IronClaw

IronClaw is the NEAR Foundation's open-source runtime for personal AI agents. It adds an encrypted credential vault, per-tool WebAssembly sandboxes, network allowlisting and a Rust codebase on top of OpenClaw, with one-click deployment inside a Trusted Execution Environment on NEAR AI Cloud or a local install.

IronClaw is an open-source agent runtime built by the NEAR Foundation for people who want a general-purpose assistant that can browse, research, code and automate, without handing raw API keys and passwords to a language model. It is positioned as a hardened alternative to OpenClaw, the personal assistant it builds on, and the core pitch is architectural rather than model-level: secrets are kept out of the prompt entirely. The mechanism is a credential vault that encrypts keys at rest and injects them at the host boundary, only for endpoints on an allowlist. Each tool runs in its own WebAssembly container with capability permissions and resource limits, so a compromised skill cannot reach anything outside its sandbox. Outbound traffic is scanned in real time and blocked when it resembles a secret leaving the network. The runtime itself is written in Rust, which removes whole classes of memory bugs at compile time. Hosted instances boot inside a Trusted Execution Environment on NEAR AI Cloud, encrypted in memory for the life of the instance, or the whole thing can be run locally. In daily use, IronClaw behaves like a chat-driven operator for busywork. The vendor's examples include inbox triage with drafted replies, morning briefings assembled from calendar and email, meeting prep notes, keyword monitoring across Hacker News and Twitter, deployment health checks, task capture into Slack or Linear, and invoice parsing into spreadsheets. Connectors cover Gmail, Google Drive, Sheets, Calendar, Docs, Slides, GitHub, Discord, Telegram, Signal, MCP servers and web search, and the agent can generate new tools or connectors on request for anything with an API. The tool suits technically comfortable individuals and small teams already running or considering a self-hosted agent, especially those who would otherwise park sensitive credentials in a chat context. Compared with plain OpenClaw, IronClaw trades some of OpenClaw's ecosystem breadth for isolation and network control, and it is model-agnostic across Anthropic, OpenAI, Gemini, Mistral, Ollama, OpenRouter and similar providers. Pricing runs through NEAR AI Cloud subscriptions rather than a per-seat license.