diff --git a/packages/server/package.json b/packages/server/package.json
index de8e842..c6a8aef 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -24,7 +24,7 @@
     "@colyseus/tools": "^0.17.19",
     "@colyseus/ws-transport": "^0.17.9",
     "@openclawworld/shared": "workspace:*",
-    "@scalar/express-api-reference": "^0.8.47",
+    "@scalar/express-api-reference": "^0.9.0",
     "colyseus": "^0.17.8",
     "cors": "^2.8.6",
     "dotenv": "^17.3.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1f225da..2d5ae0e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -140,8 +140,8 @@ importers:
         specifier: workspace:*
         version: link:../shared
       '@scalar/express-api-reference':
-        specifier: ^0.8.47
-        version: 0.8.47
+        specifier: ^0.9.0
+        version: 0.9.0
       colyseus:
         specifier: ^0.17.8
         version: 0.17.8(@colyseus/auth@0.17.6(@colyseus/core@0.17.35(@colyseus/better-call@1.3.1(zod@4.3.6))(@colyseus/schema@4.0.15(typescript@5.9.3))(@colyseus/ws-transport@0.17.9(@colyseus/core@0.17.35)(express@5.2.1))(@pm2/io@6.1.0)(express@5.2.1)(zod@4.3.6))(express@5.2.1))(@colyseus/better-call@1.3.1(zod@4.3.6))(@colyseus/core@0.17.35(@colyseus/better-call@1.3.1(zod@4.3.6))(@colyseus/schema@4.0.15(typescript@5.9.3))(@colyseus/ws-transport@0.17.9(@colyseus/core@0.17.35)(express@5.2.1))(@pm2/io@6.1.0)(express@5.2.1)(zod@4.3.6))(@colyseus/redis-driver@0.17.6(@colyseus/better-call@1.3.1(zod@4.3.6))(@colyseus/schema@4.0.15(typescript@5.9.3))(@colyseus/ws-transport@0.17.9(@colyseus/core@0.17.35)(express@5.2.1))(@pm2/io@6.1.0)(express@5.2.1)(zod@4.3.6))(@colyseus/redis-presence@0.17.6(@colyseus/better-call@1.3.1(zod@4.3.6))(@colyseus/schema@4.0.15(typescript@5.9.3))(@colyseus/ws-transport@0.17.9(@colyseus/core@0.17.35)(express@5.2.1))(@pm2/io@6.1.0)(express@5.2.1)(zod@4.3.6))(@colyseus/schema@4.0.15(typescript@5.9.3))(@colyseus/uwebsockets-transport@0.17.16(@colyseus/core@0.17.35(@colyseus/better-call@1.3.1(zod@4.3.6))(@colyseus/schema@4.0.15(typescript@5.9.3))(@colyseus/ws-transport@0.17.9(@colyseus/core@0.17.35)(express@5.2.1))(@pm2/io@6.1.0)(express@5.2.1)(zod@4.3.6)))(@colyseus/ws-transport@0.17.9(@colyseus/core@0.17.35)(express@5.2.1))(@pm2/io@6.1.0)(express@5.2.1)(zod@4.3.6)
@@ -810,18 +810,22 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@scalar/core@0.3.44':
-    resolution: {integrity: sha512-gFKfUzu1uwg2/jwL8Itf2KpnJexZ7oc48/iS0wjqd0xTVos/AxTB83CYvI2vGnGeNpj3TauOHrts39RNaKOZcg==}
-    engines: {node: '>=20'}
+  '@scalar/core@0.4.0':
+    resolution: {integrity: sha512-Zcl+V8oBxb0S7vR+Nro8J53GD/w/kSjuyX0UoT3r1sn0bUM3Buf4Ob44n3CSfluQzxmiMuZxfOROHqa9F+ckbg==}
+    engines: {node: '>=22'}
 
