Show HN: Claw Patrol, a security firewall for agents

Hacker News Top Tools
security firewall agents ai-agents hcl kubernetes sql

Summary

Claw Patrol is a security firewall for AI agents, sitting between agents and production to parse traffic and gate actions using HCL rules, blocking destructive SQL or requiring human approval for risky commands like kubectl delete pod.

At Deno we&#x27;ve been using OpenClaw and other agents increasingly for addressing production problems in Deno Deploy - when a PagerDuty alert fires, the agent starts researching the cause and making fixes.<p>In order to do this, the agent needs access to real production systems - postgres, kubernetes, gcp, clickhouse, github, etc. But this is dangerous to say the least - we want destructive actions to be reviewed by other LLMs, approved by humans, and logged appropriately.<p>Claw Patrol terminates TCP connections over WireGuard or Tailscale, then parses application protocols (eg http, postgres, ssh) to apply rules that allow you to deny&#x2F;allow requests.<p>There are a few projects that sit as a proxy in front of agents to do secret injection or apply various guardrails, but none met our needs (LLM gateways, MCP proxies, sandboxes), particularly the need to handle low-level protocols, or handle complex real world situations like tunneling postgres through k8s.<p>Written in Go, configured in HCL, MIT licensed. Happy to answer any questions.<p><a href="https:&#x2F;&#x2F;clawpatrol.dev&#x2F;" rel="nofollow">https:&#x2F;&#x2F;clawpatrol.dev&#x2F;</a>
Original Article
View Cached Full Text

Cached at: 06/11/26, 07:37 PM

denoland/clawpatrol

Source: https://github.com/denoland/clawpatrol

clawpatrol

The security firewall for agents.

Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause kubectl delete pod until a human approves it before the request reaches Kubernetes.

For the full overview see clawpatrol.dev.

Install

curl -fsSL https://clawpatrol.dev/install.sh | sh

From source: make (requires Go and Node.js).

A rule

A real rule from our own production config:

rule "k8s-no-secrets" {
  endpoint  = k8s-prod
  condition = "k8s.resource == 'secrets'"
  verdict   = "deny"
  reason    = "Secret values must not leave the cluster via the agent"
}

Conditions are CEL expressions over wire-level facts the gateway extracts per protocol: SQL verbs and table names for Postgres / ClickHouse, resource / verb / namespace for Kubernetes, method / path / headers / body for HTTP. The full set of facts lives in the config reference.

Run

Three deployment shapes; pick whichever fits.

clawpatrol gateway config.hcl   # run the proxy itself
clawpatrol join <gateway-url>   # join a gateway
clawpatrol run claude           # wrap one agent's process tree

clawpatrol run opens a per-process tunnel on Linux (via netns) or macOS (via NetworkExtension); only the wrapped command’s traffic goes through the gateway. clawpatrol join brings up a WireGuard tunnel that routes the whole host. clawpatrol gateway is the proxy: a single binary that loads your HCL config and accepts clients tunneling in via WireGuard or Tailscale.

Configure

clawpatrol.dev/docs/getting-started walks through a first config end-to-end. clawpatrol.dev/docs/config-reference is the auto-generated field reference. See gateway.example.hcl for an annotated starting template.

License

MIT. See LICENSE.md.

Similar Articles

Clawpatrol - security firewall for agents

Reddit r/openclaw

Claw Patrol is an open-source security firewall that sits between agents and production, allowing users to write HCL rules to gate agent actions like blocking destructive SQL or requiring human approval for kubectl commands.

Claw Patrol: an open-source security firewall for agents

Lobsters Hottest

Deno open-sources Claw Patrol, a security firewall for AI agents that routes traffic through a tunnel, parses protocols, injects credentials, and enforces rules to prevent dangerous actions like SQL deletions or kubectl commands.

Nemotron Labs: What OpenClaw Agents Mean for Every Organization

NVIDIA Blog

OpenClaw, an open-source persistent AI assistant, has become the most-starred GitHub project, sparking debate over security and autonomy. NVIDIA is collaborating to enhance security and releasing NemoClaw as a secure reference implementation.