ClawGate.ai Agent Security vs PocketShell

ClawGate gives you human-in-the-loop control over your AI agents using Face ID and passkeys. When your agent wants to send an email, make a payment, or perform any sensitive action like deleting a file or restarting a server, ClawGate sends a push notification to your iPhone. You immediatley get a notification through the ClawGate app and then can approve or deny with using the same biometric integrated passkey security you use to unlock your phone — done in under 2 seconds! HOW IT WORKS Sign in with Apple and set up your passkey. Generate an API key and connect it to your agent (OpenClaw or any compatible platform) When your agent needs approval, you get a push notification Approve with Face ID or deny with a tap SECURITY YOU CAN TRUST Built on WebAuth/FIDO2 passkeys — the same phishing-resistant standard used by Apple, Google, and Microsoft. Your passkey only works on the real ClawGate domain. It can't be phished, intercepted, or replayed. Your agent never has access to your passkey. It requests approval, you authenticate, and it receives a scoped, time-limited token. The same delegation model used by OAuth 2.0. KEY FEATURES • Face ID / Touch ID approval in under 2 seconds • Push notifications — works even when the app is closed • Phishing-resistant WebAuthn passkeys • Scoped, time-limited approval tokens (single use, expires in 5 minutes) • Configurable action patterns — choose what needs approval • Full approval history and audit trail • Multiple API keys for different agents • Sign in with Apple — no passwords to manage • Open source server — self-host if you prefer FLEXIBLE PLANS • Free: 50 approvals/month, 1 API key, 7-day history • Pro ($4.99/mo): Unlimited approvals, 5 API keys, 90-day history, priority support • Team (coming soon): Multiple users, shared approval queues, detailed audit logs BUILT FOR THE OPENCLAW COMMUNITY ClawGate integrates with OpenClaw and any agent platform that supports the ClawGate API. The server is 100% open source — run your own instance with no limits. Visit clawgate.ai for documentation and self-hosting guides.

Manage your servers and projects from your iPhone or iPad. No SSH keys to copy, no ports to forward, no VPN to configure. PocketShell replaces traditional SSH workflows with a secure, mobile-first workspace. Install the lightweight host agent, scan a QR code, and connect to your own machines through encrypted peer-to-peer connections whenever the network allows. Open real terminals, browse files, monitor system stats, transfer files, and now work inside ProjectSpace: a code editor-style mobile workspace for your projects. ProjectSpace brings files, terminal sessions, Git changes, agent chats, and local web previews together so you can inspect, fix, and ship from your phone. Built for developers, on-call engineers, homelab users, and self-hosters who need safe access to machines they own from anywhere. PROJECTSPACE - Browse project folders on your host - Open and edit code with syntax highlighting - Search files and project contents - View Git status and diffs - Stage changes, switch branches, and commit - Open terminals scoped to the project - Preview local dev servers in the built-in Dev Browser HOW IT WORKS 1. Install the PocketShell agent on your host with one command 2. Scan the QR code to pair your phone 3. Open terminals, files, projects, Git, stats, and web previews from your phone FREE FOR UP TO 2 HOSTS - Real terminal sessions with a mobile-friendly keyboard - ProjectSpace for mobile project workflows - Built-in Dev Browser for local web previews - Live monitoring: CPU, memory, disk, network, processes - Browse, preview, upload, and download files - Resume sessions across devices - Direct peer-to-peer connections when your network allows POCKETSHELL PRO - Up to 10 hosts - More ProjectSpace capacity - Direct host-to-host file transfers - Higher file transfer limits - 30 days of historical stats - Multi-device support - Priority alerts and notifications WHY NOT SSH? Traditional SSH apps require you to copy private keys to your phone, expose ports through your router, or set up VPNs to reach machines behind NAT. PocketShell uses encrypted peer-to-peer connections through a lightweight host agent. Pair once, access securely, and avoid key management on mobile. SECURITY PocketShell uses device-bound host pairing, trusted-device approval, biometric unlock, Ed25519 cryptography, and session auditing. Terminal contents are never stored on our servers. Terminal I/O, files, stats, and project data flow directly between your phone and your host whenever the network allows. PocketShell is for accessing machines you own or are authorized to operate. Privacy Policy: https://pocketshell.app/privacy Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/