OpenClaw asks before it acts.
When OpenClaw wants to send an email, book a flight, or make a payment, you get a notification to approve or deny it. Your passwords are stored separately and never shared with OpenClaw.
OpenClaw → "Send email to [email protected]"
Permission Slip → 🔔 Push notification to you
You → ✅ Approve
Permission Slip → Executes via Gmail API (OpenClaw never gets access to your credentials)
How it works
OpenClaw requests
OpenClaw wants to take an action — book a flight, send an email, charge a card. It asks Permission Slip.
You approve
Get a push notification with a human-readable summary. Approve, deny, or set standing rules.
Permission Slip runs it
Permission Slip carries out the action using your stored passwords. OpenClaw never sees them.
Features
OpenClaw never sees your credentials
Your passwords and account details are stored encrypted. OpenClaw never sees them — Permission Slip uses them on your behalf when you approve an action.
Verified identity
Each OpenClaw instance gets a unique identity, so every request is signed and you can verify it came from your OpenClaw — not someone else's.
Auto-approval rules
Define rules to let specific actions through automatically — scoped by time window, request count, or parameter value. Everything else requires manual approval.
Notifications
Push and email notifications when OpenClaw requests approval.
Audit log
Every request, decision, and execution is recorded with a timestamp and the identity of who approved it.
Self-hostable
Single binary. Deploy on your own infrastructure or use the hosted version.
Supported apps
Each app integration defines what OpenClaw can request. When you approve, Permission Slip carries out the action using your stored login — OpenClaw never sees your password.
Airtable
Bases, records, and automations your agent can propose changes for.
Amadeus
Travel distribution APIs for search, booking, and itinerary workflows.
Asana
Tasks, projects, and updates with approvals before anything ships.
AWS
Cloud APIs across compute, storage, messaging, and the rest of the stack.
Calendly
Scheduling links and availability without exposing calendar details.
Confluence
Spaces and pages — create or update documentation with human sign-off.
Datadog
Metrics, monitors, and incidents so agents can investigate safely.
Discord
Messages and webhooks for team alerts and bot-driven workflows.
DocuSign
Send and track agreements; execution only after approval.
DoorDash
Delivery and marketplace actions scoped to your merchant account.
Dropbox
Files and shared folders with vault-backed credentials.
Expedia
Travel inventory and booking flows through partner APIs.
Figma
Design files, comments, and exports your team controls.
GitHub
Issues, pull requests, and repo automation with PATs in the vault.
Workspace, Cloud, and OAuth-backed Google APIs per your setup.
HubSpot
CRM contacts, deals, and marketing actions with clear guardrails.
Intercom
Conversations and support workflows triggered by agents.
Jira
Issues, sprints, and transitions — ideal for engineering approvals.
Kroger
Retail and loyalty integrations where your keys stay in the vault.
Linear
Issues and projects for product and engineering teams.
Profile and company APIs for recruiting and social workflows.
Make
Scenario-style automation hooks for multi-step agent playbooks.
Meta
Graph and marketing APIs across Meta’s family of apps.
Microsoft
Microsoft 365, Azure, and Graph — scoped to your tenant.
Monday.com
Boards, items, and updates with approval before writes land.
MongoDB
Atlas and data APIs with credentials never shown to the model.
MySQL
Relational queries and migrations behind your stored connection.
Netlify
Deploys, DNS, and serverless hooks for your sites.
Notion
Pages, databases, and comments synced with human review.
PagerDuty
Incidents, on-call, and escalation policies agents can trigger.
Plaid
Financial account linking and data with strict compliance posture.
PostgreSQL
SQL access and admin tasks using secrets from the credential vault.
QuickBooks
Invoices, payments, and accounting reads/writes you approve first.
Redis
Cache and data structure operations against your Redis deployment.
Salesforce
CRM objects, flows, and Apex-adjacent operations on your org.
SendGrid
Transactional and marketing email with templates you control.
Shopify
Storefront, orders, and inventory changes via the Admin API.
Slack
Channels, messages, and slash-style workflows for your workspace.
Square
Payments, catalog, and POS-adjacent APIs for commerce teams.
Stripe
Charges, customers, and billing — always behind explicit approval.
Supabase
Postgres, auth, and edge functions as a managed backend surface.
Trello
Cards, lists, and boards for lightweight project tracking.
Twilio
SMS, voice, and messaging with rate and content rules you set.
Vercel
Deployments, env vars, and project settings for your frontend stack.
Walmart
Marketplace and retail partner APIs scoped to your seller account.
X
Posts, media, and social graph actions via the X API.
Zapier
Zaps and app connections as a bridge for thousands of tools.
Zendesk
Tickets, macros, and help center updates for support teams.
Zoom
Meetings, webinars, and recordings orchestrated with your account.
Logos are trademarks of their respective owners. See the connectors overview for how integrations work and how to add your own when you self-host.
Pricing
Free
- 1000 requests/month
- 3 OpenClaw instances
- All built-in integrations
- Unlimited auto-approve rules
- 5 stored credentials
- 7-day audit log
- Email + Web Push notifications
- Community support
Pay-as-you-go
No monthly fee.
e.g. 10,000 requests/month = $45
- First 1000 requests/month free
- Unlimited OpenClaw instances
- All built-in integrations + build your own
- Unlimited auto-approve rules
- Unlimited stored credentials
- 90-day audit log
- Email + Web Push notifications
- Email support
Open source
Permission Slip is Apache 2.0-licensed. Run it on your own servers, extend it, or contribute back.
View on GitHub