Enterprise-Grade General Agent Platform

MaClaw

Your own AI agents, for every organization

A self-evolving, enterprise-grade agent platform: a governable AI capability foundation and digital employees for your organization, and a personal AI work partner for every member.
It remembers you, understands your business, and follows your rules, from enterprises to universities and research teams.

MaClaw Pro

Workflows

  • Research direction planning
  • Academic paper writing
  • Graduation thesis outline
  • Master's / PhD thesis writing
  • Academic paper review
  • Master's / PhD thesis review
  • Assisted reading and group sharing
  • Remote paper review

IM channels

  • WeChat
  • Feishu
  • QQ
  • Telegram
  • Lansenger

Master's / PhD thesis review

  • Chapter notes
  • Host review
  • LaTeX thesis
You

Review this thesis in the file companion. Keep the claim, and note language and structure chapter by chapter.

MaClaw

The thesis is open in the file companion. The polish expert left chapter notes. After you share it, the host approves or ignores each note before a reply goes back to the group.

Ask about the next chapter

File companion

thesis.tex

LaTeX thesis. Comments stay on this file.

Chapter notes

The polish expert reads language and structure. The claim stays as written.

Host review

Approve or ignore each note before the group sees a reply.

Hub share

Remote review continues in a Hub session, away from the desk.

MaClaw reviewing a master's or PhD thesis in the file companion, with the research workflows and IM channels beside the chat.

One Platform, Three Ways to Use It

Enterprises, individuals and digital employees share one foundation of memory, knowledge and capabilities

Far beyond an "AI Assistant" — capabilities you can actually deploy

From daily office work to enterprise IT systems, IT operations and factory production-line monitoring — enterprises push selected Skill/MCP capability packs to employees and field devices, building an AI capability foundation that belongs to them. Every capability is governable, auditable and revocable.

Enterprise-Deployable Capability Scenarios

One MaClaw, covering everything from desks to production lines

Daily Office Work

Package standard operating procedures as Skill packs and push them to employees' MaClaw. Documents, emails, expenses and approvals follow corporate standards automatically.

  • Contract review / Bid response / Due diligence workflows
  • One-click expense, leave and other business forms
  • Email drafting, meeting minutes, PPT design
  • Trigger anywhere via WeChat / Feishu / QQ / Telegram / Lansenger
Skill Workflow Docs / IM

Full Enterprise IT System

Replaces legacy MIS

Structured Data Service (MaClawDataSrv) + Agent Dynamic UI (AG-UI) — replace fixed menus, fixed pages and fixed forms with natural language. Covers 30+ enterprise business templates.

  • Full schema for Sales / Finance / HR / Legal / Procurement / Inventory / Assets
  • Say "yesterday I met a client in Hangzhou, train 174" — auto-recognized as an expense entry
  • Business-rule engine + approval flow + operation plan
  • SQLite / PostgreSQL — same API, seamless switch
DataSrv AG-UI Business Ops

IT Operations

Wrap your ops SOPs as Skills / Passthrough Tasks and push them to engineers' machines. From routine inspection to emergency recovery — handled by conversation or a single command.

  • SSH with 10 concurrent sessions; password / key / agent auth
  • Passthrough tasks: restart, backup, rollback, cleanup in one shot
  • Scheduled inspections, anomaly alerts, auto-generated ops reports
  • High-risk operations require approval; full audit trail
SSH Passthrough Scheduling

Factory Production-Line Monitoring

Connect PLC / SCADA / MES data via enterprise-managed MCP. MaClaw stays on the floor, collecting metrics, identifying anomalies, pushing alerts and producing shift reports automatically.

  • MCP integration with PLC / SCADA / IoT gateways
  • Vision models auto-inspect equipment state and line anomalies
  • Long-running goals keep tasks moving while nobody is at the console
  • Equipment data flows into the enterprise knowledge base
MCP Vision Inspect Edge Deploy
Enterprise Governance

Every deployable capability is bound by governance

Private Capability Market

Enterprise-managed Skill/MCP library. Employees' MaClaw prioritizes capabilities approved and stored here.

  • Approved-only intake with full source provenance
  • Centralized purchase for paid capabilities; license never leaves the enterprise
  • Seamless for employees — enterprise capabilities always win

Deployment & Recommendation

Admins can force-deploy or simply recommend, scoped by department / role / device type.

  • Deployment: auto-install on enterprise enrollment, retry on failure
  • Recommendation: surfaced in the marketplace, user opts in
  • Uninstalled deployments auto-reinstall on next sync

Source Verification & Revocation

Every capability pack carries provenance, version and checksum — and can be revoked in one click.

  • SHA-256 checksum + signature verification
  • Pinned versions and latest-approved tracking
  • Capabilities can be revoked, disabled or rolled back

Data Sovereignty & Multi-Tenancy

Enterprise data stays in your Hub; the cloud never reads enterprise business data.

  • Physical-path isolation per tenant / user
  • Every table keyed by tenant_id
  • Licenses centrally signed, offline-verified on-premise
Enterprise-Grade Security

From credentials and transit to behavior approval — hard guarantees end to end

Authentication & Credentials

Layered credential design — every key passes through strong hashing and full lifecycle management.

  • scrypt (N=32768) + pepper for password digests
  • HMAC-SHA256 session tokens, bcrypt admin secret
  • Five states: active / suspended / revoked / expired / expiring
  • Plaintext returned once only; masked after rotation

Policy Engine

Effective-policy from a top-down user-group tree, with five actions and four presets.

