Overview

If your organization already uses Swif for device management, you can enable TrustClaw directly from your existing Swif workspace — no separate sign-up required. TrustClaw gives your team visibility into AI agent activity across your managed devices, with real-time event streaming, risk classification, and audit logging.

This guide walks you through enabling and installing TrustClaw within your Swif enterprise environment.

What Is TrustClaw?

TrustClaw is a monitoring and security tool that helps you keep track of AI agent activity on your devices. It provides:

Real-time event streaming — See AI agent actions as they happen across your fleet.
Action risk classification — Every agent action is automatically tagged as Safe, Risky, or Danger based on what it does (e.g., reading a file is safe, executing a command is risky, deleting a file is danger).
Audit logging — Maintain a complete record of AI agent behavior for compliance and review.
Sensitive data redaction — API keys, passwords, and credentials are automatically detected and hidden before they appear in your logs.

What You'll Need

An active Swif enterprise workspace with admin access
A computer running Mac, Windows or Linux.
About 5 minutes

Supported Platforms

Platform	Installer Type
Windows	Executable (run as Administrator)
macOS	Signed/notarized zip archive
Linux x64	Binary with permission setup
Linux arm64	Binary with permission setup

Installing TrustClaw

Step 1: Access TrustClaw from Your Dashboard

Global: app.swif.ai
EU: app.eu.swif.ai

On your Home Dashboard, you'll see an Install TrustClaw card. This card provides a quick entry point to set up TrustClaw for your organization.

Alternatively, you can access TrustClaw through the FTUX Setup Guide, where an optional step — "Monitor OpenClaw Activity with TrustClaw" — is available. This step is optional and does not block the completion of other setup tasks.

Install Recommendations

If your organization has devices running AI tools (OpenClaw, Codex, Claude) that are not monitored by TrustClaw, a recommendation banner will appear on the Enterprise TrustClaw page.

Click Review Devices to see a list of eligible devices.
Use the Send Install Guide action (mail icon) to email OS-specific setup instructions directly to the device owner.

Note: If a device has no assigned owner, you'll be prompted to assign an employee before sending the guide.

Step 2: Download and Install the TrustClaw Agent

Click Setup TrustClaw from the Setup Guide step, or click the Install TrustClaw card on your dashboard. A modal will appear with download options.
Select the appropriate installer for your operating system from the dropdown menu.
Click Download Installer to begin the download.
Run the platform-specific installer and follow the on-screen instructions to install TrustClaw on your device.
- Windows — Run the installer as Administrator.
- macOS — Unzip the archive, set execute permissions (chmod +x), then run the installer with your team/user parameters.
- Linux — Set execute permissions (chmod +x), then run the install command.

Once you click Download Installer, the setup step will be marked as completed for your organization. This state is shared across all users in your org — so other admins and team members will also see the step as done.

Tip: You can close the modal without downloading. The step will remain incomplete until someone in your organization clicks Download Installer.

Step 3: Enable Monitoring Policies

After installation, configure your monitoring policies from the Configuration tab in your device details:

OpenClaw Logging Policy — Enables audit logging for AI agent activity on your devices.
OpenClaw Config Tools Policy — Enables monitoring of configuration and tool usage with a minimal profile.

Managing Logging Policies

TrustClaw uses a Logging Policy to define what AI tool activity is captured. You can create and assign this policy from two locations:

From the Activity Tab

Open a TrustClaw-enrolled device from the device list.
Go to the Activity tab.
If no policy exists, you'll see a "Missing Policy" state.
Click Create/Assign TC Logging Policy.
The tab will refresh to reflect the new policy status.

From the Policies Tab

Open a TrustClaw-enrolled device.
Go to the Policies tab.
If the policy shows Not Configured, click Create Policy.
The status will update to Not Assigned or Enabled depending on your configuration.

Policy states:

Status	Meaning	Action
Not Configured	The policy hasn't been created yet	Click Create Policy
Not Assigned	The policy exists but isn't applied	Click Assign Policy
Enabled	The policy is active	Click Configure Policy to adjust

Step 4: Monitor AI Agent Activity

Once TrustClaw is installed and policies are enabled, you can monitor AI agent activity from the TrustClaw tab in your device details. From here you can:

Stream events in real time — Watch AI agent actions as they happen on managed devices.
Filter activity — Filter events by subsystem (agent, gateway, hooks, browser, etc.), risk level, and time range.
Review risk classifications — Every action is tagged as Safe, Risky, or Danger so you can focus on what matters.
View device details — See encryption status, OS version, and last connected time.

Rolling Out TrustClaw to Your Team

To install TrustClaw on additional devices in your organization:

Navigate to your dashboard and click the Install TrustClaw card or open the Setup Guide.
Use the installer modal to download the agent for each device.
Share the installation guide with team members by entering their email addresses in the modal.

Removing the TrustClaw Agent

If you need to stop monitoring a device without deleting it:

Open the TrustClaw device list.
Find the enrolled device and open its action menu.
Click Remove TrustClaw Agent.
Confirm in the modal (verify the device name/serial number).
The device's Agent Status will change to Inactive.

Deleting a TrustClaw Device

To permanently remove a device from TrustClaw:

Open the TrustClaw device list.
Find the device and open its action menu.
Click Delete Device.
Confirm the deletion.
The device will be removed from the list and will no longer appear in search or filter results.

Not an Enterprise Customer? Sign Up as a Consumer

If you're an individual user and don't have a Swif enterprise workspace, you can still use TrustClaw! Sign up for a free consumer account and get started in minutes.

👉 Getting Started with TrustClaw (Consumer)

The consumer onboarding walks you through creating an account, installing the agent, and enabling monitoring policies — all from a personal dashboard.

Frequently Asked Questions

Q: Which AI tools does TrustClaw monitor?
A: TrustClaw detects and monitors activity from OpenClaw CLI, OpenClaw Desktop App, Codex, and Claude.

Q: Is TrustClaw the same as the Swif MDM agent?
A: No. TrustClaw is a separate product focused on monitoring and securing AI agent activity. It does not replace enterprise MDM features like remote lock, wipe, or device fleet management.

Q: Is the setup step shared across my organization?
A: Yes. Once any user in your organization clicks Download Installer, the setup step is marked as completed for all users in the org.

Q: Can I skip the TrustClaw setup step?
A: Yes. The TrustClaw step in the Setup Guide is optional and does not block other onboarding steps.

Q: How is enterprise onboarding different from consumer?
A: Enterprise users access TrustClaw through their existing Swif workspace — no separate account creation is needed. Consumer users sign up independently at the TrustClaw registration page.

Q: Can I use TrustClaw on BYOD devices?
A: Yes. TrustClaw supports enrollment on both corporate-managed and personal (BYOD) devices through the Consumer portal.

Want me to publish this as a Confluence page, or would you prefer it exported to a different format?

Q: What's the difference between removing the agent and deleting the device?
A: Removing the agent sets the device to Inactive but keeps the device record. Deleting the device removes it entirely from TrustClaw.