ClawGuard: Open-Source Security Gateway for OpenClaw API Credential Protection
What ClawGuard Does
ClawGuard addresses a security concern when using OpenClaw: the agent needs API access to services like GitHub, Slack, Todoist, and OpenAI, but storing real tokens on the same machine creates risk. A prompt injection could trick the agent into performing destructive actions with those credentials.
How It Works
ClawGuard sits between the agent and external APIs. The agent or its tools call the original APIs but only use dummy credentials. Real tokens are stored on a separate machine, preventing the agent from reading or exfiltrating them.
Deployment Modes
- Mode A: If the SDK supports a custom base URL, point it directly to ClawGuard
- Mode B: If the SDK has a hardcoded URL, use a tiny forwarder/redirector on the agent machine (hosts-file based) that transparently routes traffic to ClawGuard while keeping real tokens off the agent machine
Security Features
- For sensitive calls, ClawGuard requests Telegram approval with approve/deny/timeout options and time-limited approvals
- Maintains an audit trail of requests including method, path, and optional payload
- Inspired by the CIBA pattern used in banking-style authentication flows, applied to "AI agent → API calls"
Source and Discussion
The creator built ClawGuard to avoid giving OpenClaw direct access to API passwords and tokens. The tool is open-source and available on GitHub with a README explaining implementation details. The Reddit post includes discussion about how others handle API access for AI agents.
📖 Read the full source: r/openclaw
👀 See Also
MCP Server CVE Exposure Mapping and Public API Released
Researchers have mapped CVE exposure across thousands of MCP servers and built a public API for querying dependency vulnerabilities. The API allows searching by repo/name, filtering by severity, and sorting by CVE count or recency.
Stop Trusting AI More Than a Human — Apply the Same Access Controls
A Reddit discussion argues that AI coding agents should be treated like junior devs — no prod access, no direct writes, enforce CI/CD pipelines and role-based permissions.
Chinese AI Companies Running Malicious Distillation Campaigns Against US Firms: DoD CSA
A new DoD CSA report reveals Chinese AI companies are conducting malicious distillation campaigns to steal US AI models, targeting commercial AI products and open-source frameworks.
Potential Claude Security Incident: Self-Sent Password Alerts and Suspicious .NET Process
A user reports receiving suspicious password reset alerts that appeared to be sent from their own account after logging into Claude, with emails vanishing minutes later and an unusual .NET process blocking system shutdown.