あなたのマシンで動作 · 指示したときだけ実行
AIエージェントのための
コントロールプレーン
- すべてのエージェントを見る。
- すべての操作を理解する。
- 起きてはならないことを止める。
あなたのマシンには、プロセス用のSystem Monitorがあります。これはAIエージェントのためのものです。エージェントが動き出した瞬間に自動検出し、すべてのトークンをそれを消費したタスクに紐づけ、暴走したループは予算を食いつぶす前に検知します。
無料でお試しいただけます。カード登録は不要です。 macOS (.dmg) Windows (.exe) Linux (.AppImage)
ターミナルからインストールすることもできます
$ pip install clawmetry && clawmetry
7日間、全ランタイム対応、カード不要。 以降は1ノードあたり月額$9または$19。
“claude_code: 84 tool calls, no file changes, not advancing.” Stop or Pause this agent from the ClawMetry dashboard or device.
Verbatim record, not a mockup. A real detection from the laptop ClawMetry was built on. The steps, the counts and the message are what the daemon wrote to disk.
ClawMetryが存在する理由
すべてのAIエージェントにキルスイッチを。
自律システムが暴走したとき、誰がそれを止めるのか。幼少期に観た2本の映画から独立したコントロールプレーンへ、ClawMetry誕生の物語。
創業者のストーリーを読む →
❯ Supported agent runtimes
Don't see the agent harness you use?
Just share it and we'll add support in ~2 days. Leave your email and we'll ping you the moment it's live, plus 2 months of Pro, on us.
We only use your email to notify you and issue the Pro credit. No lists, no spam.
実測、1インストール、4か月
止まっているエージェントを検知します。
コストのかかるエージェントではなく。
長時間で高コストのセッションこそ最高の成果であることが多く、大きな数字だけを追う仕組みは間違ったものを止めてしまいます。ClawMetryが見るのは、エージェントが何かを生み出しているかどうかです。同じノートPC、4か月、両方のケースを並べて比較しました。
正常動作 · 検知なし
$171.58
The most expensive session of the four months. It ran long and cost real money, and it was writing code the whole time. ClawMetry left it alone, which is the correct answer.
検知 · 停滞中
$175.10
Every one caught for the same reason: tool calls with no file changes, the same failure repeating, or a loop that stopped advancing. Most of them cost less than the session on the left.
検知は警告するだけで、実行はしません。 該当した7つのセッションはすべて最後まで完走しました。フラグは通知であり、トリガーではありません。人が止めない限り、または自分で設定した上限額をエージェントが超えない限り、何も停止されません。
165 sessions and $826.47 of agent spend on one developer’s laptop, April to August 2026. One machine, not a customer aggregate. Yours will look different, which is the reason to read your own.
実際の動作を見る
ひとつの画面で。エージェント全体で起きていることをすべて把握。
できないことも表に載せています
ランタイムごとにできること。
この分野のベンダーは皆ガードレールを謳います。これが空欄も含めた全体像です。
| ランタイム | 観測 | 実行前にブロック | 実行中に停止 | コスト（ドル） |
|---|---|---|---|---|
| OpenClaw, NVIDIA NemoClaw, Goosefree forever | ✓ | via proxy | ✓ | ✓ |
| Claude Codethe only pre-execution tool gate | ✓ | ✓ | ✓ | ✓ |
| Codex, OpenCode, Aider | ✓ | via proxy | ✓ | ✓ |
| Qwen, Pi, Grok Build, DeepSeek Harnessper-terminal CLI processes, resolved by argv and cwd | ✓ | via proxy | ✓ | ✓ |
| GitHub Copilotbilled in vendor credits, not USD | ✓ | – | ✓ | – |
| Kimi CLIno model id on disk | ✓ | – | ✓ | – |
| Hermes, Deep Agents, n8n, Antigravity, QM, Exo |
✓ | via proxy | – | ✓ |
| NanoClaw, PicoClawno model id on disk | ✓ | – | – | – |
| Cursorone IDE process holds every session | ✓ | – | – | – |
Eight of the 30 have adapters but are not yet audited into this table: Gemini CLI, Lovable, Cline, OpenHands, OpenWorker, Devin, Grok Bot and Replit Agent. They are observed; the other three columns are unverified or unavailable, so they are absent rather than guessed.
実行前にブロック
Claude Code gets a real pre-execution gate: a PreToolUse hook parks the call before the tool fires. Everything routed through the ClawMetry proxy gets spend refused with a 429 before tokens are spent.
実行中に停止
A gateway kill for OpenClaw, and SIGSTOP then SIGKILL against the process tree for the CLI runtimes, with a guard so a recycled pid is never the one we hit. macOS and Linux. Windows has no SIGSTOP, so pause and resume do not exist there.
