Welcome back
Your agents and the firewall that protects them, in one place.
Requests today
1,918
95% allowed
Blocked today
93
risky or unknown requests
AI usage today
Codex subscription
412k tokens · no per-token cost
OpenClaw with guardrails, now for teamsOpenClaw for teams·v2 shippedOpenClaw
OpenClaw
under YOUR
control.
Manage OpenClaw agents in isolated sandboxes, with an AI firewall, approvals and live audit trail.
For you or your team, zero lock-in.Run your Agents in Sandboxes, with AI Firewall and Approvals.
AI firewallAI FirewallZero-trust encryptionYour agents' and AI firewall's virtual machines are encrypted. Not even ControlClaw staff can access your data.EU · UK · US hostingEU · US · UK
ControlClaw Console
Console›Overview
Search agents, activity, rules…
M
New agent
Built on OpenClawIsolated VMsAI FirewallUse your AI key or subscription
Start 14-day trial
Tokens included
The problem
Your inbox, your passwords. Who's checking?
Other agents
No safeguards
Sends emails, deletes branches, shares private files.
Sees passwords
Opens any site with your credentials.
No visibility
Leaves no log of what it did overnight.
ControlClaw
Six guardrails
Every channel has a guardrail.
AI Firewall
Checks all requests and content the agent receives against your rules, written in plain English, using the Jev model and specialized classifiers. Runs in a separate VM, like every agent, in an encrypted enclave that not even our staff can access.
AI Firewall · Support
separate VM · one per organization · checks traffic in and out
Agent sends
{{SUPPLIER_PW}}Site receives
••••••••••••09:14allowsupplier-one.com · password swapped in
09:15blockInbound email · hidden instructions found
09:16askUpload to dropbox.com · new destination
Agent VM · encrypted enclave · no staff access
Meetings and calls
Makes and answers phone calls with Twilio. Joins Google Meet, Zoom or Teams, shares its screen, speaks, takes notes. You see the full transcript, and can limit what it may say or do with AI Firewall rules.
Weekly sync · Google Meet
Notes agent in the call · transcript on
09:31 JanaCan we move the launch to the 24th?
09:31 TomFine by me if support is staffed.
09:32 NotesNoted: launch on the 24th, pending support staffing. It's in the recap.
Allowed in this meeting:take notesspeak when askedcommit dates or spend
Email and calendar
Each agent gets its own inbox with AgentMail or Gmail. Rules set who it may write to and who it may hear from; anything else waits in your queue.
Email rules · Support
support@agents.yourcompany.com
may send to: @yourcompany.comany colleague
allowmay send to: 3 approved clientsacme.com · helio.io · norwood.co
allowanyone elsedrafts land in the queue
askmay receive from: known senders onlyunknown senders are quarantined
block09:12inspectReply to client@acme.com · flag: promises a refund date
Chat
Joins Slack, Telegram and WhatsApp, and gets a private ClickClack chat inside your organization. Rules set which agents and people it may talk to.
#sales
Tom · Sales · CFO Agent
TB
Tom 10:02
@sales did Helio reply on WhatsApp?
S
Sales 10:02
Yes, they want 40 more units. Quote drafted, it's in your queue.
TB
Tom 10:03
Great. Check the discount with the CFO Agent first.
10:04blockChange CFO expense rules
May talk to:CFO Agentyour teamHR Agent
Browser and passwords
A real Chrome that stays signed in. Passwords live in a central vault the agent never sees. Watch the browser live and take over any time.
Live browser · Research
signed-in Chrome on the agent's machine
Reports · Supplier One
portal.supplier-one.com/reports
Export reportPeriodOct 2026FormatCSVExportLast export: 30 SepRecent exportsSep 2026CSV30 SepAug 2026CSV31 AugJul 2026PDF31 JulJun 2026CSV30 JunMay 2026CSV31 May
Live
supplier-one.comagent has: session, not password
hubspot.comagent has: session, not password
APIs and MCPs
Connect 1,500 apps through APIs and MCP servers. Set what can be called, and when, in plain English. API keys stay in the firewall, outside the agent's VM.
Connected apps · Bookkeeper
rules in plain English · keys held by the firewall
StripeAPI“Read invoices. Refund up to $200.”
allow
GmailMCP“Send only to @supplier-one.com.”
allow
QuickBooksMCP“Payments over $1,000 need my OK.”
ask
Google SheetsMCP“Never delete rows.”
block
SlackGmail
Google Drive
Calendar
Notion
HubSpot
SalesforceStripeQuickBooks
Xero
Shopify
GitHub
Linear
Jira
Asana
Airtable
Zoom
Zendesk
Intercom
DocuSign
Figma
Dropbox
Mailchimp
WhatsApp1 of 6
Still OpenClaw. Still yours.
