Skip to main content

OpenClaw Integration

Protect your OpenClaw personal AI assistant from prompt injection, jailbreak attempts, and data exfiltration attacks.

What is OpenClaw?

OpenClaw is a self-hosted personal AI assistant that connects to 13+ messaging channels including WhatsApp, Telegram, Slack, Discord, Signal, iMessage, and Teams. RAXE adds a security layer that scans all incoming messages before they reach the AI.
The recommended way to integrate RAXE with OpenClaw is via MCPorter, which gives your AI agent access to RAXE as a tool. The agent can then scan messages on-demand.

Architecture


MCPorter Tools Reference

MCPorter exposes three RAXE tools:

How It Works

The RAXE MCP server runs locally and never transmits your message content.

Configuration

Enable Blocking Mode

By default, RAXE logs threats but allows messages through. To block threats:

Troubleshooting

Verify your mcporter configuration:
If the MCP server works but mcporter doesn’t see it, check ./config/mcporter.json exists and has the correct format.
Ensure RAXE is installed and in your PATH:
If using a virtual environment, activate it before running OpenClaw commands.

Performance

Privacy

  • All scanning happens locally
  • Only prompt hashes are logged (not content)
  • No cloud API calls required
  • Matched patterns are never exposed

Next Steps

Detection Rules

Learn about RAXE’s 515+ detection rules

Custom Rules

Add your own detection patterns

This API is not yet available. Use the MCPorter approach above for current integration.
OpenClaw’s hooks system currently supports command events (command:new, command:reset, command:stop), agent events (agent:bootstrap), and gateway events (gateway:startup).Message events (message:inbound, message:sent, message:received) are listed as “planned” in OpenClaw’s documentation but are not yet implemented (confirmed February 2026).Once message hooks are available, RAXE will support automatic scanning via:
This will install a native hook that triggers on every inbound message without requiring MCPorter or agent-level configuration.

CLI Reference