AxonFlow Plugin for OpenClaw: Pre-Run Tool Approval & PII Redaction

✍️ OpenClawRadar📅 Published: June 14, 2026🔗 Source
AxonFlow Plugin for OpenClaw: Pre-Run Tool Approval & PII Redaction
Ad

A new OpenClaw plugin from AxonFlow adds pre-execution tool argument checking, conditional human approval gates, and outbound message PII redaction — all without modifying agent code. The plugin hooks into OpenClaw's lifecycle hooks and supports self-hosted deployment.

What It Does

  • Tool argument validation: Checks arguments before execution — can block or require approval on high-risk calls (even if the tool itself is allowed).
  • Outbound message scanning: Scans messages sent to Telegram, Discord, or Slack for PII or secrets before delivery.
  • Audit trail: Records tool calls and LLM activity for later review.
Ad

Architecture & Limitations

Because AxonFlow uses OpenClaw's lifecycle hooks, no agent code needs to be rewritten. The plugin works with your existing pipeline. It is designed for self-hosted setups: point it at a self-hosted AxonFlow instance to keep the scanning layer inside your infra.

Current limitation: Tool results written into the transcript cannot be scanned because tool_result_persist is sync-only in OpenClaw's current hook model. If that hook becomes async, scanning that path becomes straightforward.

Availability

For devs already running OpenClaw locally, this adds a security boundary without extra infrastructure.

📖 Read the full source: r/clawdbot

Ad

👀 See Also