在你的机器上运行 · 只在你许可时行动
AI 智能体的
控制平面
- 看见每一个智能体。
- 读懂每一次操作。
- 叫停不该发生的事。
ClawMetry 直接读取团队正在使用的 26 种智能体运行时，从 Claude Code、Cursor 到 Codex 和 OpenClaw，数据全部来自它们本就写入的文件。无需给智能体加任何东西。
$ pip install clawmetry && clawmetry
7 天试用，覆盖全部运行时，无需信用卡。 之后每节点每月 $9 或 $19。
“claude_code: 84 tool calls, no file changes, not advancing.” Stop or Pause this agent from the ClawMetry dashboard or device.
Verbatim record, not a mockup. A real detection from the laptop ClawMetry was built on. The steps, the counts and the message are what the daemon wrote to disk.
❯ Supported agent runtimes
Don't see the agent harness you use?
Just share it and we'll add support in ~2 days. Leave your email and we'll ping you the moment it's live, plus 2 months of Pro, on us.
We only use your email to notify you and issue the Pro credit. No lists, no spam.
实测数据，单次安装，四个月
它标记的是停滞的智能体，
不是花钱的智能体。
一次漫长而昂贵的会话，往往正是你最出色的工作，所以只盯着大数字的工具会误伤真正有价值的部分。ClawMetry 看的是智能体有没有产出。同一台笔记本，四个月，两种情况并排对比。
正常工作 · 从未被标记
$171.58
The most expensive session of the four months. It ran long and cost real money, and it was writing code the whole time. ClawMetry left it alone, which is the correct answer.
已标记 · 停滞中
$175.10
Every one caught for the same reason: tool calls with no file changes, the same failure repeating, or a loop that stopped advancing. Most of them cost less than the session on the left.
检测器只提醒，不行动。那七次会话全部跑完了。标记是一条通知，不是一次触发。除非有人动手叫停，或者你自己设了支出上限而智能体越了线，否则什么都不会被中止。
165 sessions and $826.47 of agent spend on one developer’s laptop, April to August 2026. One machine, not a customer aggregate. Yours will look different, which is the reason to read your own.
看看实际效果
一块屏幕，尽览所有代理的动态。
缺口就写在表里
每种运行时，我们能做到什么。
这个赛道的每家厂商都在说护栏。这里是完整矩阵，包括那些空白格。
| 运行时 | 观测 | 执行前拦截 | 运行中终止 | 成本（美元） |
|---|---|---|---|---|
| OpenClaw, NVIDIA NemoClaw, Goosefree forever | ✓ | via proxy | ✓ | ✓ |
| Claude Codethe only pre-execution tool gate | ✓ | ✓ | ✓ | ✓ |
| Codex, OpenCode, Aider | ✓ | via proxy | ✓ | ✓ |
| Cursorone IDE process holds every session | ✓ | – | – | – |
| GitHub Copilotbilled in vendor credits, not USD | ✓ | – | – | – |
| NanoClaw, PicoClaw, Kimi CLIno model id on disk | ✓ | – | – | – |
| Qwen, Hermes, Pi, Deep Agents, n8n, Antigravity, Grok, QM, DeepSeek Harness, Exo |
✓ | via proxy | – | ✓ |
执行前拦截
Claude Code gets a real pre-execution gate: a PreToolUse hook parks the call before the tool fires. Everything routed through the ClawMetry proxy gets spend refused with a 429 before tokens are spent.
运行中终止
A gateway kill for OpenClaw, and SIGSTOP then SIGKILL against the process tree for the CLI runtimes, with a guard so a recycled pid is never the one we hit. macOS and Linux. Windows has no SIGSTOP, so pause and resume do not exist there.
事后审计
Every event carries a SHA-256 chain over its immutable fields, per node, with a verifier command. Approval decisions land in an append-only log. Works on every runtime.
在你把守护进程装进笔记本之前
它对这台机器做了什么，
又有什么会离开它。
在同一台笔记本上实测，不是估算。
资源占用
clawmetry uninstallThe query server binds to loopback only, with a one-time 32-hex token and a discovery file at mode 0600. It is why the dashboard can read the store without holding the writer lock.
究竟有什么会离开
Never. These stay in the local file.
The key is generated on the node and never leaves it. Decryption happens in your browser. Compelled by a subpoena, we hand over a blob we cannot open, plus the node id, the version and some counters.
本地文件是明文
Everything is sealed in transit and at rest in our cloud, and it is not encrypted on your own disk. The DuckDB file carries default user permissions. Anything running as your user can read it.
脱敏失败时不阻断
Secrets are fingerprinted at ingest by default, before disk. It is pattern-based, and on an internal error it keeps the original value rather than dropping data. It is tuned for credential shapes, not customer PII.
已连接的节点可被远程停止
If you turn cloud on, Stop, Pause and Resume are reachable from the dashboard and the desk device for any node on the account. That is the feature. Run local-only and no such channel exists.
Starred by the people building AI
Engineers and founders from OpenAI, Google, PostHog and more have starred ClawMetry on GitHub. One of them helped build it.
三种运行方式
Cloud 是可选项。
一直都是。
守护进程把计算结果写入你自己磁盘上的 DuckDB 文件。之后仪表盘放在哪里由你决定，而且无论选哪种，价格都一样。
01 · Local only
数据不外流
Included in the MIT core
The dashboard reads the local file through a loopback query server. There is no account, no sync and no destination to point at.
- Network destinations: none
- Inbound ports opened: 0
- Free forever for OpenClaw, NVIDIA NemoClaw and Goose
02 · Our cloud
出站前先加密封装
$19 per node, per month
The snapshot is encrypted on the node with a key generated there and never sent. Your browser decrypts it. Subpoena us and we hand over a blob we cannot open.
