Docs

OpenClaw

The open-source assistant that runs as a gateway on the machine. Fully covered for Block and Ask through a ZYBE plugin.

What ZYBE can do

Block and Ask, on every rule, for commands, file reads, file writes, patches, web fetches and spawned agents. After each call ZYBE reads what came back.

OpenClaw runs its hooks inside its own process, so ZYBE is an OpenClaw plugin: a small one that hands every tool call to the same check every other AI tool uses on the laptop.

What you do

Install the sensor, then restart OpenClaw's gateway once so it loads the plugin. On a Mac, that's quitting and reopening OpenClaw, or:

openclaw gateway restart

If OpenClaw's command isn't on the path when the sensor installs, the sensor tells you the two commands to run:

openclaw plugins install --link /usr/local/zybe/lib/openclaw-zybe --force
openclaw plugins enable zybe

Check it's working

  1. Ask OpenClaw to run any command.
  2. In the console, open the laptop from Inventory, Endpoints, click Sensor. OpenClaw shows Blocking.

What the developer sees when blocked

OpenClaw shows ZYBE's reason as the tool's error and the agent moves on. A rule set to Ask becomes an OpenClaw approval, answered with /approve.

For IT

The plugin lives under the sensor's lib/openclaw-zybe folder and is listed in ~/.openclaw/openclaw.json under plugins.entries.zybe.