Wayfern
Start building Sign in

NanoClaw + Wayfern

The token stays outside the container.

  • ncl groups config
  • Token in the OneCLI vault
  • No host mount
Set it up Create an account

NanoClaw runs each agent group in its own container, with only the mounts you give it. A container that reads the live web meets the same bot blocks as any script.

Add Wayfern to one agent group. The container calls the Wayfern tools over HTTPS, and the OneCLI vault holds the token outside the container.

Note:NanoClaw does not document MCP OAuth, or how OneCLI sends the token. Check that the first call reaches Wayfern with an Authorization: Bearer header.

A container box with the agent inside. A request leaves the container and passes a gate outside it, where the OneCLI vault adds the token. The request reaches api.wayfern.com, and the page text comes back into the container.

Setup

Add Wayfern to one agent group.

Each agent group gets its own servers. Add Wayfern only to the groups that need it.

  1. 1

    Install NanoClaw

    Skip this when it is installed.

    bash

    git clone https://github.com/nanocoai/nanoclaw.git nanoclaw-v2
cd nanoclaw-v2 && bash nanoclaw.sh
  2. 2

    Add the server

    Do not edit groups/<folder>/container.json. NanoClaw writes it again at each start.

    bash

    ncl groups config add-mcp-server --id <group-id> --name wayfern --url https://api.wayfern.com/mcp
ncl groups restart --id <group-id>
  3. 3

    Give the token through the vault

    Create a token with the mcp scope on the Tokens page. set-secrets replaces the whole list, so keep the current IDs in it.

    bash

    onecli secrets create --name Wayfern --type api_key --value "$WAYFERN_API_TOKEN" --host-pattern api.wayfern.com
onecli agents set-secrets --id "$AGENT_ID" --secret-ids "<current ids>,<new id>"
  4. 4

    Ask

    prompt

    @Andy what does the ferry company's page say about tomorrow's sailings?

Route

HTTPS out, token from the vault.

The container reaches api.wayfern.com over HTTPS and needs no host mount. NanoClaw does not document MCP OAuth, so the token comes from the OneCLI vault.

Remote MCP OAuth sign-in
Not tested
NanoClaw does not document MCP OAuth.
MCP + token Authorization header
Best fit
A wf_ token from the OneCLI vault, matched to api.wayfern.com.
Agent skill SKILL.md
Not tested
curl from the container with the vault's token is not documented.

Example tasks

Questions, one container each

  • 01

    Read a timetable

    “@Andy what does the ferry company's page say about tomorrow's sailings?”

    scrape_page at 1 credit.

  • 02

    Watch road works

    prompt

    ncl tasks create --group <id> --recurrence "0 9 * * 1-5" \
  --prompt "Read the city's road works page with Wayfern. Message me on Signal only when a new closure is listed."

    One scrape_page call each weekday, 1 credit.

  • 03

    Get the news

    “@Andy search for news about the port strike from today and give me three lines.”

    search_web bills 2 credits for each provider page.

  • 04

    Send a map

    “@Andy send me a screenshot of the weather service's warning map.”

    capture_screenshot returns an image URL for 5 credits.

Tools

What NanoClaw can call

The same tools on every route, at the REST API rates. Every result reports credits_charged.

All tool inputs
  • scrape_page Fetch one page through an anti-detect browser and return clean markdown, HTML, links and metadata. The screenshot, pdf and json formats add +4 credits (once); summary adds +2. 1 credit / page
  • extract_data Extract structured data from one or more pages with a prompt and an optional JSON Schema. Re-running over pages already fetched is free. 1 credit / uncached source page
  • map_site List a site's URLs from its sitemaps and page links. 2 credits / 10 URLs
  • capture_screenshot Capture a clean image of a page: cookie banners and ads removed, lazy images loaded, tall pages captured end to end. Returns a short-lived download URL and an artifact key, not image bytes. Slices of a full page cost nothing extra; a fail_if_contains match is not charged. 5 credits / capture
  • brand_profile Identity, colours, logos, social links and company metadata for a domain. 10 credits / profile
  • site_styleguide Colours, typography, spacing, radii, shadows and the design tokens a site declares. 10 credits / site
  • site_fonts Font families, where each is served from, available weights, file formats and where they are used. 5 credits / site
  • crawl_site Start a bounded multi-page crawl. Returns a job id immediately and charges nothing up front; pages are billed as the crawl runs. 1 credit / successful page
  • crawl_status Poll a crawl started with crawl_site and read a page of its results. The pages were billed as they were crawled. Free
  • search_web Search Google, Bing, and DuckDuckGo. Returns ranked results, ads, provider failures, pagination, and related queries. 2 credits / provider page
  • list_search_engines List live provider ids and labels. Free

Good to know

Admin approval
When the agent adds a server itself with add_mcp_server, an admin approves it from a card in a direct message.
Schedules
A task that runs more than four times a day needs a --script gate.
One token per group
Give each agent group its own token. Revoke one on the Tokens page, and the other groups keep working.

More agents

All AI agents

Connect NanoClaw in a minute.

Sign in once and the tools appear. Tool calls use the credits of your Wayfern plan, at the same rates as the API.

Create an account Read the guides