Identity, governance, and audit for every OpenClaw tool call.
When active, every tool call your OpenClaw agent makes — read, write, exec, web_search, and all custom tools — is logged to your ACP workspace. Set policies to control what's allowed. Get full compliance visibility across your team.
ACP doesn't replace your tools or change how you use OpenClaw. It's the governance layer that sits transparently in front of everything.
curl -sf https://agenticcontrolplane.com/install-openclaw.sh | bashThis installs the plugin, opens your browser to sign up / log in, provisions your workspace, and activates the governance hook. You'll land on your audit log dashboard — done.
Or install manually:
openclaw plugins install @agenticcontrolplane/openclawThe plugin registers a before_tool_call hook that fires before every tool execution:
- Hook sends tool name + input to ACP's governance API
- ACP evaluates policies (agent tier, tool rules, rate limits, content scanning)
- Returns
allowordeny - All calls are logged to your workspace's audit trail
The hook fails open on network errors — ACP outages never break your agent.
- Audit logs — every tool call with identity, arguments, timestamps, decisions
- Policy enforcement — allow/deny by agent tier, tool name, argument patterns
- Rate limits & budgets — cap tool calls per minute, per month, or by cost
- Content scanning — detect PII in tool inputs, optionally block or redact
- Team management — multiple members, roles, workspace-level controls
After setup, your dashboard is at:
- Activity:
https://cloud.agenticcontrolplane.com/activity - Policies:
https://cloud.agenticcontrolplane.com/policies - Team:
https://cloud.agenticcontrolplane.com/team
OpenClaw agent IDs map to ACP governance tiers:
| Agent ID | ACP Tier | Default policy |
|---|---|---|
main |
Interactive | Permissive — primary user agent |
Named agents (e.g. ops, dev) |
Subagent | Moderate — spawned for tasks |
# Pause governance (keep credentials)
mv ~/.acp/credentials ~/.acp/credentials.paused
# Resume
mv ~/.acp/credentials.paused ~/.acp/credentials
# Fully remove
rm -rf ~/.acp
openclaw plugins uninstall @agenticcontrolplane/openclaw