AI Agent
Claw Patrol
A security firewall that sits between AI agents and production, parsing wire traffic and gating actions with HCL rules.
Claw Patrol
What is Claw Patrol?
Claw Patrol is an open-source security firewall for AI agents. It intercepts agent traffic, parses protocols at the wire level, and enforces policy rules written in HCL to prevent unauthorized actions and data exfiltration.
How to use Claw Patrol?
- 1Install via curl: curl -fsSL https://clawpatrol.dev/install.sh | sh
- 2Configure a gateway with an HCL config file.
- 3Run the proxy with `clawpatrol gateway config.hcl`.
- 4Join a gateway with `clawpatrol join <gateway-url>` or wrap an agent process with `clawpatrol run claude`.
Claw Patrol Key Features
- Wire-level traffic parsing for SQL (Postgres, ClickHouse), Kubernetes, HTTP, WebSocket
- Policy enforcement using CEL expressions in HCL rules
- Human-in-the-loop approval for sensitive operations
- Multiple deployment modes: gateway, join, run (per-process tunnel)
- Support for WireGuard and Tailscale tunnels
- Plugin system with sandboxed external plugins
- Dashboard for monitoring and plugin management
- Open source under MIT license
Claw Patrol Use Cases
- Block destructive SQL queries like DROP TABLE from agent access
- Require human approval before kubectl delete pod commands
- Audit all HTTP requests made by an AI agent
- Prevent agents from reading secrets via misconfigured endpoints
Claw Patrol Pricing & Free Credits
Claw Patrol currently operates on a Free model.
Claw Patrol Pros & Cons
Pros
- Open source with permissive MIT license
- Supports multiple protocols out of the box
- Flexible rule engine using CEL expressions
- Plugin system allows custom endpoint handlers
- Human-in-the-loop approval adds safety
Cons
- Requires self-hosting and infrastructure management
- Configuration in HCL may have a learning curve
- Early stage (v0.2.12), limited community
- No built-in machine learning for anomaly detection
What is Claw Patrol best for?
- Teams deploying AI agents in production requiring security oversight
- Organizations wanting to enforce compliance on agent actions
- Developers needing fine-grained control over agent traffic