SecureClaw: Building a Secure AI Agent Wrapper, Live Dev Workflow

Carapace (a.k.a. SecureClaw) is a security layer for AI agents that prevents credential leakage and unauthorized access. It network-jails the agent in Docker with no DNS, routes all traffic through a MITM proxy with phone-based domain approval, and hides API credentials behind restrictive host-side proxies. The agent can read your email but never sees the API key, and can’t send without you.