diff --git a/src/lib/command-registry.ts b/src/lib/command-registry.ts
index abdd86dbad7..f250febdb9b 100644
--- a/src/lib/command-registry.ts
+++ b/src/lib/command-registry.ts
@@ -198,7 +198,7 @@ export const COMMANDS: readonly CommandDef[] = [
   },
   {
     usage: "nemoclaw <name> gateway-token",
-    commandId: "sandbox:gateway-token",
+    commandId: "sandbox:gateway:token",
     description: "Print the OpenClaw gateway auth token to stdout",
     flags: "[--quiet|-q]",
     group: "Sandbox Management",
diff --git a/src/lib/gateway-token-cli-command.ts b/src/lib/gateway-token-cli-command.ts
index 36d3ae960ca..b083188cff7 100644
--- a/src/lib/gateway-token-cli-command.ts
+++ b/src/lib/gateway-token-cli-command.ts
@@ -12,7 +12,7 @@ const { fetchGatewayAuthTokenFromSandbox } = require("./onboard") as {
 };
 
 export default class GatewayTokenCliCommand extends Command {
-  static id = "sandbox:gateway-token";
+  static id = "sandbox:gateway:token";
   static strict = true;
   static summary = "Print the OpenClaw gateway auth token to stdout";
   static description = "Print the OpenClaw gateway auth token for a running sandbox to stdout.";
diff --git a/src/lib/oclif-commands.ts b/src/lib/oclif-commands.ts
index 3a6a7636466..4e5078e3b6f 100644
--- a/src/lib/oclif-commands.ts
+++ b/src/lib/oclif-commands.ts
@@ -113,7 +113,7 @@ export default {
   status: StatusCommand,
   start: DeprecatedStartCommand,
   stop: DeprecatedStopCommand,
-  "sandbox:gateway-token": GatewayTokenCliCommand,
+  "sandbox:gateway:token": GatewayTokenCliCommand,
   "tunnel:start": TunnelStartCommand,
   "tunnel:stop": TunnelStopCommand,
   gc: GarbageCollectImagesCommand,
diff --git a/src/lib/oclif-dispatch.ts b/src/lib/oclif-dispatch.ts
index bdad4074bd7..8fb39d9fd6b 100644
--- a/src/lib/oclif-dispatch.ts
+++ b/src/lib/oclif-dispatch.ts
@@ -95,7 +95,7 @@ const FLAT_SANDBOX_ROUTES: Readonly<Record<string, FlatSandboxRoute>> = {
   "policy-list": { commandId: "sandbox:policy:list", helpUsage: "policy-list" },
   destroy: { commandId: "sandbox:destroy", helpUsage: "destroy [--yes|-y|--force]" },
   "gateway-token": {
-    commandId: "sandbox:gateway-token",
+    commandId: "sandbox:gateway:token",
     helpUsage: "gateway-token [--quiet|-q]",
   },
   rebuild: {