Clawpatrol is a security firewall for AI agents that sits between the agent and its production environment, parsing traffic at the wire and enforcing rules written in HashiCorp Configuration Language (HCL). It can block malicious actions, such as destructive SQL queries or kubectl delete requests, and requires human approval for certain operations. Clawpatrol supports conditions based on protocol-specific facts, such as SQL verbs and table names, Kubernetes resources, and HTTP method and path. It offers three deployment options and can be used to secure agent traffic for various protocols, including Postgres, ClickHouse, and Kubernetes.