The policy firewall for AI agents.

// Add to claude_desktop_config.json
// or .mcp.json for Claude Code
{
  "mcpServers": {
    "dashclaw": {
      "command": "npx",
      "args": ["@dashclaw/mcp-server"],
      "env": {
        "DASHCLAW_URL": "https://your-instance.vercel.app",
        "DASHCLAW_API_KEY": "oc_live_..."
      }
    }
  }
}
// 23 governance tools + 4 resources
// No SDK. No code changes.

from dashclaw import DashClaw
import os

claw = DashClaw(
    base_url=os.environ["DASHCLAW_BASE_URL"],
    api_key=os.environ["DASHCLAW_API_KEY"],
    agent_id="my-agent"
)

# Intercept tool execution
decision = claw.guard(
    action_type="deploy",
    risk_score=82
)

if decision == "allowed":
    run_agent_tool()

# Wrap sensitive agent tasks
decision = claw.guard(
    action_type="external_api_call",
    provider="stripe",
    risk_score=88
)

if decision == "allowed":
    crew.kickoff()

import { DashClaw } from 'dashclaw'
const claw = new DashClaw({
  baseUrl: process.env.DASHCLAW_BASE_URL,
  apiKey: process.env.DASHCLAW_API_KEY,
  agentId: 'my-agent'
})

// Guard before calling the tool
const { decision } = await claw.guard({
  actionType: "deploy",
  riskScore: 90
})

if (decision === 'allowed') {
  await openai.chat.completions.create(...)
}

# .claude/hooks/dashclaw_pretool.py
# Governs Bash, Edit, Write, MultiEdit
# No pip installs required

import json, sys, urllib.request, os

payload = json.loads(sys.stdin.read())
tool = payload.get("tool_name", "")

if tool not in ["Bash","Edit","Write","MultiEdit"]:
    sys.exit(0)  # not governed

# Guard check via DashClaw API
# block/approve/allow based on policy

# One command wires it all into ~/.codex/config.toml
$ dashclaw install codex --project .

# Managed block written to ~/.codex/config.toml:
approval_policy = "on-request"

[mcp_servers.dashclaw]
command = "python"
args = [".../dashclaw-mcp.js", "--agent-id", "codex"]

[[hooks.PreToolUse]]
matcher = "Bash|Edit|Write|MultiEdit"
[[hooks.PreToolUse.hooks]]
type = "command"
command = "python ~/.codex/hooks/dashclaw/dashclaw_pretool.py"

# Same hooks. Same audit ledger. agent_id = codex.

# One install script wires 8 hooks into ~/.hermes/config.yaml
$ bash scripts/install-hermes-plugin.sh

# Managed block written to ~/.hermes/config.yaml:
hooks:
  pre_tool_call:  [...]  # guard / block / require_approval
  post_tool_call: [...]  # outcome recording
  pre_llm_call:   [...]  # per-turn policy + approval context injection
  post_llm_call:  [...]  # live ingest to /api/code-sessions/ingest-live
  on_session_start: [...] # cache warm
  on_session_end:   [...] # finalize: true -> optimizer + alerts pass
  transform_tool_result: [...] # redact API keys, JWTs, PEM blocks
  subagent_stop:    [...] # delegate_task ROI tracking

# Per-turn cost attribution. agent_id = hermes.