IronClaw: Unleash Your AI Agent, With Peace of Mind

IronClaw is the secure, open-source alternative to OpenClaw that runs in encrypted enclaves on NEAR AI Cloud or download the source code from Github and run it locally. AI agents that actually do things, but your secrets never touch the model.

How It Works

From zero to secure agent in minutes.

IronClaw offers simple setup and built-in security for OpenClaw's personal AI assistant—powered by NEAR AI Cloud or run locally.

Deploy in one click.

Launch your own IronClaw instance on NEAR AI Cloud. It boots inside a Trusted Execution Environment — encrypted from the start, no setup required.

Store your credentials.

Add API keys, tokens, and passwords to the encrypted vault. IronClaw injects them only where you've allowed — the AI never sees the raw values.

Work like you always do.

Browse, research, code, automate. Powerful capabilities that are exempt from protected injection that can steal your credentials.

fn deploy(cfg: &Config) -> Result<()> {
    let tee = TeeEnclave::provision()?;
    tee.verify_memory_safety()?;
    let vault = Vault::seal(cfg)?;
    vault.bind_endpoints(&cfg.allowlist)?;
    agent::spawn(tee, vault)
}

#[derive(Encrypt, ZeroOnDrop)]
struct Credentials {
    api_key: Secret<String>,
    bearer: Secret<String>,
}

impl Vault {
    fn inject(&self, req: &mut Request) {
        if self.allowlist.permits(req.url()) {
            req.set_auth(&self.credentials)
        }
    }
}

fn verify_wasm(bytes: &[u8]) -> bool {
    wasmparser::validate(bytes).is_ok() && !contains_unsafe(bytes)
}

struct AllowList { endpoints: Vec<Url> }

impl AllowList {
    fn permits(&self, url: &Url) -> bool {
        self.endpoints.iter().any(|e| e == url)
    }
}

What You Get

Security you don't have to think about.

IronClaw is powered by NEAR AI's cryptographically secure infrastructure, which ensures your credentials never leave the vault.

Encrypted Vault

Your credentials are invisible to the AI. API keys, tokens, and passwords are encrypted at rest and injected into requests at the host boundary — only for endpoints you've approved.

Sandboxed Tools

A compromised skill can't touch anything else. Every tool runs in its own Wasm container with capability-based permissions, allowlisted endpoints, and strict resource limits.

Encrypted Enclaves

Not even the cloud provider can see your data. Your instance runs inside a Trusted Execution Environment on NEAR AI Cloud — encrypted in memory, from boot to shutdown.

Leak Detection

Credential exfiltration gets caught before it leaves. All outbound traffic is scanned in real-time. Anything that looks like a secret heading out the door is blocked automatically.

Built in Rust

Entire classes of exploits don't exist here. No garbage collector, no buffer overflows, no use-after-free. Memory safety is enforced at compile time, not at runtime.

Network Allowlisting

You control exactly where data goes. Tools can only reach endpoints you've pre-approved. No silent phone-home, no data exfil to unknown servers.

The Hosted Solution

Running IronClaw on NEAR AI Cloud, your credentials live in an encrypted vault empowering your agent with full system access and persistent memory while still protecting your secrets.

Every tool runs in its own WebAssembly sandbox with no filesystem access and no outbound connections beyond your allowlist. The entire runtime is Rust — no garbage collector, no buffer overflows, no use-after-free.

Everything you like about OpenClaw. Nothing you're worried about.

Choose a NEAR AI deployment based on your performance requirements and preferred agent. You get NEAR security no matter what.

Deploy Secure Agents. No Hardware Required.

Spin up to 5 agents in a Trusted Execution Environment with up to 130M tokens per month — no cloud setup, no infrastructure. Just a simple frontend and you're live.

Starter

Activate 1 agent instance in our secure environment, and use NEAR AI Inference to power your agent

$5/month
Secure deployment
Trusted Execution Environment
NEAR AI Inference
$5 credits included

Pro+

Activate up to 5 agent instances in our environment, plus advanced features and more credits for high usage

$200/month
Everything in Basic
Early access to advanced models
Priority support
$200 credits included

Deploy an AI agent you can actually trust.

Open source. One-click deploy on NEAR AI Cloud. Your secrets never leave the encrypted vault.