Recursant, the open source AI control plane, now supports OpenClaw

Recursant governance plugin for OpenClaw — registers the instance with a Recursant registry and routes tool/LLM/message traffic through Recursant interceptors.

ClawScanReview

Agentic behavior and permission review.

Static analysisPass

Pattern checks against bundled files.

VirusTotalPass

Multi-engine malware detections and file reputation.

Install

openclaw plugins install clawhub:openclaw-recursant

openclaw-recursant

Recursant governance plugin for OpenClaw.

Registers the OpenClaw instance with a Recursant registry, then governs the instance's tool calls, LLM calls, and chat messages via in-process interceptors: authorisation, PII redaction, rate limiting, and audit.

This is v0 — cooperative governance only. Provider replacement and host-level enforcement are not yet implemented.

Install

Once published:

npm install -g openclaw-recursant

OpenClaw will pick it up via plugin discovery.

Configure

Plugin config (via OpenClaw plugin config, env, or ~/.recursant/openclaw.json):

{ "registryUrl": "https://recursant.example.com", "enrollmentToken": "", "tenantId": "default" }

Override the config-file path with RECURSANT_OPENCLAW_CONFIG=/path/to.json.

Build / test

pnpm install pnpm build pnpm test

What it intercepts

OpenClaw hookBehaviour

before_tool_callAuthz + PII + rate-limit; block / rewrite params

llm_inputPII + rate-limit on prompts; audit

message_receivedAudit inbound chat

message_sendingPII redaction on outbound chat

gateway_start/gateway_stopEnrol, heartbeat, deregister

How it talks to Recursant

PathPurpose

POST /v1/openclaw/instances/enrollExchange enrolment token for JWT

POST /v1/openclaw/instances/heartbeatLiveness + plugin version

GET /v1/openclaw/instances/policyFetch current policy

POST /v1/openclaw/instances/auditPush audit batches

POST /v1/openclaw/instances/deregisterGraceful shutdown

See openclaw-design.md at the repo root for the full design and the v1 roadmap.