MS Teams: finalize webhook host binding

BradGroux · BradGroux · commit f634f4684df0 · 2026-05-08T12:16:40.000-05:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,7 @@ Docs: https://docs.openclaw.ai
 
 ### Changes
 
+- MS Teams: allow `channels.msteams.webhook.host` to bind the webhook server to a specific interface for tunnel or reverse-proxy deployments. (#63347) Thanks @sharkqwy.
 - Telegram/Feishu: honor configured per-agent and global `reasoningDefault` values when deciding whether channel reasoning previews should stream or stay hidden, addressing the preview-default part of #73182. Thanks @anagnorisis2peripeteia.
 - Docker: run the runtime image under `tini` so long-lived containers reap orphaned child processes and forward signals correctly. (#77885) Thanks @VintageAyu.
 - Google/Gemini: normalize retired `google/gemini-3-pro-preview` and `google-gemini-cli/gemini-3-pro-preview` selections to `google/gemini-3.1-pro-preview` before they are written to model config.
diff --git a/docs/channels/msteams.md b/docs/channels/msteams.md
@@ -93,14 +93,16 @@ The output will show `CLIENT_ID`, `CLIENT_SECRET`, `TENANT_ID`, and a **Teams Ap
       appId: "<CLIENT_ID>",
       appPassword: "<CLIENT_SECRET>",
       tenantId: "<TENANT_ID>",
-      webhook: { host: "127.0.0.1", port: 3978, path: "/api/messages" },
+      webhook: { port: 3978, path: "/api/messages" },
     },
   },
 }
 ```
 
 Or use environment variables directly: `MSTEAMS_APP_ID`, `MSTEAMS_APP_PASSWORD`, `MSTEAMS_TENANT_ID`.
 
+Set `webhook.host: "127.0.0.1"` only when a same-host tunnel or reverse proxy forwards Teams traffic to the gateway.
+
 **5. Install the app in Teams**
 
 `teams app create` will prompt you to install the app - select "Install in Teams". If you skipped it, you can get the link later:
diff --git a/extensions/msteams/src/monitor.ts b/extensions/msteams/src/monitor.ts
@@ -241,7 +241,9 @@ export async function monitorMSTeamsProvider(
   const conversationStore = opts.conversationStore ?? createMSTeamsConversationStoreFs();
   const pollStore = opts.pollStore ?? createMSTeamsPollStoreFs();
 
-  log.info(`starting provider (${host ?? "0.0.0.0"}:${port})`);
+  const bindTarget = host ? `${host}:${port}` : `default interface:${port}`;
+
+  log.info(`starting provider (${bindTarget})`);
 
   // Dynamic import to avoid loading SDK when provider is disabled
   const express = await import("express");
@@ -375,7 +377,7 @@ export async function monitorMSTeamsProvider(
   await new Promise<void>((resolve, reject) => {
     const onListening = () => {
       httpServer.off("error", onError);
-      log.info(`msteams provider started on ${host ?? "0.0.0.0"}:${port}`);
+      log.info(`msteams provider started on ${bindTarget}`);
       resolve();
     };
     const onError = (err: unknown) => {
diff --git a/src/config/bundled-channel-config-metadata.generated.ts b/src/config/bundled-channel-config-metadata.generated.ts
