Security firewall for agents.
denoland/clawpatrol is ranked 3,973 with 1,083 stars.
Same-category comparison
denoland/clawpatrol is ranked 3,973 among these 8 peers; caozhiyuan/copilot-api is ranked 3,972.
Same-category comparison| Name | Rank | Metrics |
|---|
| flagos-ai/FlagGems | 3,949 | - Language:
- Python
- Stars:
- 1,138
- Forks:
- 576
- Description:
- FlagGems is an operator library for large language models implemented in the Triton Language.
|
|---|
| ARM-software/CMSIS-DSP | 3,959 | - Language:
- C
- Stars:
- 1,115
- Forks:
- 252
- Description:
- CMSIS-DSP embedded compute library for Cortex-M and Cortex-A.
|
|---|
| kernel/kernel-images | 3,962 | - Language:
- Go
- Stars:
- 1,102
- Forks:
- 89
- Description:
- Browsers-as-a-service for automations and web agents.
|
|---|
| caozhiyuan/copilot-api | 3,972 | - Language:
- TypeScript
- Stars:
- 1,084
- Forks:
- 243
- Description:
- GitHub Copilot, OpenAI Codex, OpenCode Go, and third-party AI provider gateway with OpenAI and Anthropic API compatibility.
|
|---|
| hoangsonww/Claude-Code-Agent-Monitor | 3,975 | - Language:
- TypeScript
- Stars:
- 1,080
- Forks:
- 253
- Description:
- 🚀 A real-time monitoring dashboard for Claude Code & Codex, built with SQLite3, Node.js, Express, React, Vite, TailwindCSS, & WebSockets. It tracks sessions, agent activity, tool usage, and subagent orchestration, providing live analytics, a Kanban status board, status notifications, a cute buddy, & an interactive web UI/MacOS/Windows native app.
|
|---|
| mosaico-labs/mosaico | 3,976 | - Language:
- Python
- Stars:
- 1,079
- Forks:
- 68
- Description:
- Mosaico - The data platform for Physical AI.
|
|---|
| jonwiggins/optio | 3,982 | - Language:
- TypeScript
- Stars:
- 1,066
- Forks:
- 121
- Description:
- Workflow orchestration for AI agent swarms.
|
|---|
| mybigday/llama.rn | 3,985 | - Language:
- C
- Stars:
- 1,059
- Forks:
- 131
- Description:
- React Native binding of llama.cpp.
|
|---|
Key parameters and specifications
Key parameters and specifications| Parameter | Value |
|---|
| Language | Go |
|---|
| Category | Infrastructure |
|---|
| Subcategory | Gateway, Make world agent-ready |
|---|
| Keywords | DevOps, Guardrails |
|---|
| Stars | 1,083 |
|---|
| Forks | 70 |
|---|
| Contributors | 16 |
|---|
| Created date | 2026-04-28 |
|---|
| Updated date | 2026-10-16 |
|---|
| Stars in 1 day | 2 |
|---|
| Stars in 7 days | 12 |
|---|
| Rank | 3,973 |
|---|
| Previous rank | 11,631 |
|---|
| Rank change | 7,658 |
|---|
| 7-day stars rank | 3,680 |
|---|
| Previous 7-day stars rank | 3,829 |
|---|
| 7-day stars rank change | 149 |
|---|
| Total stars rank | 10,482 |
|---|
| Previous total stars rank | 10,487 |
|---|
| Total stars rank change | 5 |
|---|
README summary
clawpatrol The security firewall for agents. Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause until a human approves it before the request reaches Kubernetes. Install From source: (requires Go and Node. A rule A real rule from our own production config: Conditions are CEL expressions over wire-level facts the gateway extracts per protocol: SQL
verbs and table names for Postgres / ClickHouse, resource / verb / namespace for Kubernetes, method / path / headers / body for HTTP. The full set of facts lives in the config reference. Run Three deployment shapes; pick whichever fits. opens a per-process tunnel on Linux (via netns) or macOS (via NetworkExtension); only the wrapped command's traffic goes through the gateway. brings up a WireGuard tunnel that routes the whole host. is the proxy: a single binary that loads your HCL config and accepts
clients tunneling in via WireGuard or Tailscale. dev/docs/getting-started walks through a first config end-to-end. dev/docs/config-reference is the auto-generated field reference.
Frequently asked questions
How many stars and forks are recorded?
denoland/clawpatrol has 1,083 stars and 70 forks.
What is the repository rank?
denoland/clawpatrol is ranked 3,973.
What language and category are recorded?
denoland/clawpatrol has 1,083 stars, uses Go and belongs to Infrastructure.
Which repository is closest in rank?
denoland/clawpatrol is compared with caozhiyuan/copilot-api, ranked 3,972 with 1,084 stars.
clawpatrol
The security firewall for agents.
Claw Patrol sits between your agents and prod, parses their traffic
at the wire, and gates each action against rules you write in HCL.
For example, you can block destructive SQL, or pause kubectl delete pod
until a human approves it before the request reaches Kubernetes.
For the full overview see clawpatrol.dev.
Install
curl -fsSL https://clawpatrol.dev/install.sh | sh
From source: make (requires Go and Node.js).
A rule
A real rule from our own production config:
rule "k8s-no-secrets" {
endpoint = k8s-prod
condition = "k8s.resource == 'secrets'"
verdict = "deny"
reason = "Secret values must not leave the cluster via the agent"
}
Conditions are CEL expressions over wire-level facts the gateway
extracts per protocol: SQL verbs and table names for Postgres /
ClickHouse, resource / verb / namespace for Kubernetes, method /
path / headers / body for HTTP. The full set of facts lives in the
config reference.
Run
Three deployment shapes; pick whichever fits.
clawpatrol gateway config.hcl # run the proxy itself
clawpatrol join # join a gateway
clawpatrol run claude # wrap one agent's process tree
clawpatrol run opens a per-process tunnel on Linux (via netns) or
macOS (via NetworkExtension); only the wrapped command's traffic
goes through the gateway. clawpatrol join brings up a WireGuard
tunnel that routes the whole host. clawpatrol gateway is the
proxy: a single binary that loads your HCL config and accepts
clients tunneling in via WireGuard or Tailscale.
Configure
clawpatrol.dev/docs/getting-started
walks through a first config end-to-end.
clawpatrol.dev/docs/config-reference
is the auto-generated field reference. See
gateway.example.hcl for an
annotated starting template.
License
MIT. See LICENSE.md.