Pair once
Your computer shows a short code. You approve it on your phone, which shows what the computer says it is and where the request came from. The code works once and lasts five minutes. You never handle a key.
A stop button for your AI agent
One tap on your phone stops your OpenClaw agent at its next tool call. A tool already running will finish. Guardian is in beta.
Tap STOP
Your agent's next tool call is refused, with a message in your chat saying it was stopped from your phone. New runs are refused too if you allowed that when pairing. TrustRail also refuses anything the agent routes through TrustRail, whether or not the computer is connected.
See what it was doing
The app shows each tool your agent used and what Guardian decided, never what the tool was given or returned. Parameters, results, file paths and message bodies are not sent.
Resume with your passkey
Resuming asks for your passkey: Face ID, Touch ID or your device PIN. Someone holding your unlocked phone session cannot resume your agent without it.
Put it on your phone
Safari
Open app.kynthiaai.systems/guardian, sign in, then tap Share and Add to Home Screen. Open it from your Home Screen: on an iPhone, notifications work only from there.
Chrome
Open app.kynthiaai.systems/guardian, sign in, then tap the ⋮ menu and Install app or Add to Home screen.
Pair it with Guardian
On the computer running OpenClaw, install the plugin and pair it:
openclaw plugins install @trustrail/openclaw-guardian@beta
openclaw guardian pair --api https://app.kynthiaai.systemsOpenClaw asks you to confirm that the package comes from npm and the capabilities it needs, and needs Node 24.16 or newer. Pairing shows a short code: enter it in Guardian on your phone.
What it cannot do
It does not stop a tool already running
OpenClaw has no way to abort a tool that has started, so STOP takes effect at your agent's next tool call. A tool already running will finish.
New runs only if you allow it
OpenClaw lets a plugin refuse a new run only when you grant it allowConversationAccess. Guardian asks when you pair and never turns it on by itself. Without it, STOP refuses tool calls but not new runs, and the app says so.
It works only while the plugin runs
If the Guardian plugin is disabled, removed or edited out of OpenClaw's config, including by the agent itself, your phone cannot stop local tools, and the app says Not connected. You get an email when a computer goes quiet. Guardian needs the OpenClaw Gateway running; in local-only mode it pauses risky tools and says why.
Your computer reports its own health
Plugin last seen, Last tool call checked and what a stop covers come from the computer, and anything with access to it could fake them. That is why the app labels them as reported by your computer.
When TrustRail is unreachable, risky tools pause
If Guardian cannot hear from TrustRail for ten seconds, only OpenClaw's own read-only tools keep running. A stop already received stays in force through an outage and a restart.
It is a stop button, not a sandbox
Guardian blocks or allows each tool call. It does not see or limit what a running tool does on your machine.