proxy

What proxy does on OpenClaw

AI agents invoke proxy to trigger actions in OpenClaw. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why proxy is rated High

This tool executes a network debugging proxy that captures and inspects traffic. While not immediately destructive, it performs external operations (launching a proxy service, capturing traffic) whose effects and scope depend on how the proxy is configured and what network it monitors. This is categorized as Execute rather than Read because it actively runs a service, not merely retrieves pre-existing data.

From the tool's definition Tool explicitly states it 'Run[s] the OpenClaw debug proxy' which invokes and executes a proxy service. The ability to inspect captured traffic indicates execution of a network debugging tool that can intercept and observe system communications.

The rule that runs proxy safely

PolicyLayer is an MCP gateway: it sits between your AI agents and OpenClaw, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For proxy, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "proxy": {
      "limits": [
        {
          "counter": "proxy_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about proxy