Skip to content
Get packs

Iron Proxy Gateway Installer

Installs a locked-down Iron Proxy and web console so NanoClaw can gate agent network requests behind approvals.

Source Download skill
Repository
nanocoai/nanoclaw
Stars
31,072
Licence
MIT
Files
15 files

What it does

This skill sets up Iron Proxy, a gateway that sits between a NanoClaw agent and the internet, along with the official Iron Control web console and a database to manage it. Once installed, outgoing agent requests pass through the proxy, which checks an allowlist and asks a human to approve requests before they are forwarded, and injects credentials from the console so agents never see them directly. It also adds agent guidance files so the agent knows how to work within this gateway.

Great for

  • Developers running NanoClaw who want human approval and credential control over agent network access
  • Teams that need an audited, local Docker-based egress gateway for agents
  • Operators who already run Docker and are comfortable reviewing installer scripts

Skip it if

  • Users who do not run Docker or want a simple setup, since it starts several containers and needs a multi-minute install
  • Anyone expecting this to be a plain writing or productivity skill; it changes network and credential handling and can block agent traffic if misconfigured
  • Setups where the optional uncredentialed-read shortcut is enabled without understanding it: the file says some grant changes can be used briefly without an approval card, and that data-leak trade-off is documented in docs/gateway-seam.md

Try asking

  • “Install the Iron Proxy gateway for NanoClaw using the add-iron-proxy skill”
  • “Refresh my Iron Control console and proxy after an update”
  • “Add a credential grant in Iron Control for my agent's API host”
  • “Restore the Iron approval bridge and agent guidance after files were removed”
Step-by-step guide: how to use Iron Proxy Gateway InstallerInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 15 original files, the MIT licence and an attribution note.

    add-iron-proxy.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip add-iron-proxy.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip add-iron-proxy.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Read docs/gateway-seam.md before changing the integration, as the skill itself instructs.
  • Keep the database volume and encryption keys in session-materials together when rerunning setup, or the console will break.
  • Leave NANOCLAW_GATEWAY_UNCREDENTIALED_READS unset unless you have reviewed the data-leak trade-off.

What's inside

  • assets/entrypoint.sh
  • conformance/credential-scope-cases.json
  • evals/evals.json
  • gateway.json
  • payload/container/skills/iron-proxy-gateway/instructions.md
  • payload/container/skills/iron-proxy-gateway/SKILL.md
  • payload/src/gateway-providers/iron-proxy-allowlist.ts
  • payload/src/gateway-providers/iron-proxy-approval.test.ts
  • payload/src/gateway-providers/iron-proxy-approval.ts
  • payload/src/gateway-providers/iron-proxy-credential-scope.test.ts
  • payload/src/gateway-providers/iron-proxy-credential-scope.ts
  • payload/src/gateway-providers/iron-proxy-local-model.test.ts
  • payload/src/gateway-providers/iron-proxy-local-model.ts
  • REMOVE.md
  • SKILL.md

Redistributed unmodified from nanocoai/nanoclaw under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.