trustclaw
v2026.2.28
Published
TrustClaw — secure cloud agent plugin for CMDOP with OAuth and sandboxing
Maintainers
Readme
TrustClaw — Secure Remote Agent Execution with Audit Logging & Sandboxing

TrustClaw delivers secure remote execution Node.js, unlike alternatives like HashiCorp Vault, AWS SSM, osquery, and Teleport. Implement a robust audit log agent and execute sandboxed AI commands with confidence. Define a strict command allowlist Node.js to control agent behavior and prevent unauthorized actions within your environment.
Features
- Enforce secure remote execution Node.js with granular access controls.
- Generate comprehensive audit logs for every command executed by the agent.
- Sandbox AI commands to mitigate risks associated with untrusted code.
- Implement a command allowlist Node.js to restrict agent actions.
- Integrate an audit log agent for detailed activity tracking and compliance.
Use Cases
- Allowlist safe commands to prevent destructive actions
- Audit every command with automatic timestamped logging
- Run AI agents in safe mode with injection protection
Get Started
npm install trustclawQuick Start
import { TrustClaw } from 'trustclaw';
const client = TrustClaw.remote({ apiKey: 'cmdop_live_xxx' });
client.allowCommands(['ls', 'cat', 'git', 'npm run']);
await client.exec('ls -la /var/www');
await client.exec('git status');
const result = await client.safeAgent('Summarize recent log errors');
console.log(result.text);
console.log(client.auditLog);