OKed Plugin: OpenClaw Asks Your Phone Before Destructive Actions

A new plugin called OKed hooks into OpenClaw's before_tool_call hook to gate risky actions before they execute. The author built it after the PocketOS/Railway incident where an agent with a scoped token ran volumeDelete on production — permission wasn't the issue, intent was.

How It Works

• Safe operations (reads, low-risk writes) pass through silently.
• High-stakes actions — sending emails, destructive commands, payments — freeze the agent and send an approval request to the user's phone or Telegram.
• User taps approve or deny; the agent waits without knowing the difference.
• The agent still runs with whatever permissions it has — the plugin adds a human-in-the-loop check on intent.

What You'd Want Gated

The author asks: for real workloads, what actions should be gated? Likely candidates include: DELETE operations, modifying production resources, making purchases, sending communications, or any command that could have irreversible side effects.

The project is live at oked.ai — feedback from developers running OpenClaw on production workloads is welcome.