denoland/clawpatrol

Security firewall for agents

Stars: 1k
Forks: 56
Open beginner issues: 0
Indexed issues: 48
Avg merge: 23h 16m
Merged PRs (30d): 31

Dominant language: Go
License: MIT
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Open All

48 open issues indexed

First time experience Open

denoland/clawpatrol#46 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`ref-impl run` fails when unpriviledged Open

denoland/clawpatrol#47 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Agents running webhooks cannot run with `clawpatrol run` Open

denoland/clawpatrol#48 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Issues with `clawpatrol run` Open

denoland/clawpatrol#76 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Postgres SQL rule parser: audit of false-positive / false-negative bypasses Open

denoland/clawpatrol#143 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
integrate with 1password cli Open

denoland/clawpatrol#167 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Make LLM approver body truncation larger and configurable Open

denoland/clawpatrol#179 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Security audit: gaps relative to site/doc/11-security-model.md Open

denoland/clawpatrol#193 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
matcher should lower-case want values if the got value is always lower-cased Open

denoland/clawpatrol#201 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
fire&forget approvals Open

denoland/clawpatrol#202 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
doc: extract approval-rules 'Gotchas' section for triage Open

documentation

denoland/clawpatrol#213 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Show last updated timestamp in read-only gateway.hcl view Open

enhancement

denoland/clawpatrol#266 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add manual self-update command Open

enhancement

denoland/clawpatrol#268 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Harden at-rest storage for CA key, OAuth refresh tokens, and credential secrets Open

bug documentation

denoland/clawpatrol#314 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Authenticate macOS session-socket PID registrations Open

bug

denoland/clawpatrol#318 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Dual-mode gateway: tailscale-control + WG-control simultaneously, so clawpatrol run works on tailnet-only deployments Open

denoland/clawpatrol#401 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
claude code install fails after `join --whole-machine` Open

denoland/clawpatrol#480 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
For oauth credentials that need pasting a code to the provider authorization page, do not open the authorization page automatically Open

denoland/clawpatrol#545 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add support for windows Open

denoland/clawpatrol#593 · 1 comment · 3 reactions · 0 assignees · Indexed Sep 15, 2026
HITL approval routes to a fixed channel instead of the request's originating Slack channel/thread Open

bug

denoland/clawpatrol#594 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
HITL approval prompt does not reply in the originating Slack thread Open

bug

denoland/clawpatrol#596 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Subscription-vs-token mode confusion breaks remote control, usage limits, and run-claude onboarding Open

bug

denoland/clawpatrol#603 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Action fixtures cannot represent truncated requests Open

denoland/clawpatrol#634 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
pluginsdk: extend external credential surface (body signing, open OAuth config, nested schema) Open

denoland/clawpatrol#674 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Approver + HITL plugins (M4/M5): host→plugin Approver service + HostControl.Decide Open

denoland/clawpatrol#703 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
extplugin: surface a credential's injection/selection surface to operators Open

denoland/clawpatrol#706 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RFC: Dynamic peers for ephemeral Kubernetes agent pods Open

denoland/clawpatrol#709 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
macOS clawpatrol run: VIP-intercepted endpoints unreachable (NXDOMAIN) while upstream-forwarded hosts work; Linux clients unaffected Open

denoland/clawpatrol#754 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
AWS SSO multi-account/multi-role credentials Open

denoland/clawpatrol#756 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`clawpatrol run` (per-process) can't reach tunnel-backed endpoints (kubernetes_port_forward / local_command) Open

denoland/clawpatrol#765 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
macOS: apply Keychain trust settings when building the CA bundle (follow-up to #764/#766) Open

denoland/clawpatrol#767 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support SSL_CERT_FILE-only corporate roots under clawpatrol run (follow-up to #764/#766) Open

denoland/clawpatrol#768 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
macOS: system-resolver (mDNSResponder) lookups bypass NE — per-process DNS leak for tunnel-backed endpoints Open

denoland/clawpatrol#772 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
run (Linux): rewrite child UDP/53 to <gateway>:53 in the daemon as belt-and-suspenders Open

denoland/clawpatrol#773 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Device-flow onboarding installs the poll-delivered CA over an unauthenticated (InsecureSkipVerify) connection Open

denoland/clawpatrol#774 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
macOS: remove the previously managed Claw Patrol CA after successful rotation Open

denoland/clawpatrol#777 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
clawpatrol run: define IPv6 routing parity and PMTU/ICMPv6 behavior Open

denoland/clawpatrol#787 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Hey Claw Patrol team nice work. Open

denoland/clawpatrol#797 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CLI for configuring a remote gateway (credentials, device approval, profiles) Open

enhancement roadmap

denoland/clawpatrol#811 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Roadmap: generalize env pushdown beyond the built-in credential types Open

roadmap

denoland/clawpatrol#815 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Roadmap: a plugin registry Open

roadmap

denoland/clawpatrol#816 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Roadmap: llm facet for reporting model, tokens and cost Open

roadmap

denoland/clawpatrol#817 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Roadmap Open

roadmap

denoland/clawpatrol#818 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Plugin parity: every built-in capability expressible as an external plugin Open

roadmap

denoland/clawpatrol#833 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Dashboard-approved sync HITL request is rendered in Slack as "waiting for matching client retry" Open

denoland/clawpatrol#843 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
macOS clawpatrol run: extension UDP pump swallows the UDP/443 refusal Open

denoland/clawpatrol#848 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
http.host facet: rules on https.unknown (and the Block button) cannot match the host Open

denoland/clawpatrol#849 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CertCache: bound the minted-leaf cache and re-mint expired leaves Open

denoland/clawpatrol#850 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

A short digest of beginner-friendly GitHub issues.