# Clawvisor

**Canonical:** https://apis.io/providers/clawvisor/  
**Website:** https://clawvisor.com  
**APIs profiled:** 5

Clawvisor is the authorization layer for AI agents — a Y Combinator (Spring 2026) security gateway that sits between an AI agent and the tools it acts on (Gmail, Calendar, Drive, Contacts, GitHub, Slack, Notion, Linear, Stripe, Twilio, iMessage). Agents never hold downstream credentials: they declare a task describing their purpose and the service/action pairs they need, the user approves that scope once, and Clawvisor enforces restrictions, task scope, and LLM intent verification on every request before injecting vaulted, short-lived credentials, executing through an adapter, and writing a full audit trail. It ships open-core as a self-hostable Go daemon with a CLI, web dashboard, TUI, and an OAuth 2.1 MCP server, plus an official Claude Code plugin. Agents integrate over a plain HTTP gateway or MCP — no SDK or agent-code changes required.

## Kin Score — 53.4 / 100 (developing)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 53.4).

| Facet | Score |
|---|---|
| Discoverability | 92.6 |
| Contract Quality | 66.7 |
| Governance | 20.8 |
| Operational Transparency | 13.2 |
| Developer Ergonomics | 71.7 |
| Commercial Clarity | 44.7 |

## Agent readiness — 55.4 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| MCP Server | yes |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | yes |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (5)

- **Clawvisor Auth API** — Local magic-link session exchange.
- **Clawvisor Catalog API** — Discover the services and actions available to the agent.
- **Clawvisor Gateway API** — Execute authorized actions on downstream services through the gateway.
- **Clawvisor Tasks API** — Declare, approve, expand, and complete task scopes.
- **Clawvisor Tokens API** — Mint and revoke scoped agent tokens (admin-gated).

## MCP servers (1)

- **clawvisor-mcp.yml**

## Agentic access (1)

- **Clawvisor Agentic Access** — 12 operations · 8 acting · 1 human-in-the-loop

## Security (2)

- **Clawvisor Authentication** — apiKey/http · 2 schemes
- **Clawvisor Domain Security** — TLSv1.3 · HSTS · DMARC

## Tags

AI Agents, Authorization, Security, Identity, Access Control, MCP, Credential Management, Governance, Developer Tools

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/clawvisor/). Scores are computed from the provider's own public artifacts under a published rubric.