事後監査
Every event carries a SHA-256 chain over its immutable fields, per node, with a verifier command. Approval decisions land in an append-only log. Works on every runtime.
ノートPCにデーモンを入れる前に
マシンへの負荷と、
外に出るデータ。
リファレンス環境1台での実測値。165セッション、19,977イベント。推定値ではありません。
リソース使用量
clawmetry uninstallThe query server binds to loopback only, with a one-time 32-hex token and a discovery file at mode 0600. It is why the dashboard can read the store without holding the writer lock.
外に出るデータの内訳
Never. These stay in the local file.
The key is generated on the node and never leaves it. Decryption happens in your browser. Compelled by a subpoena, we hand over a blob we cannot open, plus the node id, the version and some counters.
ローカルファイルは平文です
Everything is sealed in transit and at rest in our cloud, and it is not encrypted on your own disk. The DuckDB file carries default user permissions. Anything running as your user can read it.
マスキングは失敗時に素通しになります
Secrets are fingerprinted at ingest by default, before disk. It is pattern-based, and on an internal error it keeps the original value rather than dropping data. It is tuned for credential shapes, not customer PII.
接続済みノードはリモートから停止できます
If you turn cloud on, Stop, Pause and Resume are reachable from the dashboard and the desk device for any node on the account. That is the feature. Run local-only and no such channel exists.
Starred by the people building AI
Engineers and founders from OpenAI, Google, PostHog and more have starred ClawMetry on GitHub. One of them helped build it.
3つの実行場所
Cloudはあくまで選択肢。
最初からそうでした。
デーモンは自分のディスク上のDuckDBファイルに集計します。その先でダッシュボードをどこに置くかはあなた次第で、どれを選んでも料金は同じです。
01 · Local only
外には一切出ません
Included in the MIT core
The dashboard reads the local file through a loopback query server. There is no account, no sync and no destination to point at.
- Network destinations: none
- Inbound ports opened: 0
- Free forever for OpenClaw, NVIDIA NemoClaw and Goose
02 · Our cloud
送信前に封をします
$19 per node, per month
The snapshot is encrypted on the node with a key generated there and never sent. Your browser decrypts it. Subpoena us and we hand over a blob we cannot open.
- AES-256-GCM, key held on the node
- Decryption happens client side
- Stop, Pause and Resume reach any node on the account
03 · Self-hosted
自社インフラ、シングルテナント
$190 per node, per year
One container serves the UI and the ingest API on your own network, with node tokens and admin auth. Licences verify offline against an embedded Ed25519 key you can fingerprint and compare.
- No calls to clawmetry.com beyond an off-by-default version ping
- Same feature set, same runtimes, same rate
- Two months free against the monthly price
料金はデプロイ形態によって変わりません。 セルフホストも1ノードあたり月額$19、または年額$190で、クラウドプランとまったく同じです。対価はソフトウェアに対するものであり、当社のサーバーに対するものではないからです。変わるのは、データを保持するのは誰か、コンテナを運用するのは誰かという点だけです。セルフホスト用キーを購入、商談は不要です。
料金は一律、指標はひとつ
誰かに問い合わせる前に
金額を自分で計算できます。
7 days of Pro, every runtime, no card
$9per node, per month
Starter, billed monthly. Annual is $90 per node, two months free. Starter is the observability tier: fewer features than Pro, not fewer runtimes. Free forever for OpenClaw, NVIDIA NemoClaw and Goose.
Start the trial- Every runtime, including Claude Code, Codex and Cursor.
- Cloud or fully self-hosted, at the same rate. Unlimited chat channels.
- Cost and token split, budget limits, anomaly detection, approval queue.
- Cancel any time in Stripe. No contract, no seat count.
Not in Starter: the pre-execution tool gate, waste flags, per-run compare, error triage, Self-Evolve findings, the eval suite and OTel export. Those are Pro.
$19per node, per month
Pro, billed monthly. Annual is $190 per node, two months free. Pro is the governance tier: it adds gates, evals and waste analysis on top of Starter. Free forever for OpenClaw, NVIDIA NemoClaw and Goose.
Start the trial- Everything in Starter, and the same 30 runtimes.
- Tool policy with a pre-execution gate, and an eval suite that scores runs.
- Waste flags, per-run compare, error triage, cost optimizer, OTel export.
- Cancel any time in Stripe. No contract, no seat count.
The 7-day trial is Pro, whichever plan you land on afterwards. No card, and nothing is charged if you stop.
Already decided? Buy now and install after. Your key is on the next screen. Compare Starter and Pro.
