# Install ironclaw with Homebrew, scoop, winget Security-first personal AI assistant with WASM sandbox channels. Version 0.29.1 via Homebrew; verified 2026-07-03. ## Install ```sh sudo av install brew:ironclaw ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install ironclaw ``` Evidence: local Homebrew formula metadata ### Windows - Scoop (92%): ```sh scoop install main/ironclaw ``` Evidence: Scoop official bucket manifest trees: bucket/ironclaw.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id NearAI.IronClaw -e ``` Evidence: Windows Package Manager source index: NearAI.IronClaw from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:ironclaw - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.29.1 - **Source summary:** Security-first personal AI assistant with WASM sandbox channels - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT OR Apache-2.0 - **Source archive:** - **Last updated:** 2026-07-03T10:36:52+03:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - ironclaw (cli) - sandbox_daemon (cli) - ironclaw (alias) - sandbox_daemon (alias) ## Dependencies - openssl@3 ## Build dependencies - pkgconf - rust ## Install behavior - Post-install hook: not defined - Service: declared - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.29.1 - Package-manager updated: 2026-07-03 - Local data: ok - Upstream repository: https://github.com/nearai/ironclaw - Upstream latest detected: ironclaw-v0.29.1 (current) ## Project history and usage IronClaw is a Rust-based personal AI assistant and agent runtime from NEAR AI, packaged as a command-line application with a security-first positioning. Its package history is short, but its rapid release stream and Homebrew presence make it part of the 2026 wave of agent tools being packaged for local developer machines. ### Project history The public GitHub repository was created on February 3, 2026, and the first GitHub release, v0.1.0, was published on February 12, 2026. The README describes IronClaw as a secure personal AI assistant and documents a Reborn runtime with a separate `ironclaw-reborn` binary, state root, model routing, provider configuration, and production storage settings. The project homepage frames IronClaw as a secure, open-source alternative to OpenClaw that can run locally or in NEAR AI Cloud encrypted enclaves. The README's configuration sections emphasize environment-variable secrets, rejecting inline secret-shaped config values, provider selection for OpenAI, Anthropic, OpenAI-compatible endpoints, OpenRouter, Ollama, and Codex auth, and policy-controlled runtime profiles. ### Adoption history IronClaw entered Homebrew with the description 'Security-first personal AI assistant with WASM sandbox channels' and also appears in Windows package metadata through winget and Scoop in the input package facts. The GitHub repository accumulated substantial public stars and forks within months, which is unusual for a young CLI package and reflects the broader demand for local agent runtimes with stronger isolation claims. ### How it is used Users run IronClaw as a CLI assistant, configure model providers through environment variables and generated config files, and use the Reborn runtime for interactive sessions, one-shot messages, diagnostics, and local or hosted profiles. The package also ships a `sandbox_daemon` executable according to Homebrew metadata, matching the project's WASM sandbox-channel positioning. ### Why package nerds care IronClaw is package-nerd significant because it packages a fast-moving AI agent runtime with security-sensitive defaults: credential handling, config seeding, sandbox processes, provider plugins, and local state paths all affect how a package should be installed and upgraded. It is the sort of modern CLI where package metadata has to describe both a tool and a runtime boundary. ### Timeline - 2026-02-03: The public GitHub repository was created. - 2026-02-12: The first GitHub release, v0.1.0, was published. - 2026-02-19: The release stream had reached the ironclaw-v0.6.0 tag. - 2026-04: Releases reached the 0.25.x series. - 2026-06: Releases reached the 0.29.x series. ### Related projects - IronClaw is related to OpenClaw, NEAR AI Cloud, local LLM provider tooling such as Ollama, and broader AI agent runtimes that use sandboxing and policy controls to reduce prompt-injection and secret-exfiltration risk. ### Sources - - - - - - ## Security Notes formula declares a Homebrew service. - **Geiger risk:** orange / medium - formula declares a Homebrew service ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** ironclaw - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Scoop - main/ironclaw: normalized package name match | Scoop official bucket manifest trees: bucket/ironclaw.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - NearAI.IronClaw: normalized package name match | Windows Package Manager source index: NearAI.IronClaw from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [rust](https://www.automicvault.com/pkg/brew/rust/) - Build dependency declared by Homebrew. - [openclaw-cli](https://www.automicvault.com/pkg/brew/openclaw-cli/) - Shares av.db curated category or tags: ai-assistant, automation, cli, productivity. - [deck](https://www.automicvault.com/pkg/brew/deck/) - Shares av.db curated category or tags: automation, cli, productivity. - [dockutil](https://www.automicvault.com/pkg/brew/dockutil/) - Shares av.db curated category or tags: automation, cli, productivity. - [esniper](https://www.automicvault.com/pkg/brew/esniper/) - Shares av.db curated category or tags: automation, cli, productivity. - [flexget](https://www.automicvault.com/pkg/brew/flexget/) - Shares av.db curated category or tags: automation, cli, productivity. - [gmailctl](https://www.automicvault.com/pkg/brew/gmailctl/) - Shares av.db curated category or tags: automation, cli, productivity. - [gogcli](https://www.automicvault.com/pkg/brew/gogcli/) - Shares av.db curated category or tags: automation, cli, productivity. - [googleworkspace-cli](https://www.automicvault.com/pkg/brew/googleworkspace-cli/) - Shares av.db curated category or tags: automation, cli, productivity. - [teslamate](https://www.automicvault.com/pkg/brew/teslamate/) - Local package facts share a topical domain. Shared terms: automation, cli, openssl, openssl-3, productivity. - [screenpipe](https://www.automicvault.com/pkg/brew/screenpipe/) - Local package facts share a topical domain. Shared terms: ai, automation, cli, first, productivity. ## Combined YAML source View the package source record on GitHub. [combined/ironclaw.yml](https://github.com/automic-vault/db/blob/main/combined/ironclaw.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph