ironclaw

nearai/ironclaw

NEAR AI's open-source agent OS that treats agent execution as a privacy-first harness problem: untrusted tools run in WASM sandboxes with capability-based permissions, credentials are injected at the host boundary with leak detection, and prompt-injection filtering plus endpoint allowlisting constrain agent behavior. The combination of local encrypted storage, hybrid-search memory, MCP server supp

Rust Apache-2.0

View on GitHub → Find it in the atlas

Install

irm "https://github.com/nearai/ironclaw/releases/download/$IronClawReleaseTag/ironclaw-installer.ps1" | iex

Repository reader

Explore before you clone

Read the project’s README, skills and supporting Markdown here. Rendered view is shown first; source is one click away when you need the exact text.

Fetched from GitHub
Open on GitHub
Loading the project’s README…

Public files are loaded on demand from the repository. The atlas does not copy or modify them.

Screenshot

Screenshot or social card for ironclaw
GitHub's social card — no screenshot was found for this project, fetched from source rather than copied into this repository.

Platform support

Derived from the project's own README, install route, CI configuration and release assets — not from running it.
PlatformRuns hereOn what evidence
WindowsYesStated in the project's own README, install route, CI config or release assets.
WSL2YesStated in the project's own README, install route, CI config or release assets.
macOSYesStated in the project's own README, install route, CI config or release assets.
LinuxYesStated in the project's own README, install route, CI config or release assets.
DockerNoNo evidence of support anywhere in the project.

Where it came from

Named by 3 of the 39 lists the atlas merges, independently of each other.

How it is classified

One topic, 1 harness. Each link is a prerendered page of everything else in that slice.

Assistants & Domain AgentsMCP

Related in Assistants & Domain Agents

Closest first — projects that plug into the same harnesses, then the ones the most lists agreed on.

  • SkyvernSkyvern-AI/skyvernOfficial Skyvern browser automation skill — AI-powered browser control using Vision LLMs and computer vision for navigating sites, filling forms…
  • nanobotHKUDS/nanobotHKUDS's ultra-lightweight, self-hosted personal AI agent framework: a single readable Python core that combines WebUI/terminal/chat-app surfaces…
  • Private GPTzylon-ai/private-gptPrivateGPT is a secure, offline-capable AI tool for querying documents with Large Language Models, offering high-level and low-level APIs for…
  • awesome-llm-appsShubhamsaboo/awesome-llm-appsCollection of production LLM applications with source code across RAG, multi-agent, and tool-use patterns. Good reference for how harness primitives…
  • joinlyjoinly-ai/joinlySend bots to browser-based meetings (Zoom, Teams, Google Meet) to gather live transcripts, speak text and post in the meeting chat
  • Autobotcrystal-autobot/autobotCrystal - AI assistant with kernel-enforced sandboxing, multi-provider LLM, voice, vision, cron, and MCP tools
  • Brigadeescoffier-labs/brigadeLocal-first CLI (MIT) that keeps one reviewed source of the MCP servers, tools, skills, and memory your AI coding agents share, synced into each…
  • ControlKeelaryaminus/controlkeelGovernance/control plane for AI coding agents. Validates risky actions, records findings, gates approvals, tracks budgets/providers, and creates…