Synopsis
Description
security manages profClaw’s security enforcement layer. Three policy levels control how strictly tool execution is governed. In standard and strict modes, certain tool calls require explicit approval before they run. This command lets you view the current policy, change it, review the audit log, and approve or deny pending requests.
Subcommands
Security Policy Levels
security status
boolean
Output as JSON with policy level, pending approval count, and last audit time.
security set-policy <level>
string
required
One of
permissive, standard, or strict.boolean
Output the updated status as JSON.
security audit
string
default:"20"
Maximum number of entries to show.
boolean
Show only entries with
pending result status (awaiting approval).boolean
Output as JSON array.
security approve <id> / security deny <id>
string
required
Audit entry ID to approve or deny.
string
Reason for denial (only for
deny subcommand).boolean
Output result as JSON.
Examples
Related
profclaw audit- Detailed audit log viewerprofclaw auth- User and authentication managementprofclaw device- Device pairing and trust- Security Guide - Security architecture and configuration