Authensor Gateway

# Authensor Gateway

A lightweight policy gate that checks every OpenClaw tool call against your Authensor policy before it executes.

- **Low-risk actions** (read files, search, grep) — run automatically
- **High-risk actions** (write files, run commands, network requests) — require your approval
- **Dangerous actions** (delete, overwrite, access secrets) — blocked by default

Source code: https://github.com/AUTHENSOR/Authensor-for-OpenClaw

## When to Use This

Install Authensor Gateway if you:

- **Run marketplace skills you didn't write.** Third-party skills can execute Bash, write files, and make network requests. [ClawHavoc](https://snyk.io/blog/clawhavoc) found 341 malicious skills on ClawHub — Authensor gates every tool call before it runs.
- **Want approval before destructive actions.** Instead of blanket-allowing or blanket-denying, you choose which actions need your sign-off.
- **Need an audit trail.** Every action (allowed, denied, or pending) is logged with a receipt ID and timestamp.
- **Work in regulated environments.** Authensor provides evidence of human-in-the-loop oversight for compliance.

You do **not** need Authensor if you only use built-in OpenClaw tools with no marketplace skills, or if you already run in a fully locked-down Docker sandbox with no network access.

## What Gets Caught (Examples)

Here's what Authensor does with real-world tool calls:

| Tool call | Action type | Default policy | Why |
|-----------|------------|----------------|-----|
| `Read /src/app.js` | `safe.read` | **Allow** | Reading source code is safe |
| `Grep "TODO" .` | `safe.read` | **Allow** | Searching files is safe |
| `Read ~/.ssh/id_rsa` | `secrets.access` | **Deny** | Sensitive path detected |
| `Read .env` | `secrets.access` | **Deny** | Sensitive path detected |
| `Write /src/config.js` | `filesystem.write` | **Require approval** | Writing files needs your OK |
| `Bash "npm install lodash"` | `code.exec` | **Require approval** | Installing packages needs y...