Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@

## πŸ“– Introduction

**ClawShell** is a security-privileged process for the **OpenClaw** ecosystem. It sits between OpenClaw and upstream LLM API providers (OpenAI, Anthropic), performing virtual-to-real API key mapping and DLP (Data Loss Prevention) scanning on request and response bodies. It can also expose an Email read endpoint with sender allowlist/denylist filtering.
**ClawShell** is a security-privileged process for the **OpenClaw** ecosystem. It sits between OpenClaw and upstream LLM API providers (OpenAI, Anthropic, OpenRouter), performing virtual-to-real API key mapping and DLP (Data Loss Prevention) scanning on request and response bodies. It can also expose an Email read endpoint with sender allowlist/denylist filtering.

OpenClaw never holds real API keys, only virtual keys that ClawShell swaps for real ones before forwarding requests upstream. Real keys are stored in a privileged config directory (`/etc/clawshell`) protected by Unix file system permissions.

Expand Down Expand Up @@ -67,9 +67,9 @@ ClawShell supports sender-based email filtering so each virtual key only sees ma
β•‘ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” REQUEST β•‘ β”‚ β”‚ REQUEST β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚ β”œβ”€β”€(virtual───╫─►│ ClawShell β”œβ”€β”€-(real key,───►│ β”‚
β”‚ OpenClaw β”‚ key) β•‘ β”‚ β”‚ PII redacted) β”‚ OpenAI β”‚
β”‚ β”‚ β•‘ β”‚ DLP scan β”‚ β”‚ or β”‚
β”‚ holds only β”‚ RESPONSE β•‘ β”‚ real-key mapping β”‚ RESPONSE β”‚ Anthropic β”‚
β”‚ OpenClaw β”‚ key) β•‘ β”‚ β”‚ PII redacted) β”‚ OpenAI / β”‚
β”‚ β”‚ β•‘ β”‚ DLP scan β”‚ β”‚ Anthropic/ β”‚
β”‚ holds only β”‚ RESPONSE β•‘ β”‚ real-key mapping β”‚ RESPONSE β”‚ OpenRouter β”‚
β”‚ virtual keys │◄────────────║◄── email sender filtering │◄───────────────── β”‚
β”‚ β”‚ β•‘ β”‚ β”‚ β”‚ β”‚
β”‚ β”‚ EMAIL GET β•‘ β”‚ β”‚ IMAP fetch β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
Expand Down