Open source, all the way down.
ControlClaw runs standard OpenClaw. Your skills, plugins, memory and config are plain files you can export any time. Bring your own model keys, run in your own cloud and your domain. If you leave, your agents leave with you.
Bring your own keysAnthropic, OpenAI, OpenRouter…
Export everythingone tarball per agent
Self-host the firewallfree, AGPL, on your own server
bookkeeper.tar.gz · exported 11 Oct 2026
bookkeeper/
├─ config.yaml
├─ .env.example # placeholders, never real keys
├─ SOUL.md # personality and boundaries
├─ USER.md # who it works for
├─ skills/
│ ├─ stripe-invoices/
│ └─ sheets-reconcile/
└─ memory/
├─ 2026-10-10.md
└─ index.sqlite
madarco/controlclaw
Control plane and firewall with AI enforced rules for OpenClaw agents.
StarAGPL-3.0TypeScript · Rust
Use cases
One agent per job, each on its own machine, with one click.
Start new agents from templates. Share memories with GBrain and manage and sync shared skills.
The agent organizes the team calendar, joins meetings, transcribes them and files tickets for the action items.
Meeting rules keep it safe and within your organization's boundaries. Give it a company email and onboard it like a teammate, with Slack or Teams and Google Drive access. With managed GBrain, it fills a company brain with past decisions and client details.
Start your Chief of Staff agent14-day trial · no charge
Slack · yourcompany
YourcompanyChannels# general# team-sync# product# salesDirect messagesMaya LindTom Berg
# team-sync8 members
Chief of StaffAPP10:32
Here are the action items from the weekly sync:
- @Tom add the new tiers to the pricing page by Fri LIN-482
- @Maya send the Q3 numbers to Helio by Wed LIN-483
- Planning moves to Thu 14:00 once approved
Weekly sync · transcriptGoogle Drive · 32 min
TB
Tom Berg10:34
Thanks, picking up LIN-482 now.
Message #team-sync
The agent triages your inbox, negotiates meeting dates on your behalf, finds products on Amazon.
Set rules for who the agent can email, with your approval required for new recipients or unusual volume. Give it access to your accounts while the passwords stay locked in the Vault. The AI Firewall flags anything suspicious and scans the logs every 6 hours, for peace of mind.
Start your Executive Assistant agent14-day trial · no charge
GmailSearch in mail
2MailChatSpacesMeet
ComposeInbox2StarredSnoozedSentDrafts1MoreLabelsSchedulingFinanceNewsletters
Dana Kim, me 3SchedulingQ3 review next week? – Thursday 15:00 works for us, see you then.
procurement@norwood.coNeeds approvalVendor onboarding form – Reply drafted for a new recipient
Kestrel CloudFinanceInvoice #2041 for October – €240.00 due Nov 30
AmazonPurchasesOrder confirmed: desk lamp – Found by the agent, bought after your approval
billing@he1io.ioQuarantinedUpdated bank details – Lookalike of helio.io, held by the AI Firewall
14 newslettersNewslettersWeekly digests – Archived by the agent
The agent finds customers to contact and works your company socials from a residential IP.
Signed-in Chrome on a residential IP, so socials see a normal login, not a datacenter. Automate follow-ups, outreach and social updates. The AI Firewall scans every request for personal information, credit card numbers and hidden prompts.
Start your Sales GTM agent14-day trial · no charge
linkedin.com/search/results/peopleLive
Head of Operations MilanHomeMy NetworkJobsMessagingNotifications
People2nd connectionsMilan areaFood & retail
GF
Giulia Ferri · 1stOps lead at Brera FoodsMilan, ItalyFollow-up sent today
MessageMR
Marco Riva · 2ndHead of Operations at LumenMilan, ItalyConnection note drafted · in your queue
ConnectSC
Sara Conti · 2ndCOO at Navigli LabsMilan, ItalyPosted about hiring ops · 2d
ConnectCompare
Everyone has an agent. Only one has the controls.
| Grok Bot | Meta Muse | Plain Open | ControlClaw | |
|---|---|---|---|---|
| Teams of agents | ||||
| Multiple agents | all on one computersingle computer | all on one computersingle computer | ||
| Fleet management | ||||
| Guardrails | ||||
| Dedicated VM per agent | ||||
| Approval queue | ||||
| Email and meeting rules | ||||
| Password vault | ||||
| No lock-in | ||||
| Open source | ||||
| Bring your own model | ||||
| Self‑hosted | ||||
| Bring your own cloud | ||||
How it works
Three steps. Sixty seconds to the first one.
