. It automatically detects idle resources, provides cost-saving recommendations, and cleans up unused infrastructure. Deployed with Terraform, it runs serverlessly on Lambda and Cloud Functions. Available on GitHub at github.com/cloudon-one/FinOps-Guardian.
Learn moreMulti-Cloud Runway
Multi-Cloud Runway is a free, open-source infrastructure template providing security-hardened landing zones for AWS and GCP. It sets up multi-account environments with networking, IAM, security monitoring, and compliance via Terraform/Terragrunt. Available on GitHub at github.com/cloudon-one/multi-cloud-runway.
Learn moreSecureOps
SecureOps is a free, open-source GitHub Action that performs automated security scanning on repositories. It detects secrets, vulnerabilities, and misconfigurations using Gitleaks, Trivy, and OSV-Scanner. Generates multi-format reports and integrates with GitHub Security tab. Available on GitHub at github.com/cloudon-one/git-security-scanner-public.
Learn more