denoland/clawpatrol
Security firewall for agents observed · 2026-08-28
Health v2 · maintenance only
80/100
- Activity 98
- Release rhythm 98
- Longevity 9
Flags: young
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: 0
- age_days: 127
- days_rel: 14
- days_push: 14
- n_releases_24m: 30
Adoption not part of the score
1030 stars · 52 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Claw Patrol is a security firewall and proxy for AI agents, written in Go, that intercepts agent traffic at the wire level and gates each action against rules written in HCL with CEL conditions. It supports HTTP, SQL (Postgres/ClickHouse), Kubernetes, and SSH protocols, with human or LLM approvers, credential safeguarding, audit logging, and an operator dashboard.
Use cases
- block destructive SQL from AI agents
- require human approval for kubectl delete commands
- prevent agent credentials from leaking via prompt injection
- audit log everything an AI agent does
- gate agent HTTP requests through an LLM judge
- sandbox one agent process's network traffic
- enforce access policies for agents talking to Kubernetes
When to choose
- you run autonomous AI agents with access to production databases, Kubernetes, or APIs and need policy enforcement
- you want human-in-the-loop approval for risky agent actions
- you need a single self-hosted gateway with audit logs and credential protection for multiple agent machines
When to avoid
- you only need simple API rate limiting or a traditional web API gateway without agent-awareness
- your agents run on Windows or other unsupported platforms (Linux/macOS amd64/arm64 only)
- you need a fully managed SaaS rather than a self-hosted gateway you operate
Facets
service · maturity active
security proxy api-gateway middleware secrets-management monitoring logging plugin-system configuration-management security developer-tools self-hosted networking go self-hosted cli agent-firewall ai-agent-security policy-engine cel-expressions hcl-config wireguard prompt-injection audit-log human-in-the-loop llm-judge traffic-interception tailscale ai-agents devops linux macos docker
6 sources
- readme: https://github.com/denoland/clawpatrol · fetched 2026-08-28 · 1fb1c6f52dcf
- homepage: https://clawpatrol.dev · fetched 2026-08-29 · 254c00cae42c
- site_page: https://clawpatrol.dev/docs/getting-started · fetched 2026-08-29 · b39247ac7968
- site_page: https://clawpatrol.dev/docs/rules · fetched 2026-08-29 · c8a244f29d13
- site_page: https://clawpatrol.dev/docs/plugins · fetched 2026-08-29 · c4c5b20d82f0
- site_page: https://clawpatrol.dev/docs · fetched 2026-08-29 · 96c6ab6907e7
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| denoland/clawpatrol | main | 80 |
For agents
markdown · JSON · MCP: product_card(name="denoland/clawpatrol")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem