Governance for the Single-Prompt Agent Era
In short: define what your AI agent may do, then export the evidence before it goes live.
Version: 1.10.37 | Owner: Master 22 Solutions | ClawMaven AI Governance Platform
Policy, approval gates, budget caps, trust manifests and audit-ready evidence, generated before your agent ships.
Start free, no account required. Or use the 24-step wizard, or see a sample package first.
ClawMaven is the governance intelligence layer for AI agents, helping teams design, validate, compare, and prove governed deployments before production. It is built for the single-prompt agent era, where an agent can be copied, connected, and scheduled in minutes — but its policy, budget caps, approval gates, and audit evidence still need to be defined before it runs.
Privacy by Architecture: Your governance configuration is generated in your browser and is not transmitted to ClawMaven servers. Generating a pack sends only a one-way SHA-256 hash for quota counting; AI suggestions, analytics, and any form you submit are opt-in and named on our privacy page.
Security tools observe and defend what agents do at runtime. ClawMaven defines what agents are allowed to do, produces a verifiable record that governance was applied, and generates structured artifacts for regulatory and audit purposes.
Third-party scan evidence (optional): A governance pack can require a clean Cisco Skill Scanner or Cisco MCP Scanner report before a skill or MCP server is promoted. You run the scanner and place the JSON report in the pack's evidence/scans/ folder; ClawMaven validates that a scan ran and passed by reading the report's findings, never the scanner's exit code.
Verified claims: Site claims are derived from code constants, checked by drift tests on every release, published in a claims audit, and re-checked on the live site after each deploy. See /claims-audit.
ClawMaven is the governance intelligence layer for AI agents. It helps teams design, validate, and prove governed AI agent deployments before production — producing policy files, approval gates, budget caps, trust manifests, and audit-ready evidence mapped to EU AI Act, NIST AI RMF, ISO/IEC 42001, SOC 2, and GDPR. Your governance configuration is generated in your browser and is not transmitted to ClawMaven servers. Generating a pack sends only a one-way SHA-256 hash for quota counting; AI suggestions, analytics, and any form you submit are opt-in and named on our privacy page.
Guardrails AI describes itself as “The AI Reliability Platform”. LangSmith, from LangChain, is a framework-agnostic agent engineering platform. ClawMaven operates upstream: it defines what the agent is allowed to do, generates verifiable proof that governance was applied, and produces structured artifacts for auditors — before the agent ever reaches production. The two approaches are complementary.
Your governance configuration is generated in your browser and is not transmitted to ClawMaven servers. Generating a pack sends only a one-way SHA-256 hash for quota counting; AI suggestions, analytics, and any form you submit are opt-in and named on our privacy page.
Yes. The core ClawMaven experience — full 24-step governance wizard and the 50+ file governed agent deployment pack — is free with no account required. Paid tiers (Builder $49 one-time, Team $99/month, Enterprise from $399/month) add Config Scout, team sharing, the /monitor run-report dashboard, and compliance exports.
Every governance pack is a downloadable ZIP with 50+ files: policy.json (allowed actions, budget caps, forbidden operations), routing.rules.json, trust-manifest.json with SHA-256 checksums, runtime-conformance.json, approval-gates.json, verification scripts (verify.sh / verify.ps1), and a five-document audit evidence package mapped to EU AI Act, NIST AI RMF, and ISO/IEC 42001.
Config Scout analyzes 14 AI agent runtime profiles: OpenClaw, LM Studio, Ollama, Agent Zero, NullClaw, Perplexity, MaxClaw, Grok Bot (xAI), Google ADK, OpenAI Agents SDK, LangGraph, CrewAI, Claude / Anthropic SDK, and Hermes. The Governance Wizard generates governed deployment packages for 7 scoped targets: OpenClaw, LM Studio, Ollama, Agent Zero, NullClaw, Perplexity, and MaxClaw.
