One custodian protocol. Two products. SafeClaw the app gives users biometric approval over every sensitive agent action — live today. SafeClaw SDK lets developers drop the same safety layer into any agent — coming soon.
Your AI agent gets your face or fingerprint approval before any sensitive action — sending email, moving money, reading files. Built for individuals whose data and authority matter.
A drop-in safety layer for any AI agent. Three lines of code adds biometric approval, credential isolation, and audit logging to your stack — without rewriting your agent.
Passkey derives encryption keys directly from your biometric. No master password, no recovery backdoor — only your face or fingerprint unlocks the vault.
Add your API keys and service credentials. Everything is encrypted on your device before upload — the server only sees ciphertext, and AI never touches plaintext.
Your AI agent gets to work. Whenever it encounters a sensitive action — sending emails, reading files, calling APIs — it pauses and waits for your face scan. Full audit trail.
All credentials are encrypted on your device with your biometric. The server only stores ciphertext. Without your face, nobody — not the SafeClaw team, not your AI agent, not the cloud provider, not an attacker — can decrypt.
Uses WebAuthn PRF extension to derive a 32-byte key from authenticator output. Vault contents are encrypted with AES-GCM-256 before any network transmission. The server stores only ciphertext — decryption is impossible without the passkey.
When AI needs to call your services, the proxy injects credentials at runtime. The AI's context window and tool outputs contain no credential material whatsoever.
The proxy intercepts outbound requests and injects credentials at runtime. The agent's context window and tool outputs contain no credential material. Locking the vault instantly wipes keys from memory.
Each vault runs in its own virtual machine with network isolation and zero shared state. Stop the VM and all decrypted state is destroyed instantly.
Each vault provisions a dedicated VM with restricted network egress. The relay uses ECIES (P-256 ECDH + AES-GCM) to encrypt data in transit. Instances are ephemeral — stop the VM and decrypted state is gone.
SafeClawSafeClaw adds a security layer to OpenClaw, so your agent stays capable and under your control.
With SafeClawWith SafeClawWith SafeClawWith SafeClawAll plans include the full security stack: one-click deploy, private server, E2E encryption, biometric approval, audit logs.
Three lines of code. Same security guarantees. Coming soon — get notified.
from safeclaw import Custodian
custodian = Custodian(api_key="...")
agent.use(custodian) # every sensitive action now waits for approvalGet notified when the SDK opens up.
Two-minute setup. Enterprise-grade encryption.