ClawGate.ai Agent Security

ClawGate gives you human-in-the-loop control over your AI agents using Face ID and passkeys.

When your agent wants to send an email, make a payment, or perform any sensitive action like deleting a file or restarting a server, ClawGate sends a push notification to your iPhone. You immediatley get a notification through the ClawGate app and then can approve or deny with using the same biometric integrated passkey security you use to unlock your phone — done in under 2 seconds!

HOW IT WORKS

Sign in with Apple and set up your passkey.

Generate an API key and connect it to your agent (OpenClaw or any compatible platform)

When your agent needs approval, you get a push notification

Approve with Face ID or deny with a tap

SECURITY YOU CAN TRUST Built on WebAuth/FIDO2 passkeys — the same phishing-resistant standard used by Apple, Google, and Microsoft. Your passkey only works on the real ClawGate domain. It can't be phished, intercepted, or replayed.

Your agent never has access to your passkey. It requests approval, you authenticate, and it receives a scoped, time-limited token. The same delegation model used by OAuth 2.0.

KEY FEATURES • Face ID / Touch ID approval in under 2 seconds • Push notifications — works even when the app is closed • Phishing-resistant WebAuthn passkeys • Scoped, time-limited approval tokens (single use, expires in 5 minutes) • Configurable action patterns — choose what needs approval • Full approval history and audit trail • Multiple API keys for different agents • Sign in with Apple — no passwords to manage • Open source server — self-host if you prefer

FLEXIBLE PLANS • Free: 50 approvals/month, 1 API key, 7-day history • Pro ($4.99/mo): Unlimited approvals, 5 API keys, 90-day history, priority support • Team (coming soon): Multiple users, shared approval queues, detailed audit logs

BUILT FOR THE OPENCLAW COMMUNITY ClawGate integrates with OpenClaw and any agent platform that supports the ClawGate API. The server is 100% open source — run your own instance with no limits.

Visit clawgate.ai for documentation and self-hosting guides.