clawwatch

CLI for ClawWatch — real-time observability and policy control for AI agent sandboxes.

Supports NVIDIA NemoClaw and E2B sandboxes.

Install

npm install -g clawwatch

Quick start

# 1. Get a free API token at https://claw-watch.dev/dashboard/settings

# 2. NemoClaw — watch a live sandbox (recommended)
clawwatch watch my-assistant --token cw_YOUR_TOKEN

# 3. E2B — watch a live sandbox
clawwatch watch-e2b <sandbox-id> --token cw_YOUR_TOKEN --name my-agent

# 4. Test without a real sandbox
clawwatch demo --token cw_YOUR_TOKEN

Commands

clawwatch watch <sandbox-name>

Primary NemoClaw integration. Spawns nemoclaw <name> logs --follow internally and streams every event to your ClawWatch dashboard.

Requires NemoClaw installed and in your PATH.

Options:
  -t, --token <token>    ClawWatch API token (required)
  --url <url>            ClawWatch API URL (default: https://claw-watch.dev)
  --interval <ms>        Batch flush interval (default: 1000)
  -v, --verbose          Print raw log lines

clawwatch watch-e2b <sandbox-id>

E2B integration. Spawns e2b sandbox logs --follow <id> and parses events.

Requires the E2B CLI: npm install -g @e2b/cli

Options:
  -t, --token <token>    ClawWatch API token (required)
  -n, --name <name>      Friendly sandbox name for the dashboard
  --url <url>            ClawWatch API URL (default: https://claw-watch.dev)
  -v, --verbose          Print raw log lines

clawwatch connect <sandbox-name>

Pipe mode — reads NDJSON from stdin or a file. Use when you need custom log filtering.

nemoclaw my-assistant logs --follow | clawwatch connect my-assistant --token cw_...

clawwatch demo

Send realistic synthetic events to your dashboard without a real sandbox.

clawwatch demo --token cw_... --rate 5

clawwatch format

Print the NDJSON event schema accepted by clawwatch connect.

What ClawWatch captures

| Event type | What's tracked | |---|---| | network | Outbound connections — host, port, allowed/blocked | | inference | Model calls — provider, token count, cost | | filesystem | File reads/writes — path, allowed/blocked by Landlock | | process | Tool calls, subprocess spawns |

License

MIT — claw-watch.dev