Sato Hub
Agent Framework

IronClaw

NEAR AI's open-source secure agent runtime that runs agent workloads inside hardware TEEs on NEAR AI Cloud.

  • Sato Score68
  • ChainsNear
ActiveUnverifiedActive · 3d ago

IronClaw is an open-source agent framework on Near, with last code activity on 2026-10-18 (Active). Latest release on 2026-09-29. Sato Score 68/100 (how open, active and verifiable it is, not a safety grade), as of 2026-10-22. How the score works →

See how to install IronClaw →

Last commit Oct 18, 2026 · Last release Sep 29, 2026 (ironclaw-v1.4.1) · ★ 12,662

Listed from ironclaw.com on 2026-07-19. Install: not attempted. Evidence →

Next step

Watch IronClaw

One email if what we observe changes — its repo goes quiet or disappears, or the listing is retired. Nothing else.

Check it from your agent

Add Sato Hub’s MCP server (no key), then ask:

https://satohub.ai/api/mcp
Run Sato Hub Preflight on nearai/ironclaw before I use it.
Full setup: Claude Code, Cursor, others →

Your project?

Prove you control the domain and correct this page — description, links, tags, chains. A claim proves control, not verification: it never changes the Sato Score.

Claim this listing →

Overview

IronClaw is NEAR AI's security-focused, open-source agent runtime, positioned as a hardened alternative to OpenClaw. It runs agent workloads inside NEAR AI Cloud's trusted execution environments with an encrypted credential vault, WASM tool sandboxing, and network allowlisting to limit prompt-injection and malicious-skill blast radius; deployment is available through agent.near.ai on paid tiers.

Sato Score

68/100· Medium

How open, active & verifiable — not a safety or returns grade.

Maintenance & liveness
35/35
Code transparency
20/20
Interface verifiability
0/10
Docs & demo
0/10
Listing transparency & provenance
10/15
Independent verification
3/10

Evidence — listed vs checked · what the words mean

Listed from ironclaw.com on 2026-07-19. Install: not attempted.

ClaimValueEvidenceSourceChecked
Chains supportedNearself-reportedironclaw.comas of 2026-10-22
Verification statusUnverified — not independently reviewedself-reportedironclaw.comas of 2026-10-22
Recent activitylast release 2026-09-29 · last commit 2026-10-18observedgithub.com/nearai/ironclaw2026-10-22
Install worksdocumented by the project, not run by Sato Hubnot attempted by Sato Hubself-reportedraw.githubusercontent.comas of 2026-07-20
Website answersanswered (HTTP 200)observedironclaw.com2026-10-22
Daily check record90 of 90 daily checks since 2026-07-24 succeededa success rate of our checks, not uptime; the source is this listing's own historyobserved—2026-10-21
Deploys asNEAR AI Cloud (TEE), Local (macOS/Linux/Windows/WSL)confidence 0.85self-reportedironclaw.comas of 2026-09-17
Works withGmail, Google Drive, Google Sheets, GitHub, Discord, Web Search, Google Calenda…confidence 0.80self-reportedironclaw.comas of 2026-09-17
Sato Score68/100 (Medium)how open, active and verifiable — not a safety or quality gradecomputedsatohub.ai2026-10-22

Self-reported rows are the project’s own words, dated when we recorded them — not a check. Only reproduced and reviewed rows carry a mark. None of these rows is a safety or quality rating.

Install — as documented by the project, not run by us

Runtime: Rust binary (installer script / Homebrew); Node.js not required

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/nearai/ironclaw/releases/latest/download/ironclaw-installer.sh | sh
brew install ironclaw
ironclaw onboard
ironclaw repl (or: ironclaw run --message "hello"; ironclaw status)

You supply: LLM provider API key — set via `ironclaw config set openai.api_key` during onboarding; no raw private key in env

MCP invocation: connects to external MCP servers via a plugin architecture (exact config command not documented in README)

Read from the project’s own docs as of 2026-07-20. What a deploy spec is →

Observed record — 91 daily checks since 2026-07-24

100%of 91 checks since 2026-07-24 succeeded
Currently responding for 91 days
Succeeded
91
Failed
0
Their error
0
Unattributed
0

This is the share of our daily checks that succeeded — not an availability guarantee. A check can fail because the host was down, because our runner timed out, or because the network in between dropped it, and only the first of those is a fact about this project. Failures are split by what we can attribute; anything we cannot attribute is counted, not hidden. 39 of these checks predate 2026-09-01, when the probe counted a bot-block (HTTP 403) as a failure and recorded no reason for any failure. Every one of them passed, so the rate covers them too.

Last 30 days — to 2026-10-22, one point per UTC day

Share of OUR checks that succeeded
100%
7-day rolling; unattributable days are gaps · 30/30 days
Tools listed
fewer than 2 points—
from the server's own tools/list · 0/30 days
Sato Score
68
as snapshotted that day · 29/30 days

A gap is a day we have no attributable observation — never a zero. Thirty points is the whole shape the free layer carries; the daily rows behind it stay in the snapshot series.

Details

Chains
Near
Agent types
Agent runtime / OS
Open source
Yes
Pricing
Starter $5/mo, Basic $20/mo, Pro+ $200/mo (hosted deployment tiers)
Deploys as
NEAR AI Cloud (TEE), Local (macOS/Linux/Windows/WSL)
Works with
Gmail, Google Drive, Google Sheets, GitHub, Discord, Web Search, Google Calendar, Google Docs +6
Last checked
2026-10-22

Marketplace Signals

No marketplace signals recorded for this resource yet.

