OpenClaw asks before it acts.

When OpenClaw wants to send an email, book a flight, or make a payment, you get a notification to approve or deny it. Your passwords are stored separately and never shared with OpenClaw.

OpenClaw → "Send email to [email protected]"

Permission Slip → 🔔 Push notification to you

You → ✅ Approve

Permission Slip → Executes via Gmail API (OpenClaw never gets access to your credentials)

How it works

1

OpenClaw requests

OpenClaw wants to take an action — book a flight, send an email, charge a card. It asks Permission Slip.

2

You approve

Get a push notification with a human-readable summary. Approve, deny, or set standing rules.

3

Permission Slip runs it

Permission Slip carries out the action using your stored passwords. OpenClaw never sees them.

Features

OpenClaw never sees your credentials

Your passwords and account details are stored encrypted. OpenClaw never sees them — Permission Slip uses them on your behalf when you approve an action.

Verified identity

Each OpenClaw instance gets a unique identity, so every request is signed and you can verify it came from your OpenClaw — not someone else's.

Auto-approval rules

Define rules to let specific actions through automatically — scoped by time window, request count, or parameter value. Everything else requires manual approval.

Notifications

Push and email notifications when OpenClaw requests approval.

Audit log

Every request, decision, and execution is recorded with a timestamp and the identity of who approved it.

Self-hostable

Single binary. Deploy on your own infrastructure or use the hosted version.

Supported apps

Each app integration defines what OpenClaw can request. When you approve, Permission Slip carries out the action using your stored login — OpenClaw never sees your password.

Airtable logo

Airtable

Bases, records, and automations your agent can propose changes for.

Amadeus logo

Amadeus

Travel distribution APIs for search, booking, and itinerary workflows.

Asana logo

Asana

Tasks, projects, and updates with approvals before anything ships.

AWS logo

AWS

Cloud APIs across compute, storage, messaging, and the rest of the stack.

Calendly logo

Calendly

Scheduling links and availability without exposing calendar details.

Confluence logo

Confluence

Spaces and pages — create or update documentation with human sign-off.

Datadog logo

Datadog

Metrics, monitors, and incidents so agents can investigate safely.

Discord logo

Discord

Messages and webhooks for team alerts and bot-driven workflows.

DocuSign logo

DocuSign

Send and track agreements; execution only after approval.

DoorDash logo

DoorDash

Delivery and marketplace actions scoped to your merchant account.

Dropbox logo

Dropbox

Files and shared folders with vault-backed credentials.

Expedia logo

Expedia

Travel inventory and booking flows through partner APIs.

Figma logo

Figma

Design files, comments, and exports your team controls.

GitHub logo

GitHub

Issues, pull requests, and repo automation with PATs in the vault.

Google logo

Google

Workspace, Cloud, and OAuth-backed Google APIs per your setup.

HubSpot logo

HubSpot

CRM contacts, deals, and marketing actions with clear guardrails.

Intercom logo

Intercom

Conversations and support workflows triggered by agents.

Jira logo

Jira

Issues, sprints, and transitions — ideal for engineering approvals.

Kroger logo

Kroger

Retail and loyalty integrations where your keys stay in the vault.

Linear logo

Linear

Issues and projects for product and engineering teams.

LinkedIn logo

LinkedIn

Profile and company APIs for recruiting and social workflows.

Make logo

Make

Scenario-style automation hooks for multi-step agent playbooks.

Meta logo

Meta

Graph and marketing APIs across Meta’s family of apps.

Microsoft logo

Microsoft

Microsoft 365, Azure, and Graph — scoped to your tenant.

Monday.com logo

Monday.com

Boards, items, and updates with approval before writes land.

MongoDB logo

MongoDB

Atlas and data APIs with credentials never shown to the model.

MySQL logo

MySQL

Relational queries and migrations behind your stored connection.

Netlify logo

Netlify

Deploys, DNS, and serverless hooks for your sites.

Notion logo

Notion

Pages, databases, and comments synced with human review.

PagerDuty logo

PagerDuty

Incidents, on-call, and escalation policies agents can trigger.

Plaid logo

Plaid

Financial account linking and data with strict compliance posture.

PostgreSQL logo

PostgreSQL

SQL access and admin tasks using secrets from the credential vault.

QuickBooks logo

QuickBooks

Invoices, payments, and accounting reads/writes you approve first.

Redis logo

Redis

Cache and data structure operations against your Redis deployment.

Salesforce logo

Salesforce

CRM objects, flows, and Apex-adjacent operations on your org.

SendGrid logo

SendGrid

Transactional and marketing email with templates you control.

Shopify logo

Shopify

Storefront, orders, and inventory changes via the Admin API.

Slack logo

Slack

Channels, messages, and slash-style workflows for your workspace.

Square logo

Square

Payments, catalog, and POS-adjacent APIs for commerce teams.

Stripe logo

Stripe

Charges, customers, and billing — always behind explicit approval.

Supabase logo

Supabase

Postgres, auth, and edge functions as a managed backend surface.

Trello logo

Trello

Cards, lists, and boards for lightweight project tracking.

Twilio logo

Twilio

SMS, voice, and messaging with rate and content rules you set.

Vercel logo

Vercel

Deployments, env vars, and project settings for your frontend stack.

Walmart logo

Walmart

Marketplace and retail partner APIs scoped to your seller account.

X logo

X

Posts, media, and social graph actions via the X API.

Zapier logo

Zapier

Zaps and app connections as a bridge for thousands of tools.

Zendesk logo

Zendesk

Tickets, macros, and help center updates for support teams.

Zoom logo

Zoom

Meetings, webinars, and recordings orchestrated with your account.

Logos are trademarks of their respective owners. See the connectors overview for how integrations work and how to add your own when you self-host.

Pricing

Free

$0
  • 1000 requests/month
  • 3 OpenClaw instances
  • All built-in integrations
  • Unlimited auto-approve rules
  • 5 stored credentials
  • 7-day audit log
  • Email + Web Push notifications
  • Community support
Get Started Free
Popular

Pay-as-you-go

$0.005/ request

No monthly fee.

e.g. 10,000 requests/month = $45

  • First 1000 requests/month free
  • Unlimited OpenClaw instances
  • All built-in integrations + build your own
  • Unlimited auto-approve rules
  • Unlimited stored credentials
  • 90-day audit log
  • Email + Web Push notifications
  • Email support
Get Started Free

Open source

Permission Slip is Apache 2.0-licensed. Run it on your own servers, extend it, or contribute back.

View on GitHub