AtlasClaw is an enterprise agent framework supporting mutliple users and multi system integration.
SaferSkills independently audited atlasclaw (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
[!NOTE] This repository contains the AtlasClaw core implementation, including the agent runtime, API layer, channel adapters, provider registry, skills, tools, and session/memory management,see atlasclaw.ai.
>
Concrete providers are not implemented in this repository. AtlasClaw loads provider packages fromproviders_root. In a sibling-repository layout, a common value is../atlasclaw-providers/providers.
AtlasClaw logo
AtlasClaw is an enterprise agent framework that lets employees interact with multiple enterprise systems through one conversational AI interface. Instead of switching between separate consoles, dashboards, and approval portals, users can use natural language to trigger workflows, query operational data, and complete cross-system tasks from a single entry point.
Enterprise software teams often need to work across CRM, ITSM, Monitoring, HR, Finance, OA and other internal systems. The challenge is not only system fragmentation, but also the mismatch between data models, workflow boundaries, authorization models, and user experience across those systems.
AtlasClaw is designed around two practical developer questions:
AtlasClaw addresses those problems with a developer-oriented agent framework:
The framework is built to help teams add agent capabilities to existing enterprise software without weakening governance. AtlasClaw does not bypass RBAC, does not escalate privileges, and keeps platform-specific authorization and auditing where they already belong.
AtlasClaw supports two practical usage modes for enterprise software teams.
AtlasClaw can be embedded into an existing enterprise system as a module inside that system. In this mode, the AI Agent becomes part of the product itself, serving that system's own users, data, and business scenarios.
AtlasClaw can also run as an independent enterprise AI Agent system that connects multiple existing systems together. In this mode, it acts as a unified AI layer above those systems rather than belonging to only one of them.
AtlasClaw is organized around a thin core plus rich providers.
AtlasClaw overall architecture
At a high level, requests enter through one of the supported channels, pass through the AtlasClaw Core, and are executed against enterprise systems through Providers. In embedded mode, the entry point can be an AI panel or module inside an existing enterprise application. In standalone mode, AtlasClaw exposes an independent AI Agent interface that sits above multiple enterprise systems. In both cases, the core remains lightweight and reusable, while each Provider contains the system-specific integration logic.
AtlasClaw core architecture
The core runtime in this repository centers on:
API Layer: interactive APIs, WebSocket streaming, and webhook endpoints for both user-driven and programmatic invocationAgent Engine: routing, prompt building, tool selection, and execution orchestrationSession & Memory: conversation context, persistence, and retrievalTools & Skills: reusable execution units exposed to the agentProvider Registry: registration and discovery of enterprise integrationsExecution Context: dependency injection for auth, tenant, and runtime-scoped dataproject-root/
├── app/atlasclaw/api/ # REST, SSE, WebSocket, gateway orchestration
├── app/atlasclaw/agent/ # Agent runner, routing, streaming, prompt building
├── app/atlasclaw/channels/ # Channel adapters and registries
├── app/atlasclaw/core/ # Config, execution context, provider registry
├── app/atlasclaw/memory/ # Memory manager and retrieval
├── app/atlasclaw/session/ # Session context, queue, and manager
├── app/atlasclaw/skills/ # Skill loading and registry
├── app/atlasclaw/tools/ # Built-in tools and tool catalog
├── app/atlasclaw/workflow/ # Workflow engine and orchestrator
├── docs/ # Concepts, tools, channels, and design notes
└── tests/ # Pytest test suitepython3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txtAtlasClaw uses atlasclaw.json for configuration. Create a configuration file in the project root:
{
"providers_root": "../atlasclaw-providers/providers",
"model": {
"primary": "kimi/kimi-k2.5",
"temperature": 0.7,
"providers": {
"kimi": {
"base_url": "${ANTHROPIC_BASE_URL}",
"api_key": "${ANTHROPIC_API_KEY}",
"api_type": "anthropic"
}
}
}
}The example above assumes a sibling atlasclaw-providers repository. The schema default for providers_root remains ../providers.
Configuration options:
providers_root - Root directory for provider packages, resolved relative to atlasclaw.json (schema default: ../providers)providers_root are registered as provider:skill to avoid name collisionsmodel.primary - Primary model in format provider/model-namemodel.providers - Provider configurations with base_url, api_key, and api_typeapi_type - API type: openai (default) or anthropicEnvironment variables are expanded from ${VAR_NAME} format. Set them before starting:
# For Kimi (Anthropic-compatible API)
export ANTHROPIC_BASE_URL="https://api.moonshot.cn/anthropic"
export ANTHROPIC_API_KEY="your-api-key"
# For Doubao (OpenAI-compatible API)
export DOUBAO_BASE_URL="https://ark.cn-beijing.volces.com/api/v3"
export DOUBAO_API_KEY="your-api-key"# Run all tests
pytest tests/atlasclaw -q
# Run LLM integration tests (requires API credentials)
export ANTHROPIC_BASE_URL="https://api.moonshot.cn/anthropic"
export ANTHROPIC_API_KEY="your-api-key"
pytest tests/atlasclaw/test_agent_integration.py -v -m llm
# Run e2e tests (requires running service)
pytest tests/atlasclaw/test_e2e_api.py -v -m e2eStart the backend API server:
uvicorn app.atlasclaw.main:app --reload --host 0.0.0.0 --port 8000The API will be available at http://127.0.0.1:8000.
Once the service is running, open your browser and navigate to:
http://127.0.0.1:8000/The Web UI provides:
The frontend is located in app/frontend/ and supports two deployment modes:
Open Source Mode (default):
app/frontend/scripts/ and refresh browserEnterprise Mode:
cd app/frontend
npm install
npm run builddist/app.min.jsindex.html to reference the bundled fileRun Frontend Tests:
cd app/frontend
npm testapp/atlasclaw/main.py - FastAPI application with lifespan managementapp/atlasclaw/api/app/atlasclaw/agent/, app/atlasclaw/workflow/, and app/atlasclaw/tools/providers_root (schema default: ../providers; common sibling-repo layout: ../atlasclaw-providers/providers)If you are integrating AtlasClaw into a host service, start by wiring the API layer, execution context, provider registry, and session manager together in your application bootstrap.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.