Use --no-pairing CLI flag instead of config

start.sh

@@ -157,9 +157,6 @@ if [ -n "$SPACE_HOST" ]; then
   CONFIG_JSON=$(echo "$CONFIG_JSON" | jq ".gateway.controlUi.allowedOrigins = [\"https://${SPACE_HOST}\"]")
 fi
 
-# Disable pairing for Docker/headless environments (security warning: only use in trusted networks)
-CONFIG_JSON=$(echo "$CONFIG_JSON" | jq ".gateway.security.pairing = false")
-
 # Telegram (supports multiple user IDs, comma-separated)
 if [ -n "$TELEGRAM_BOT_TOKEN" ]; then
   CONFIG_JSON=$(echo "$CONFIG_JSON" | jq '.plugins.entries.telegram = {"enabled": true}')
@@ -244,7 +241,8 @@ echo "🚀 Launching OpenClaw gateway on port 7860..."
 echo ""
 # Set model via environment for the gateway
 export LLM_MODEL="$LLM_MODEL"
-openclaw gateway run --port 7860 --bind lan --verbose 2>&1 | tee -a /home/node/.openclaw/gateway.log &
+# Disable pairing for Docker/headless environments via CLI flag
+openclaw gateway run --port 7860 --bind lan --verbose --no-pairing 2>&1 | tee -a /home/node/.openclaw/gateway.log &
 GATEWAY_PID=$!
 
 # Wait a moment for startup errors