I created a personal AI gateway that runs on your local machine to provide guardrails for any service that communicates with popular LLMs. You can run this as a proxy for openclaw to inject prompts, filter PII, warn if there are jailbreak attempts. Can also work in a distributed fashion.

It creates a personal access token (PAT) based on your API keys from Anthropic, OpenAI or others, then injects policies. It does not store secrets, but instead stores a reference to environment variables storing those values.

Another benefit - if you execute Claude code or Codex using the run command, you can also record session token usage and the prompt traffic. This allows you to store it with your github project as a shared memory.

Run the binary using 'run' for a context that lasts for the command, or use 'start/stop' to initiate the proxy at localhost:8443. There is a web UI you can access to gather stats as well.