- AES-256-GCM, key held on the node
- Decryption happens client side
- Stop, Pause and Resume reach any node on the account
03 · Self-hosted
你的基础设施，单租户
$190 per node, per year
One container serves the UI and the ingest API on your own network, with node tokens and admin auth. Licences verify offline against an embedded Ed25519 key you can fingerprint and compare.
- No calls to clawmetry.com beyond an off-by-default version ping
- Same feature set, same runtimes, same rate
- Two months free against the monthly price
价格不随部署方式变化。私有部署是每节点每月 $19 或每节点每年 $190，与 Cloud 方案完全一致，因为你付费买的是软件，不是我们的服务器。变的是谁掌握数据、谁运行容器。直接购买私有部署密钥，无需联系任何人。
一个价格，一种计量
在联系我们之前，
先算清自己的数字。
7 days, every runtime, no card
$19per node, per month
Pro, billed monthly. Starter is $9 and covers fewer features, not fewer runtimes. Annual is $190 per node, two months free. Free forever for OpenClaw, NVIDIA NemoClaw and Goose.
Start the trial- Every runtime, including Claude Code, Codex and Cursor.
- Cloud or fully self-hosted, at the same rate. Unlimited chat channels.
- Waste flags, error triage, cost optimizer, OTLP export, tool policy.
- Cancel any time in Stripe. No contract, no seat count.
Already decided? Buy now and install after. Your key is on the next screen.
你需要花多少
统计要运行守护进程的机器数量，而不是会来查看的人数。
$551 $6,612 per year · 29 nodes
A node is a machine running the daemon and reporting a heartbeat. The unit of attribution is a machine, so spend maps to a laptop, not to a team. The same number applies self-hosted, so you can price a deployment on your own infrastructure off this figure without asking us. Ephemeral CI runners are not yet specified; the fleet brief carries the rule in writing before you sign.
写给承担风险的人
在整个公司范围内运行它。
上个季度，你的工程师装上了 Claude Code、Cursor、Codex 和 Copilot。没有人走过采购流程，而它们全都握着你的代码仓库和密钥。
无需在智能体中安装任何东西
Each runtime is read from the session store it already writes. No SDK, no wrapper, no second agent on the laptop, nothing a developer has to opt into or can forget.
A control layer that governs only its own SDK is blind to everything a developer runs outside it.自托管就是 SSO 的答案
SSO does not exist yet. Single-tenant self-hosted does: one container serves the UI and the ingest API, with node tokens and admin auth, and licences verify offline against an embedded Ed25519 key you can fingerprint and compare.
A self-hosted deployment makes no calls to clawmetry.com beyond an off-by-default version ping.适配你现有的网络
SIEM and syslog export in CEF or JSON over TCP, UDP or TLS, emitted daemon-side because the cloud never holds plaintext. Corporate TLS interception is supported, with a doctor command that walks DNS, TCP, proxy and TLS in order.
In: your collector feeds us over OTLP. Out: full-event SIEM export. Not yet: correlated spans carrying your trace ids.机群部署目前仍需手动完成
There is no Helm chart, no Terraform provider and no Intune or Jamf package. If a daemon on developer laptops is a non-starter, run the enforcement proxy centrally and govern spend without touching an endpoint.
Auto-update ships on by default. CLAWMETRY_AUTO_UPDATE=0 turns it off. No staged rollout, no version pinning.每次都会被问到的问题。
能在运行前拦截，还是只能事后告知已经运行？
Both, and the split is in the table above. Claude Code gets a genuine pre-execution tool gate, and anything routed through the proxy gets spend refused with a 429 before tokens are spent. For the other runtimes it is detection plus process control: we can see it and end it, we cannot veto the call it already made.
Is ClawMetry only for OpenClaw?
No. It launched in February 2026 as an OpenClaw-only dashboard and many directory listings still describe it that way, but it now reads 26 runtimes: OpenClaw, Claude Code, Cursor, GitHub Copilot, Codex, Gemini CLI, Cline, OpenHands, OpenCode, NVIDIA NemoClaw, Aider, Goose, n8n, Qwen, Devin, Antigravity, Grok, Hermes, Pi, Deep Agents, Kimi CLI, DeepSeek Harness, Exo, NanoClaw, PicoClaw and QM. It auto-detects whichever of those are on the machine, so a mixed fleet lands in one dashboard. OpenClaw, NVIDIA NemoClaw and Goose are free forever in the open source package; the rest are on the paid tier.
它会自行中止我的智能体吗？
No. Detectors write a warning and stop there. On the reference install every flagged session ran to completion. A run ends only when a person ends it, or when you have set a spend cap yourself and an agent crosses it.
它会改变我的智能体的运行方式吗？
Read-only by default. Two things you opt into change that: the proxy, a separate process you point one env var at, and approval gates, where ClawMetry adds a gate to the runtime’s own permission system and removes only what it added.
试用期结束后会怎样？
The paid runtimes stop being read and the free three keep working. Entitlements are a commercial boundary, not a technical one. We do not hard-block a running fleet on a licence check.
团队是谁，如果你们消失了会怎样？
One person, plus contributors. The core is MIT and runs on your machine, so if we vanish your install keeps working and your data stays in a DuckDB file you own. The paid layer is a separate closed package. Ask for the fleet brief and it names the legal entity, the largest deployment we run today, and the reference count, with no rounding.
这能通过安全审查吗？
For a pilot on non-production machines, usually: MIT source you can audit, local-first storage, single-tenant self-hosted and offline licence verification are the arguments that work. For a regulated production rollout, read the gap list first. SSO, RBAC beyond owner and member, SOC 2, CAIQ and a third-party pen test are all absent, and that is a two-to-four quarter conversation.