ClawGate.ai Agent Security vs Hermex

ClawGate gives you human-in-the-loop control over your AI agents using Face ID and passkeys. When your agent wants to send an email, make a payment, or perform any sensitive action like deleting a file or restarting a server, ClawGate sends a push notification to your iPhone. You immediatley get a notification through the ClawGate app and then can approve or deny with using the same biometric integrated passkey security you use to unlock your phone — done in under 2 seconds! HOW IT WORKS Sign in with Apple and set up your passkey. Generate an API key and connect it to your agent (OpenClaw or any compatible platform) When your agent needs approval, you get a push notification Approve with Face ID or deny with a tap SECURITY YOU CAN TRUST Built on WebAuth/FIDO2 passkeys — the same phishing-resistant standard used by Apple, Google, and Microsoft. Your passkey only works on the real ClawGate domain. It can't be phished, intercepted, or replayed. Your agent never has access to your passkey. It requests approval, you authenticate, and it receives a scoped, time-limited token. The same delegation model used by OAuth 2.0. KEY FEATURES • Face ID / Touch ID approval in under 2 seconds • Push notifications — works even when the app is closed • Phishing-resistant WebAuthn passkeys • Scoped, time-limited approval tokens (single use, expires in 5 minutes) • Configurable action patterns — choose what needs approval • Full approval history and audit trail • Multiple API keys for different agents • Sign in with Apple — no passwords to manage • Open source server — self-host if you prefer FLEXIBLE PLANS • Free: 50 approvals/month, 1 API key, 7-day history • Pro ($4.99/mo): Unlimited approvals, 5 API keys, 90-day history, priority support • Team (coming soon): Multiple users, shared approval queues, detailed audit logs BUILT FOR THE OPENCLAW COMMUNITY ClawGate integrates with OpenClaw and any agent platform that supports the ClawGate API. The server is 100% open source — run your own instance with no limits. Visit clawgate.ai for documentation and self-hosting guides.

Hermex is a native iPhone and iPad client for your self-hosted Hermes agent. Connect to a reachable Hermes Web UI server, or enable the optional Bot Mode beta to connect directly to a Hermes agent host. Open existing sessions, start conversations, and follow streamed responses, tools, and reasoning as they arrive. Queue, steer, or stop an active run. Review file edits as diffs, browse workspace files, send photos and files, and dictate messages. Manage Kanban boards and cards, browse Tasks, Skills, Memory, and Usage, and choose models, profiles, and reasoning settings. Bot Mode adds a Bots inbox, Desktop sections, reactions, quick replies, approvals, questions, and group rooms. Live Activities keep working runs visible on the Lock Screen and Dynamic Island. Optional notifications let you know when work finishes or needs your attention. The share extension stages content from other apps for you to review and send. Agent execution happens on your configured server, not on the iPhone. Your server owns your conversations, tools, and workspace. Recent sessions and messages may be cached locally for read-only offline viewing; clear that cache from Settings. There is no Hermex-hosted agent backend, tracking, or analytics service. Optional push notifications use an open-source, self-hostable relay. Message previews are encrypted on your Hermes host and decrypted on your iPhone; the relay handles device tokens, notification metadata, and ciphertext, never message text, server URLs, or Hermes server credentials. Push is off until enabled. Hermex has no in-app account creation or in-app purchases. You need your own reachable Hermes server. Not affiliated with Nous Research.