ClawHub

Whisper Local Api

Secure, offline, OpenAI-compatible local Whisper ASR endpoint for OpenClaw. Features faster-whisper (large-v3-turbo), built-in privacy with no cloud telemetry, low-RAM usage footprint, and high-accuracy speech-to-text transcription. Perfect for safe and private AI agent voice commands.

Audits

Pass
ClawScanReview

Agentic behavior and permission review.

Static analysisPass

Pattern checks against bundled files.

VirusTotalPass

Multi-engine malware detections and file reputation.

Install

openclaw skills install whisper-local-api

Whisper Local API - Secure & Private ASR

Deploy a privacy-first, 100% local speech-to-text service in a deterministic way. This allows OpenClaw to process audio transcriptions safely on your own hardware without ever contacting third-party cloud APIs.

Key SEO & Security Features

  • 100% Offline & Private: Your voice data, commands, and transcriptions never leave your host system. Zero cloud dependencies.
  • Highly Accurate: Uses the large-v3-turbo model via faster-whisper, achieving state-of-the-art accuracy even with accents or background noise.
  • Memory Safe: Operates around ~400-500MB of RAM, making it extremely lightweight for VPS or low-resource edge servers.
  • OpenAI API Compatible: Exposes a strict /v1/audio/transcriptions endpoint mimicking OpenAI's JSON format. Compatible natively with any software that supports OpenAI's Whisper API.

Standard Workflow

  1. Install/update runtime: 
    bash scripts/bootstrap.sh
  2. Start service: 
    bash scripts/start.sh
  3. Validate service health: 
    bash scripts/healthcheck.sh
  4. (Optional) Run a smoke transcription test with a local audio file: 
    bash scripts/smoke-test.sh /path/to/test-speech.mp3

Repo Location

Default install/update path used by scripts:

  • ~/whisper-local-api

Override with env var before running scripts:

WHISPER_DIR=/custom/path bash scripts/bootstrap.sh

OpenClaw Integration Notes

After the healthcheck passes, use the secure local endpoint:

  • URL: http://localhost:9000
  • Endpoint: /v1/audio/transcriptions

No authentication tokens are passed over the network.

Safety Rules

  • Ask before any package-manager operations.
  • The API securely binds locally to 0.0.0.0. If exposing to the public internet, deploy behind a secure reverse proxy (like Nginx) and enforce HTTPS + Basic Auth.
  • This service will safely auto-fallback memory allocation modes (float16 -> int8) to prevent CPU crashes.