That disconnect means your Gateway has auth enabled, but the Control UI isn’t sending a token (or it’s sending an old one).
Fix (fast path):
- On the machine running the Gateway, run:
openclaw dashboard
Open the URL it prints (it includes ?token=...). That one-time link will also store the token in the browser for future loads.
- If you’re already in the Control UI: open Settings (gear) → Connection / Auth and paste the same token there, save, then reload.
If you don’t have a token yet / it was never generated:
openclaw doctor --generate-gateway-token
openclaw gateway restart