Skip to main content

Overview

OCA works perfectly without root. For rooted devices (Magisk), OCA optionally sets up an oca-root wrapper for selective root-level commands.

Root Detection

The installer auto-detects root and runs scripts/setup-root.sh if found:

Use Stock OneUI + Magisk for Samsung devices (A23, A13, etc.). Avoid GSI ROMs for server use — stock kernel has better WiFi drivers and Magisk compatibility.

Using oca-root


Security

The oca-root wrapper is intentionally narrow — it doesn’t grant blanket root to all OpenClaw processes.
Best practices:
  • Set Magisk root access to “Apps only”
  • Use SSH key auth when running as root
  • Keep Magisk updated