OpenClaw · start free · govern when ready

OpenClaw adapter

Start free with a local hard gate—safer defaults, no network, no account. When your team needs real policy decisions, evidence, and environment-aware control, turn on the governed path with the same plugin.

Available free · default ALLOWLIST_ONLY

dexgate provides the adapter and governed runtime materials. It does not provide the OpenClaw application itself. Free mode never requires the SDE.

Current availability

Free adapters: available now on npm

Paid governed workflows: early-access pilot

Coverage last validated: July 30, 2026

Validated free packages: @dexgate/openclaw-trusted-mode@1.0.18, @dexgate/codex-trusted-mode@0.1.16

See the compatibility matrix for coverage, limitations, and current versions.

Two levels of control. One plugin.

Free — ALLOWLIST_ONLY (default)

Local hard gate: only tools you list may run. High-risk tools stay off until you expand the list. Works offline; nothing leaves the machine.

No Decision Middleware, no PDP, no Action Passport. Free install uses local allowlist only; assess may still report separate environment fields and governed configured/connected signals.

Governed — MIDDLEWARE (opt-in)

OpenClaw → Decision Middleware → licensed Dexgate runtime. Real allow / deny / constrain with trace_id, reconstructible evidence, and fail-closed behavior if the decision path is down.

Set toolPolicyMode: "MIDDLEWARE" and point at your decide URL. The Decision Middleware /v1/decide response currently returns decisions and evidence but not the runtime Passport (passport: null). Entitled protected-executor workflows on the licensed Dexgate runtime can issue, verify, and revoke Action Passports separately.

Quick upgrade

Keep the same npm package (@dexgate/openclaw-trusted-mode@1.0.18). Run Decision Middleware (@dexgate/decision-middleware@0.1.1) and change mode when you are ready:

{
  "toolPolicyMode": "MIDDLEWARE",
  "decisionMiddlewareUrl": "http://127.0.0.1:8787/v1/decide",
  "environment": "dev",
  "failClosed": true
}

What you get

Free on npm: @dexgate/openclaw-trusted-mode@1.0.18 — local hard gate for OpenClaw workflows (default allowlist; high-consequence actions blocked).
Claimable free self-check: run dexgate-assess for a packaged representative-action self-check plus best-effort OpenClaw/plugin inspection. Optional claim URL stores the sanitized package self-check only (not environment fields). Install and enable the adapter separately for real free enforcement.
Governed path (opt-in): Decision Middleware + licensed Dexgate runtime for policy decisions, trace_id, and evidence—same plugin. Middleware decide responses do not themselves return a usable Passport.
Paid pilot runtime: licensed Dexgate runtime from the customer console for production-bound control, console workflows, and entitled Action Passport issue/verify/revoke on protected-executor paths. See Pricing.

Operator deployment details, runtime package layout, and credential rotation steps are delivered in the customer console after purchase—not on this public overview.

Start free quickstart View compatibility matrix Start paid pilot

Get started chooser Resources & evaluation materials