01
Start from a template
Pick a role, or create several agents at once. Each gets its own machine; choose size and location.
New agents
pick one or several
Support inboxOwn mailbox · email rules · asks before refunds
Meeting notesJoins Meet · transcript · recap needs approval
Start blankStandard OpenClaw, your rules
Create 2 agents · 4 GB · Region: EU
02
Connect a channel
Email, Slack, WhatsApp or Telegram. AI tokens are included, or add your own LLM subscription.
Channels · Support
Reach it on
Email
Slack
WhatsApp
TelegramConnect
AI model
Tokens includedPart of your plan, no setup
Your LLM subscriptionChatGPT, Claude or an API key
03Invite
Invite it in
Add it to the Meet, cc it or @mention it in chat. Invite your teammates too; everyone approves from one shared queue.
#team-room
3 people · 2 agents
JM
Jana 09:40
@notes send the sync recap, @support cc the Acme thread
N
Notes 09:40
Recap drafted for 4 attendees. One is outside your domain, so it's in your queue.
ApproveEditDeny
S
Support 09:41
Acme thread attached. Reply to client@acme.com inspected, no flags, sent.
JM
Jana 09:42
approved
1 of 3
Architecture
Isolation by default, a gate on every channel.
Your encrypted enclave
Dedicated firewall
- AllowEmail @yourcompany.com
- AskPayments over $50
- BlockExternal meeting invites
- BlockUploads to unknown sites
- AllowWeb research with Perplexity
LogsTrack every action
InternetSites, apps, APIs
- One machine per agent, encrypted disk, hosted in the US, EU or UK.
- Your machines are encrypted and have no SSH or console access, so not even ControlClaw staff can access them.
- An encrypted enclave is created on signup; only you hold the key to unlock it.
- The Firewall runs on a separate VM inside the encrypted enclave and holds the passwords and logins.
- Agents reach the outside world only through the Firewall. Everything is logged and scanned.
- Encrypted backups that can be opened only with your encryption key. You can open them locally with
npx @controlclaw/recover - Private shell over your own Tailscale network when you want to look inside.
- ControlClaw Firewall is an open-source project written in Rust.
Locked but easy to use
If your agent gets stuck, open a Doctor repair session: Claude, Codex or Pi repairs the agent from your firewall. Updates are applied automatically every night.
FAQ
Questions people ask before the second agent.
What is ControlClaw?
A managed way to run OpenClaw agents, each on its own machine. Your agents share one firewall, and each has an approval queue, email and meeting rules, auto updates and hardened security.
Is it really OpenClaw underneath?
Yes. Standard OpenClaw. Your skills, plugins, memory and config are plain files you can export.
Where does my data live, and can you read it?
On a machine dedicated to your agent, in the region you choose (US, EU or UK), on an encrypted disk. ControlClaw cannot read it, and has no access to your machines unless you allow it.
Can the agent see my passwords or API keys?
No. Passwords stay in a vault; the agent gets a signed-in session, not the password. API keys are swapped in at the AI Firewall and are never stored on the agent.
What happens when an agent tries something I haven't allowed?
The AI Firewall scans every request and evaluates the risk against your prompt, your rules and previous requests. When in doubt, it blocks the request or asks for your approval. Either way it's logged. The kill switch stops every agent in two taps.
What can it do inside a meeting?
Join, share its screen, speak, take notes. You see the full transcript, and can limit what it may say or do with AI Firewall rules.
Can I export and leave?
Yes, any time. Download a zip of your OpenClaw workspace, or any of the daily encrypted backups, which only your private master key can decrypt.
Can I get a refund?
Solo starts with a 14-day free trial on a Small or Standard agent in the EU, so you can try ControlClaw before you pay. After the trial we don't give refunds: your agents' servers and AI tokens are paid to other providers as they run. You can cancel at any time with one click in Billing. Your agents keep running until the end of the period you've paid for, and you won't be charged again.
How is it different from managed OpenClaw hosting, or from Meta Muse, OpenAI Dots and Grok Bot?
Managed hosts give you a fast deploy and stop there. The big-lab agents give you one agent on their infrastructure, with their model and their rules. ControlClaw gives you many agents on your own machines, open source, with your model, your data location and a guardrail on every channel.
Deploy your first agent.
And the second. Without worrying.
From $19 per agent, tokens included
Open sourceBuilt on OpenClawUS · EU · UK hostingYour LLM subscription