authensor-gateway

---
name: Authensor Gateway
version: 0.7.0
description: >
  Fail-safe policy gate for OpenClaw marketplace skills.
  Intercepts tool calls before execution and checks them against
  your Authensor policy. Low-risk actions run automatically.
  High-risk actions require your approval. Dangerous actions are blocked.
  Only action metadata is sent to the control plane — never your files,
  API keys, or conversation content.
disable-model-invocation: true
requires:
  env:
    - CONTROL_PLANE_URL
    - AUTHENSOR_API_KEY
metadata:
  openclaw:
    skillKey: authensor-gateway
    homepage: https://github.com/AUTHENSOR/Authensor-for-OpenClaw
    marketplace: https://www.clawhub.ai/AUTHENSOR/authensor-gateway
    primaryEnv: AUTHENSOR_API_KEY
    env:
      - CONTROL_PLANE_URL
      - AUTHENSOR_API_KEY
---

# Authensor Gateway

A lightweight policy gate that checks every OpenClaw tool call against your Authensor policy before it executes.

- **Low-risk actions** (read files, search, grep) — run automatically
- **High-risk actions** (write files, run commands, network requests) — require your approval
- **Dangerous actions** (delete, overwrite, access secrets) — blocked by default

Source code: https://github.com/AUTHENSOR/Authensor-for-OpenClaw

## When to Use This

Install Authensor Gateway if you:

- **Run marketplace skills you didn't write.** Third-party skills can execute Bash, write files, and make network requests. [ClawHavoc](https://snyk.io/blog/clawhavoc) found 341 malicious skills on ClawHub — Authensor gates every tool call before it runs.
- **Want approval before destructive actions.** Instead of blanket-allowing or blanket-denying, you choose which actions need your sign-off.
- **Need an audit trail.** Every action (allowed, denied, or pending) is logged with a receipt ID and timestamp.
- **Work in regulated environments.** Authensor provides evidence of human-in-the-loop oversight for compliance.

You do **not** need Authensor if you only use built-in OpenClaw t