Local control, explicit permissions, inspectable automation

SafeClaw is an assistant you can trust on your own machine.

A self-hosted terminal and WhatsApp assistant built around narrow permission profiles, local memory, safer file tools, and setup flows normal people can finish.

Start setup Explore the system

6permission profiles

Localmemory and sessions

Macguided setup flow

readonlysafe

workspace-writeask

network-allowask

shell-askask

messaging-allowask

$ safeclaw doctor

OK workspace is writable

OK memory is local JSON

WARN shell requires explicit opt-in

$ safeclaw run "summarize my setup"

Approval required: write_file

Profile: workspace-write

Allow this action? [y/N]

Why it exists

Local does not automatically mean safe.

SafeClaw treats every powerful action as a capability: reading files, writing files, running shell commands, fetching URLs, using memory, and sending WhatsApp messages each get clear boundaries.

Control

Permission profiles

Start readonly, then opt into workspace writes, network access, shell commands, or messaging when the workflow actually needs them.

Memory

Local sessions

Conversation history and durable memory live on your machine as local files, with search, edit, forget, export, and import commands.

Setup

Installer-first UX

Use a fast shell install, guided terminal install, or double-click Mac setup flow with WhatsApp walkthrough and service mode.

Safety model

Useful automation without vague access.

The assistant can be helpful, but risky operations are deliberately separated so users can see what changed and why.

Profile	Allows	Typical use
`readonly`	List, read, and search workspace files.	Ask questions without giving write access.
`workspace-write`	Read tools plus write, edit, and patch.	Let SafeClaw make local project changes with backups.
`network-allow`	Read tools plus URL fetch and web search.	Research tasks that need outside information.
`shell-ask`	Read tools plus shell commands behind approval.	Run local checks with explicit confirmation.
`shell-allow`	Shell commands without repeated shell prompts.	Trusted local automation after setup.
`messaging-allow`	Read tools plus outbound WhatsApp sends.	Remote assistant workflows with a sender allowlist.

Quick start

Install from one command or use the Mac wizard.

SafeClaw can be tested quickly from Terminal, but the friendlier path walks users through config, model provider, permissions, workspace, and WhatsApp.

curl -fsSL https://raw.githubusercontent.com/amahmood561/SafeClaw/main/install.sh | bash

bash <(curl -fsSL https://raw.githubusercontent.com/amahmood561/SafeClaw/main/guided-install.sh)

safeclaw doctor

Support

Help keep SafeClaw moving.

Support helps cover hosting, domain costs, testing, and continued work on safer local automation.

Buy the team a coffee