--- title: "Claw Patrol: an open-source security firewall for agents" url: https://daily.dev/posts/claw-patrol-an-open-source-security-firewall-for-agents-fap3reimu source_url: https://deno.com/blog/clawpatrol type: article source: "Deno" published: 2026-05-21T13:12:31.622Z updated: 2026-05-21T13:13:03.816Z tags: ["security", "ai-agents", "prompt-injection"] reading_time: 4 upvotes: 32 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Claw Patrol: an open-source security firewall for agents **[Deno](https://daily.dev/sources/deno)** · 4 min read · 32 upvotes · 0 comments ## Summary Deno is open-sourcing Claw Patrol, a security firewall gateway for AI agents that goes beyond HTTP. The tool routes agent traffic through WireGuard or Tailscale tunnels to a gateway that terminates TLS, parses inner protocols (HTTP, SQL, Kubernetes API), holds and injects real credentials, and evaluates requests against HCL rules. Unlike LLM gateways, HTTP proxies, or process sandboxes, Claw Patrol can gate non-HTTP protocols like Postgres and Kubernetes, block specific SQL verbs (e.g., DROP TABLE), and tunnel into networks the agent host can't reach. Credentials never live on the agent — it sends placeholders that the gateway swaps for real tokens. Verdicts can be allow, deny, or a chain involving LLM judges and human approvers via Slack. Released under MIT license as alpha software. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/claw-patrol-an-open-source-security-firewall-for-agents-fap3reimu)