-  '@scalar/express-api-reference@0.8.47':
-    resolution: {integrity: sha512-/+zVGUJgiJCZhieLRcyGaBygf+ghhQ9tOZAP8M6UhrQX09PSaWOTJERbB4UIQery74+ui0Zol87ulCEwqEyjvg==}
-    engines: {node: '>=20'}
+  '@scalar/express-api-reference@0.9.0':
+    resolution: {integrity: sha512-qnJzhc57eAXzAp6S6t2Ueoha+fb6ou6u4gAmdKsjN/ZyPzk3rxnazmQD5djSm1/yyfwM321AE1MFk7PoPy3vbA==}
+    engines: {node: '>=22'}
 
   '@scalar/helpers@0.2.17':
     resolution: {integrity: sha512-4gJIALeS2BmB8dIt90QkTwUjScZpEfYixTbglvn1jqsWemyRXmXzOvertGts7JQ7pNQ/Zyq2B0GK3pO/xuqYrA==}
     engines: {node: '>=20'}
 
+  '@scalar/helpers@0.3.0':
+    resolution: {integrity: sha512-lhQdehgighJC+PiSTJbbggM/SM3UydcRQil6Cfp/M4l539qklIh35pt4eh1+H+5Esa03gHnJwhTHF3TwglSOJw==}
+    engines: {node: '>=22'}
+
   '@scalar/json-magic@0.11.6':
     resolution: {integrity: sha512-jJ8f0OHe/JNqu1VjjubvhHPzEUrQb+Dm6tuAzpVlRmytyNJSTKWnv/YE9ZQ5V6t4P03HnrKhYTUPUg118Mu6kA==}
     engines: {node: '>=20'}
@@ -838,9 +842,9 @@ packages:
     resolution: {integrity: sha512-uOSvMq9VsPmke7Et4g29AO2Kh8FuRTQm15bwwtrT18hFJRy0Eiy6Kd4Lsr36ro04Ujz+fZH+ZEICB2y4Xj/JlA==}
     engines: {node: '>=20'}
 
-  '@scalar/types@0.6.9':
-    resolution: {integrity: sha512-oJcsp+1Zdrt4XJ6TtIQm7uHskdhtMsfc2VTUCFBlPJM8pxHshZHRC7lBU/0ofY4/J9YdrVhSqqvY8dILU6WbKw==}
-    engines: {node: '>=20'}
+  '@scalar/types@0.7.0':
+    resolution: {integrity: sha512-IkG62M4ztmqkYNVhLpcswBojlQctbXLdkDa3UFsY8FfT7yfZ2LppjptycW9tWjD09ZQb4QAZ070FAUHmFRIS7w==}
+    engines: {node: '>=22'}
 
   '@sec-ant/readable-stream@0.4.1':
     resolution: {integrity: sha512-831qok9r2t8AlxLko40y2ebgSDhenenCatLVeW/uBtnHPyhHOvG0C7TvfgecV+wHzIm5KUICgzmVpWS+IMEAeg==}
@@ -2983,16 +2987,18 @@ snapshots:
   '@rollup/rollup-win32-x64-msvc@4.59.0':
     optional: true
 
-  '@scalar/core@0.3.44':
+  '@scalar/core@0.4.0':
     dependencies:
-      '@scalar/types': 0.6.9
+      '@scalar/types': 0.7.0
 
-  '@scalar/express-api-reference@0.8.47':
+  '@scalar/express-api-reference@0.9.0':
     dependencies:
-      '@scalar/core': 0.3.44
+      '@scalar/core': 0.4.0
 
   '@scalar/helpers@0.2.17': {}
 
+  '@scalar/helpers@0.3.0': {}
+
   '@scalar/json-magic@0.11.6':
     dependencies:
       '@scalar/helpers': 0.2.17
@@ -3020,9 +3026,9 @@ snapshots:
     dependencies:
       '@scalar/openapi-types': 0.5.3
 
-  '@scalar/types@0.6.9':
+  '@scalar/types@0.7.0':
     dependencies:
-      '@scalar/helpers': 0.2.17
+      '@scalar/helpers': 0.3.0
       nanoid: 5.1.6
       type-fest: 5.4.4
       zod: 4.3.6