あなたの場合の料金
数えるのはデーモンを動かすマシンの台数であり、ダッシュボードを見る人数ではありません。
$551 $6,612 per year · 29 nodes
A node is a machine running the daemon and reporting a heartbeat. The unit of attribution is a machine, so spend maps to a laptop, not to a team. The same number applies self-hosted, so you can price a deployment on your own infrastructure off this figure without asking us. Ephemeral CI runners are not yet specified; the fleet brief carries the rule in writing before you sign.
リスクを背負う人たちへ
全社規模での運用。
エンジニアたちは前四半期にClaude Code、Cursor、Codex、Copilotを導入しました。調達を通した人は誰もおらず、そのすべてが自社のリポジトリとキーにアクセスできます。
エージェント側へのインストールは不要
Each runtime is read from the session store it already writes. No SDK, no wrapper, no second agent on the laptop, nothing a developer has to opt into or can forget.
A control layer that governs only its own SDK is blind to everything a developer runs outside it.SSO の答えはセルフホスト
SSO ships: SAML and OIDC through WorkOS, with the pinned domain gating provisioning. Roles are owner and member, and nothing finer. If your rollout needs more than that, it is not built yet. Single-tenant self-hosted runs air-gapped: one container serves the UI and the ingest API, with node tokens and admin auth, and licences verify offline against an embedded Ed25519 key you can fingerprint and compare.
A self-hosted deployment makes no calls to clawmetry.com beyond an off-by-default version ping.既存のネットワークにそのまま適合
SIEM and syslog export in CEF or JSON over TCP, UDP or TLS, emitted daemon-side because the cloud never holds plaintext. Corporate TLS interception is supported, with a doctor command that walks DNS, TCP, proxy and TLS in order.
In: your collector feeds us over OTLP. Out: full-event SIEM export. Not yet: correlated spans carrying your trace ids.フリート展開は現時点では手動
There is no Helm chart, no Terraform provider and no Intune or Jamf package. If a daemon on developer laptops is a non-starter, run the enforcement proxy centrally and govern spend without touching an endpoint.
Auto-update ships on by default. CLAWMETRY_AUTO_UPDATE=0 turns it off. No staged rollout, no version pinning.よく寄せられる質問。
実行前にブロックできますか、それとも実行後に通知するだけですか？
Both, and the split is in the table above. Claude Code gets a genuine pre-execution tool gate, and anything routed through the proxy gets spend refused with a 429 before tokens are spent. For the other runtimes it is detection plus process control: we can see it and end it, we cannot veto the call it already made.
Is ClawMetry only for OpenClaw?
No. It launched in February 2026 as an OpenClaw-only dashboard and many directory listings still describe it that way, but it now reads 30 runtimes: OpenClaw, Claude Code, Cursor, GitHub Copilot, Codex, Gemini CLI, Lovable, Cline, OpenHands, OpenWorker, OpenCode, NVIDIA NemoClaw, Aider, Goose, n8n, Qwen, Devin, Antigravity, Grok Build, Grok Bot, Hermes, Pi, Deep Agents, Kimi CLI, DeepSeek Harness, Exo, NanoClaw, PicoClaw, QM and Replit Agent. It auto-detects whichever of those are on the machine, so a mixed fleet lands in one dashboard. OpenClaw, NVIDIA NemoClaw and Goose are free forever in the open source package; the rest are on the paid tier.
エージェントを自動的に停止しますか？
No. Detectors write a warning and stop there. On the reference install every flagged session ran to completion. A run ends only when a person ends it, or when you have set a spend cap yourself and an agent crosses it.
エージェントの動作に影響しますか？
Read-only by default. Two things you opt into change that: the proxy, a separate process you point one env var at, and approval gates, where ClawMetry adds a gate to the runtime’s own permission system and removes only what it added.
トライアル終了後はどうなりますか？
The paid runtimes stop being read and the free three keep working. Entitlements are a commercial boundary, not a technical one. We do not hard-block a running fleet on a licence check.
運営元はどこですか、開発が終了した場合はどうなりますか？
One person, plus contributors. The core is MIT and runs on your machine, so if we vanish your install keeps working and your data stays in a DuckDB file you own. The paid layer is a separate closed package. Ask for the fleet brief and it names the legal entity, the largest deployment we run today, and the reference count, with no rounding.
セキュリティ審査を通過できますか？
For a pilot on non-production machines, usually: MIT source you can audit, local-first storage, single-tenant self-hosted and offline licence verification are the arguments that work. For a regulated production rollout, read the gap list first. SSO is there; RBAC beyond owner and member, SOC 2, CAIQ and a third-party pen test are not, and that is a two-to-four quarter conversation.