openclaw-latch

Latch security gate plugin for OpenClaw. Adds policy-based tool gating with audit logging and optional WebAuthn approval flows.

Install

openclaw plugins install openclaw-latch

This will:

1. Install the latch-agent Python package (via pipx or pip)
2. Run latch init to create the default config at ~/.agent-2fa/
3. Register latch-serve as an MCP server in OpenClaw

Requirements

• Python 3.10+
• pipx (recommended) or pip

Manual Setup

If automatic installation doesn't work:

pipx install latch-agent
latch init

Then add to your OpenClaw MCP config:

{
  "mcpServers": {
    "latch": {
      "command": "latch-serve",
      "args": []
    }
  }
}

Configuration

Edit ~/.agent-2fa/policy.yaml to customize tool gating rules. See the latch-agent docs for policy format details.