clawk CLI
clawk is a virtual-environment CLI that snapshots a Linux machine’s memory and disk so running processes can be resumed later.
- 1,038 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- The agent can edit the mounted repository and push code to a server when Git credentials are available
- Forwarded keys and environment variables are visible to guest processes
- Allowed network destinations can receive task data
Install
- Works in
Manual install
brew install clawkwork/tap/clawkOpen the project directory after installation. Use `clawk --safe` for the first session so the launcher does not add flags that disable approval prompts.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The agent can edit the mounted repository and push code to a server when Git credentials are available
- Forwarded keys and environment variables are visible to guest processes
- Allowed network destinations can receive task data
This is third-party code. Review the repository files before installing.
What it does
clawk is a coding-agent CLI that creates a Linux virtual machine for a coding agent and connects a selected project to it. The agent can install packages, run tests and start application servers inside. On macOS, clawk uses the system virtualization framework and runs without Docker. Project files stay on the host. clawk mounts a worktree in the guest machine. A multi-repository task gets separate branches, and its results can become linked pull requests. The network filter runs outside the guest machine. You specify allowed destinations for each machine; its log shows denied requests. Application ports can be forwarded to the host’s local interface.
Who it is for. Apple Silicon developers keeping agent dependencies in Linux while controlling project and network access.
Good fit when
- An agent installs dependencies and runs code in a separate work system.
- One task spans multiple repositories with separate branches.
- A developer inspects denied requests and adjusts network rules.
- A long session is paused for later resumption.
Not a fit when
- You need Windows or Intel Mac support
- The agent must not receive a writable project even through a mounted worktree
- You need networking disabled immediately after installation, without configuring allowed destinations
Example request
Prepare a clawk machine for this branch and run Codex with command approvals. Show mounted directories and network rules.Limitations
Mac requires macOS 14 or later and Apple Silicon; the Firecracker-based Linux version is experimental. By default clawk disables the agent’s own approvals, so use safe mode for the first session. The agent can edit mounted worktrees and read forwarded secret files; the virtual machine does not prevent changes to that folder. The network allow-list already includes package registries and model providers: task data can reach any allowed address.
How to disable. Finish tasks and use `clawk destroy` for an unwanted machine, then uninstall with `brew uninstall clawk`. Preserve history and settings under `~/.clawk` before cleanup. Worktree changes and published pull requests remain.
FAQ
How do I install clawk?
On a supported Mac, run `brew install clawkwork/tap/clawk`, open the project directory and run `clawk`.
How do I keep command approvals?
Add `--safe`, for example `clawk run codex --safe`. clawk will omit its approval-bypass flags, leaving approval behavior to the agent’s own settings.
How does stopping differ from destroying a machine?
`clawk down` stops it, `clawk attach` returns to the session and `clawk destroy` removes the machine. Repository data and agent history are stored separately on the host.
How do I access an application server in the guest?
Use `clawk forward add my-project 3000`, substituting the machine name and port. The rule exposes the guest port on the host’s local interface.
Can I preserve running processes?
Yes. `clawk snapshot` saves memory and disk for resumption. An ordinary macOS stop rebuilds the guest disk on its next boot.
Is Go required for installation?
Not for prebuilt installation. Source builds require Go 1.26; the code uses Apache-2.0.
Discussion
No questions or reviews yet.
Related
CLI toolsClipboard bridge over SSH: images from your local clipboard reach Claude Code, Codex CLI and Cursor running on a remote server
A native macOS terminal built on Ghostty with vertical tabs and notifications when an agent needs your input
Nehemiah gives agents Firecracker Linux microVMs over MCP: launch, run commands, preview URLs, fork and templates.
A Go CLI: plain-language questions to AWS, GCP, Azure, Cloudflare and Kubernetes, change plans and its own MCP server
Isolated Linux microVMs for agent code: the official Vercel skill on the SDK, network rules and snapshots.
AgentBox runs Claude Code, Codex and Open Code in separate virtual machines on your PC, a self-hosted server or a cloud.
README in short
`clawk.mod` defines the machine image, resources and preparation commands. clawk captures those settings when creating the machine; later file edits do not automatically change a running environment.