Clawcage

Clawcage provides a secure framework for running various computational programs in isolated virtual environments on your Mac. Key features include: • Air-gapped Linux VMs for each program • Full network inspection and policy engine • Credential isolation from host machine • Kill-switch control for enhanced safety • Supports multiple program agents like OpenClaw, PicoClaw, and more This open-source platform ensures that your programs operate within a completely partitioned environment, separate from your main system's network, storage, and credentials. It routes all program traffic through a Man-in-the-Middle proxy, allowing for domain-level allow/block policies and real-time visibility into every HTTP request, tool call, and file modification. Your API keys and sensitive information are never exposed to the guest VM, as they are injected on the host side. Clawcage is designed for developers, security researchers, and privacy-conscious users who need to experiment with or deploy program agents without compromising system integrity. It offers granular control over network access, ephemeral VMs that reset on reboot, and detailed usage analytics. The native terminal and live system metrics provide comprehensive monitoring, making it an ideal choice for safely managing untrusted or experimental software. Protect your system by isolating program agents in a robust, transparent sandbox.