denoland/clawpatrol
A Go-based security gateway that intercepts and gates AI agent traffic against HCL rules, supporting Kubernetes, SQL databases, and HTTP protocols.
Claw Patrol is a security firewall designed specifically for AI agents. It sits between agents and production environments, parsing wire-level traffic to enforce configurable guardrails written in HCL format. The system extracts protocol-specific facts—such as SQL verbs and table names for databases, resource/verb/namespace for Kubernetes, or HTTP method/path/body for web requests—and evaluates each action against user-defined rules before allowing it to proceed. Deployment options include running as a proxy gateway, joining existing infrastructure via WireGuard or Tailscale, or wrapping a single agent’s process tree with per-process network isolation.
Frequently asked
- What is denoland/clawpatrol?
- A Go-based security gateway that intercepts and gates AI agent traffic against HCL rules, supporting Kubernetes, SQL databases, and HTTP protocols.
- Is clawpatrol open source?
- Yes — denoland/clawpatrol is open source, released under the MIT license.
- What language is clawpatrol written in?
- denoland/clawpatrol is primarily written in Go.
- How popular is clawpatrol?
- denoland/clawpatrol has 1k stars on GitHub.
- Where can I find clawpatrol?
- denoland/clawpatrol is on GitHub at https://github.com/denoland/clawpatrol.