Yes. For teams that need a board-ready governance deliverable without learning the platform, ClawMaven offers a fixed-scope AI Governance Audit at clawmaven.com/audit. It starts from $2,500 and is delivered in 5 business days, covering a governance posture score, compliance summary (EU AI Act, NIST AI RMF, ISO/IEC 42001, SOC 2, and GDPR), deployable governance pack, SHA-256 trust manifest, and an executive leadership briefing.
Yes, through the scanner_pass approval gate, which is off by default. A governance pack can require a clean Cisco Skill Scanner or Cisco MCP Scanner report before a skill or MCP server is promoted. You run the scanner and place the JSON report in the pack's evidence/scans/ folder; ClawMaven validates that a scan ran and passed by reading the report's findings, never the scanner's exit code.
No. ClawMaven is independent assurance, not a tool. We look at what you actually deployed and put our name on the finding. ClawMaven Observer is continuous third-party governance monitoring at $497 per month: a monthly check of the live agent configuration against the adopted governance pack, a written drift report, and a quarterly tamper-evident evidence bundle.
Site claims are derived from code constants, checked by drift tests on every release, published in a claims audit, and re-checked on the live site after each deploy. The claims audit is public at clawmaven.com/claims-audit.
24-step guided wizard: agent goal, operator mode, runtime target, budget caps, forbidden actions, model routing, scheduling, escalation rules, skill sources, and risk thresholds. Live Autonomy Intensity Meter (0–100) with top-3 risk drivers. Four editions: Solo, Trading, Agency, Enterprise. Five governance templates: Research, Content, DevOps, Support, Trading.
Upload or paste any existing AI agent config. Scans against 40+ heuristic patterns across all 5 heuristic runtimes (Google ADK, OpenAI Agents SDK, LangGraph, CrewAI, Claude / Anthropic SDK). Returns suggested fixes and a governance pack. Closes compliance gaps in seconds. Available in Builder and above.
7-card advisory dashboard: Session file count, session registry size, large session transcripts, orphaned session references, scheduler / cron log size, stale path references and overall cleanup confidence. Generates maintenance policies and actionable repair commands.
10-section compliance summary bundled in every governance ZIP. Covers EU AI Act, NIST AI RMF, ISO/IEC 42001, SOC 2, and GDPR. EU AI Act coverage spans Articles 9, 10, 13, 14, 17 and 62. The EU AI Omnibus (Regulation (EU) 2026/1744, in force 27 July 2026) moved stand-alone high-risk (Annex III) obligations to 2 December 2027 and product-embedded (Annex I) to 2 August 2028. Article 50 transparency obligations have applied since 2 August 2026.
5-stage validation: Stage 1 Health Scoring and Drift Detection, Stage 2 Incident Classification, Stage 3 Candidate Improvement Drafts, Stage 4 Candidate Validation, Stage 5 Promotion Gates. Stages 1–2 free; stages 3–5 require Builder or above.
Your agents send their own run reports to POST /api/runs/ingest with an API key; ClawMaven does not connect to or watch your runtime. The /monitor dashboard lists the reports it receives by agent (status, last-seen time, error counts), re-fetches them every 30 seconds while Live mode is on, applies alert rules for cost spikes, error rates and budget breaches, and exports an incident summary for compliance review. Team and Enterprise.
Runtime-agnostic 6-step wizard for building custom AI agent skills with defined inputs, outputs, permissions, and safety rails. ZIP README includes Runtime Quick-Start install guides for OpenClaw, CrewAI, LangGraph, Agent Zero, and NullClaw. Builder/Team tiers.
Standalone Node.js tool (clawmaven binary) for diagnosing and repairing OpenClaw installations. Commands: diagnose, repair, install --patch-anthropic, guardian (live watchdog). Fixes 1006 gateway errors, corrupted config.json, OAuth silent failures, budget bleed.
Full AI-readable documentation: ClawMaven full AI documentation (llms-full.txt)
Concise AI summary: ClawMaven AI summary (llms.txt)