Verification status reflects evidence reviewed by Sato Hub. Self-reported claims are never presented as verified.

#agent-os#tee#security#sandboxing#near
See something inaccurate or outdated?Submit a correction →

Recent Activity

All news →

Releases and posts from IronClaw, pulled from its GitHub and X.

Releasenearai/ironclaw22d ago

ironclaw 1.4.1 - 2026-09-29

Release Notes Stable promotion of 1.4.1-rc.2 , carrying its Google OAuth activation fix and a Wasmtime security update. Fixed Google extensions (Gmail, Google Calendar) can now be activated on a deployment whose operator supplies the Google OAuth client through the Web UI rather than environment variables. Authorization completed and then activation failed, and the terminal failure revoked the cre

Near
GitHub ↗
Releasenearai/ironclaw28d ago

ironclaw 1.4.1-rc.2 - 2026-09-24

Release Notes Second patch candidate over 1.4.0 , carrying the same fix as RC1. Fixed Google extensions (Gmail, Google Calendar) can now be activated on a deployment whose operator supplies the Google OAuth client through the Web UI rather than environment variables. Authorization completed and then activation failed, and the terminal failure revoked the credential that had just been issued, so ev

Near
GitHub ↗
Releasenearai/ironclawAug 28, 2026

ironclaw 1.4.0 - 2026-08-27

Release Notes Stable promotion of 1.4.0-rc.1 , covering the 81 commits since ironclaw-v1.3.0 and the complete release-candidate scope below. Added Durable notification inbox: runs publish authoritative outcomes and actionable gates to a per-user inbox, surfaced by the WebUI notification center, so approvals and auth prompts survive a missed session. Background subagents: a parent turn can spawn ch

Near
GitHub ↗
Releasenearai/ironclawAug 27, 2026

ironclaw 1.4.0-rc.1 - 2026-08-26

Release Notes First release candidate for 1.4.0, covering the 81 commits since ironclaw-v1.3.0 . Added Durable notification inbox: runs publish authoritative outcomes and actionable gates to a per-user inbox, surfaced by the WebUI notification center, so approvals and auth prompts survive a missed session. Background subagents: a parent turn can spawn children that run and deliver on their own, wi

Near
GitHub ↗
Releasenearai/ironclawAug 24, 2026

ironclaw-v1.3.1-rc.1

chore(release): cut 1.3.1-rc.1

Near
GitHub ↗
Releasenearai/ironclawAug 19, 2026

ironclaw 1.3.0 - 2026-08-19

Release Notes Stable promotion of 1.3.0-rc.2 , including the upgrade and container fixes validated in RC2 and the complete RC1 scope below. Fixed in 1.3.0-rc.2 Upgrades from 1.2 now accept and preserve the released extension activation_state field instead of crash-looping during startup. The canonical Reborn runtime image again supports opt-in, public-key-only worker SSH on port 2222 while running

Near
GitHub ↗

Listing History

Recorded changes to IronClaw's listing — status, verification, Sato Score, and recent releases. Full history is kept in the listing record.

  1. Sep 29, 2026
    New release published
  2. Sep 24, 2026
    New release published
  3. Sep 17, 2026
    Auto-enriched: deployment options, supported integrations
  4. Jul 27, 2026
    16 releases tracked
    Showing the 2 most recent. Full release history is retained in the listing record.
  5. Jul 25, 2026
    Sato Hub began tracking this listing
  6. Jul 20, 2026
    Edited: deploy spec
  7. Jul 19, 2026
    Listed on Sato Hub

Compared with

Appears in

Related Resources

Reference

QuestionsShowHide

Questions people ask about IronClaw

Is IronClaw open source?
Yes. IronClaw is open source under the Apache-2.0 OR MIT license; the repository is https://github.com/nearai/ironclaw. Checked as of 2026-10-22.
Which chains does IronClaw support?
IronClaw lists support for Near as of 2026-10-22.
Is IronClaw still maintained?
The most recent code activity Sato Hub observed was on 2026-10-18 (last commit 2026-10-18, last release 2026-09-29), which Sato Hub labels "Active". Posts on X are not counted as maintenance. Activity is a recency signal, not a quality judgment.
How do I install or run IronClaw?
Rust binary (installer script / Homebrew); Node.js not required. Install: curl --proto '=https' --tlsv1.2 -LsSf https://github.com/nearai/ironclaw/releases/latest/download/ironclaw-installer.sh | sh && brew install ironclaw && ironclaw onboard. Entry: ironclaw repl (or: ironclaw run --message "hello"; ironclaw status). This is taken from the project's own documentation and has not been reproduced by Sato Hub. It runs as an MCP server (connects to external MCP servers via a plugin architecture (exact config command not documented in README)).
Is IronClaw verified on Sato Hub?
No independent verification is on record for IronClaw; its verification status is "Unverified" and its Sato Score is 68 of 100. Self-reported is not verified, and the score is not a safety, quality or returns grade.
Cite this pageShowHide

Cite this page

Sato Hub. "IronClaw — Sato Hub." Sato Hub, updated 2026-10-22, accessed 2026-10-22. https://satohub.ai/resources/ironclaw-near-ai

Data last refreshed 2026-10-22; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.

Join the Sato Hub Briefing

Sign up for the Briefing: the agents, tools, and infrastructure that actually shipped, and why they matter.