Local control, explicit permissions, inspectable automation

SafeClaw is an assistant you can trust on your own machine.

SafeClaw, sometimes written Safe Claw, is a self-hosted terminal and WhatsApp assistant built around narrow permission profiles, local memory, safer file tools, and setup flows normal people can finish.

Buy the Mac app Install from GitHub

6permission profiles

Localmemory and sessions

Macguided setup flow

readonlysafe

workspace-writeask

network-allowask

shell-askask

messaging-allowask

$ safeclaw doctor

OK workspace is writable

OK memory is local JSON

WARN shell requires explicit opt-in

$ safeclaw run "summarize my setup"

Approval required: write_file

Profile: workspace-write

Allow this action? [y/N]

Mac app

Buy SafeClaw for Mac.

The Gumroad release is the simplest way to get the packaged Mac app without starting from GitHub or the terminal.

Get SafeClaw on Gumroad See the Mac app

Why it exists

Local does not automatically mean safe.

SafeClaw treats every powerful action as a capability: reading files, writing files, running shell commands, fetching URLs, using memory, and sending WhatsApp messages each get clear boundaries.

Control

Permission profiles

Start readonly, then opt into workspace writes, network access, shell commands, or messaging when the workflow actually needs them.

Memory

Local sessions

Conversation history and durable memory live on your machine as local files, with search, edit, forget, export, and import commands.

Setup

Installer-first UX

Use a fast shell install, guided terminal install, or double-click Mac setup flow with WhatsApp walkthrough and service mode.

Safety model

Useful automation without vague access.

The assistant can be helpful, but risky operations are deliberately separated so users can see what changed and why.

Profile	Allows	Typical use
`readonly`	List, read, and search workspace files.	Ask questions without giving write access.
`workspace-write`	Read tools plus write, edit, and patch.	Let SafeClaw make local project changes with backups.
`network-allow`	Read tools plus URL fetch and web search.	Research tasks that need outside information.
`shell-ask`	Read tools plus shell commands behind approval.	Run local checks with explicit confirmation.
`shell-allow`	Shell commands without repeated shell prompts.	Trusted local automation after setup.
`messaging-allow`	Read tools plus outbound WhatsApp sends.	Remote assistant workflows with a sender allowlist.

Quick start

Install from one command or use the Mac wizard.

SafeClaw can be tested quickly from Terminal, but the friendlier path walks users through config, model provider, permissions, workspace, and WhatsApp.

curl -fsSL https://raw.githubusercontent.com/amahmood561/SafeClaw/main/install.sh | bash

bash <(curl -fsSL https://raw.githubusercontent.com/amahmood561/SafeClaw/main/guided-install.sh)

safeclaw doctor

Community

Help shape SafeClaw on GitHub.

Share setup notes, roadmap ideas, safety discussions, WhatsApp workflows, and rough-edge discoveries through GitHub issues and pull requests.

Open GitHub

Support

Support the project.

If you already have the app or just want to back the work, support helps cover hosting, testing, installers, phone setup, and safer local automation.

Buy the team a coffee