diff --git a/portable/Config.html b/portable/Config.html
index b52afa4..3619b80 100644
--- a/portable/Config.html
+++ b/portable/Config.html
@@ -428,7 +428,7 @@ function togglePw() {
 function buildOpenClawConfig(provider, base, model, apiKey) {
     // Base config that OpenClaw expects
     const baseConfig = {
-        gateway: { auth: { mode: 'token', token: 'uclaw' } },
+        gateway: { auth: { mode: 'token', token: 'uclaw', scopes: ['operator.admin'] } },
         commands: { native: 'auto', nativeSkills: 'auto', restart: true, ownerDisplay: 'raw' },
         meta: { lastTouchedVersion: '2026.3.13', lastTouchedAt: new Date().toISOString() }
     };
diff --git a/portable/Windows-Diagnose.bat b/portable/Windows-Diagnose.bat
index d98fb2f..04485fe 100644
--- a/portable/Windows-Diagnose.bat
+++ b/portable/Windows-Diagnose.bat
@@ -1,4 +1,4 @@
-@echo off
+@echo off
 setlocal EnableDelayedExpansion
 chcp 65001 >nul 2>&1
 title U-Claw - Diagnostic Tool
diff --git a/portable/Windows-Install.bat b/portable/Windows-Install.bat
index 772b58f..07c994a 100644
--- a/portable/Windows-Install.bat
+++ b/portable/Windows-Install.bat
@@ -1,4 +1,4 @@
-@echo off
+@echo off
 setlocal EnableDelayedExpansion
 chcp 65001 >nul 2>&1
 title U-Claw - Install to Windows
diff --git a/portable/Windows-Menu.bat b/portable/Windows-Menu.bat
index 2ea3b82..1c79b0b 100644
--- a/portable/Windows-Menu.bat
+++ b/portable/Windows-Menu.bat
@@ -1,4 +1,4 @@
-@echo off
+@echo off
 setlocal EnableDelayedExpansion
 chcp 65001 >nul 2>&1
 title U-Claw Menu
diff --git a/portable/Windows-Start.bat b/portable/Windows-Start.bat
index 717e5ff..0cc5ffd 100644
--- a/portable/Windows-Start.bat
+++ b/portable/Windows-Start.bat
@@ -1,4 +1,4 @@
-@echo off
+@echo off
 chcp 65001 >nul 2>&1
 title U-Claw - Portable AI Agent
 
diff --git a/portable/setup.bat b/portable/setup.bat
index fa0d4c5..f417db3 100644
--- a/portable/setup.bat
+++ b/portable/setup.bat
@@ -1,4 +1,4 @@
-@echo off
+@echo off
 setlocal EnableDelayedExpansion
 chcp 65001 >nul 2>&1
 title U-Claw Portable Setup
diff --git a/u-claw-app/resources/Config.html b/u-claw-app/resources/Config.html
index b52afa4..3619b80 100644
--- a/u-claw-app/resources/Config.html
+++ b/u-claw-app/resources/Config.html
@@ -428,7 +428,7 @@ function togglePw() {
 function buildOpenClawConfig(provider, base, model, apiKey) {
     // Base config that OpenClaw expects
     const baseConfig = {
-        gateway: { auth: { mode: 'token', token: 'uclaw' } },
+        gateway: { auth: { mode: 'token', token: 'uclaw', scopes: ['operator.admin'] } },
         commands: { native: 'auto', nativeSkills: 'auto', restart: true, ownerDisplay: 'raw' },
         meta: { lastTouchedVersion: '2026.3.13', lastTouchedAt: new Date().toISOString() }
     };
diff --git a/usb-release/Config.html b/usb-release/Config.html
index b52afa4..3619b80 100644
--- a/usb-release/Config.html
+++ b/usb-release/Config.html
@@ -428,7 +428,7 @@ function togglePw() {
 function buildOpenClawConfig(provider, base, model, apiKey) {
     // Base config that OpenClaw expects
     const baseConfig = {
-        gateway: { auth: { mode: 'token', token: 'uclaw' } },
+        gateway: { auth: { mode: 'token', token: 'uclaw', scopes: ['operator.admin'] } },
         commands: { native: 'auto', nativeSkills: 'auto', restart: true, ownerDisplay: 'raw' },
         meta: { lastTouchedVersion: '2026.3.13', lastTouchedAt: new Date().toISOString() }
     };
diff --git a/usb-release/Windows-Menu.bat b/usb-release/Windows-Menu.bat
index 83d1ee0..c573969 100644
--- a/usb-release/Windows-Menu.bat
+++ b/usb-release/Windows-Menu.bat
@@ -1,4 +1,4 @@
-@echo off
+@echo off
 setlocal EnableDelayedExpansion
 chcp 65001 >nul 2>&1
 title U-Claw Menu
diff --git a/usb-release/Windows-Start.bat b/usb-release/Windows-Start.bat
index bfe238a..5dd56d2 100644
--- a/usb-release/Windows-Start.bat
+++ b/usb-release/Windows-Start.bat
@@ -1,4 +1,4 @@
-@echo off
+@echo off
 setlocal EnableDelayedExpansion
 chcp 65001 >nul 2>&1
 title U-Claw - Portable AI Agent
@@ -103,7 +103,7 @@ if "!HAS_MODEL!"=="yes" (
     start /B "" cmd /c "timeout /t 3 /nobreak >nul && start http://127.0.0.1:!PORT!/#token=!TOKEN!"
 ) else (
     echo   First time setup - opening Config page in 3 seconds...
-    start /B "" cmd /c "timeout /t 3 /nobreak >nul && start %UCLAW_DIR%Config.html?port=!PORT!"
+    start /B "" cmd /c "timeout /t 3 /nobreak >nul && start file:///%UCLAW_DIR%Config.html?port=!PORT!"
 )
 
 REM Start gateway (foreground, blocks until stopped)