  • Five actions: allow / deny / ask / audit / user_override
  • Four presets: standard / strict / offline / developer
  • Three-level capability-source allowlist: global / tenant / user
  • Multi-role RBAC: admin / data_admin / data_user / auditor

End-to-End Encryption

Capability packs, licenses and transport — all encrypted; private keys stored separately from data keys.

  • Capability packs: RSA-2048 + AES-256-GCM + PBKDF2 100k
  • License: RSA-SHA256 signing, offline-verified by the enterprise
  • TLS 1.2 minimum; StartTLS for email links
  • Private keys at 0o600 with key-separation policy

Sandboxing & Isolation

Both execution context and network reach are configurable — tenants are separated at the physical layer.

  • Sandbox modes: none / os / docker
  • Network tiers: full / intranet / none
  • YOLO mode can be disabled per tenant / user
  • Multi-tenant path and database-level isolation

Audit, Redaction & Injection Defense

Every call is structurally logged; sensitive data is auto-detected and masked.

  • JSONL audit log: 50MB rotation, 30-day retention
  • Fields: risk_level / decision / reason / sensitive_categories
  • 5 built-in sensitive patterns (API key / AWS / private key / password / JWT)
  • 4-class prompt-injection detection across messages, tools, web, files

High-Risk Operation Approval

Risk tiering + double-confirm + smart review — important ops are stopped, routine ones don't get in the way.

  • Risk levels: low / medium / high / critical
  • Passthrough tasks default to confirm_required=true
  • Smart Approval: LLM re-review for high-risk actions
  • Session allowlist + async approval (2-minute timeout)

Why MaClaw

An enterprise-grade agent platform that goes further in two directions

Research and Education

Dedicated capabilities for universities and research teams, with workflows and experts for each stage of academic work.

  • Research direction planning and academic paper writing
  • Thesis outlines and master's or PhD thesis writing
  • Paper review, thesis review and remote review
  • Assisted reading with group sharing

Network and Server Operations

A built-in native SSH client: connect to, run commands on and manage remote servers right from the conversation, no plugin required.

  • Up to 10 concurrent SSH sessions
  • Password, key and agent authentication
  • Synchronous runs, background tasks, file upload and download
  • Every operation logged for audit

Ready-to-Use Workflows

38 structured workflows. Highlights below; academic writing and review are under Industry Solution: Research

Bid Response

Tender parsing, qualification response, technical proposal, bid assembly — end to end

Enterprise

Contract Review

Clause-by-clause risk analysis, compliance check, edit suggestions for all contract types

Enterprise

Due Diligence

Business, financial, legal, technical multi-angle DD with a complete report

Compliance Audit

Regulatory compliance assessment, risk rating, remediation planning

Patent Analysis

Prior-art search, infringement risk, patent-strategy recommendations

Business Plan

Market analysis, financial projections, strategic planning docs

Competitive Analysis

Market landscape, competitor profiling, strategic positioning

Innovation Plan

Tech-trend analysis, innovation-opportunity identification, R&D planning

Event Planning

End-to-end event organization workflow from concept to execution checklist

Project Proposal

Scope definition, resource planning, timeline generation

Research Report

Literature review, data synthesis, academic writing

Presentation Design

Slide structure, content organization, visual-design guidance

Literature Review

Topic, search strategy, screening, analysis, and a synthesis you confirm

Paper Writing

Outline, literature, draft, figures, and polish — one confirmed phase at a time

Experiment Design

Research question, hypothesis, method comparison, and an experiment plan

Paper Reproduction

Read the paper, locate code and data, reproduce a baseline, and write the report

Grant Proposal

Research basis, plan, and a proposal assembled for the fund you name

Academic Applications

Changjiang Scholar and NSFC Distinguished Youth, Excellent Youth, Youth, General, and Key

Academic Review

Matching review templates: completeness, achievements, plan, writing quality, report

Patent Filing

China patent application and US Patent (USPTO) application workflows

Gaokao Planning

College-application reference from scores, interests, and constraints

Coding Project

MaClaw's own path: requirements, design, tasks, implementation, and acceptance

Maintenance

Impact analysis, refactor, and verification — or a controlled ops change

Bid Review

Check a finished bid against the tender and produce a revision report

Core Technology

The engines that help agents remember, retrieve and act correctly

Memory Architecture

8 memory categories, semantic/episodic tiers, temporal hierarchy, protected entries

Hybrid Search

BM25 keyword + vector similarity, SIMD-accelerated cosine scoring

Knowledge Graph

Bidirectional weighted edges, BFS expansion, multiple relation types

Forgetting Curve

Ebbinghaus decay with configurable half-life and dormant threshold

Swarm Orchestrator

Task splitting, conflict detection, auto-merge, feedback-loop coordination

MCP Integration

Local stdio and remote HTTP MCP servers with auto-discovery and health monitoring

Tool Routing

40+ tools matched via hybrid search; conditional activation and progressive exposure

Workflow Engine

Phase-based execution, tool policies, double-confirm, persistence

Expert Sessions

Paper polish, academic translation, LaTeX thesis writing, and PPT maker, with capability tiers

Self-Evolution

SkillHub search when a skill is missing, self-repair after a failure, and a nudge to save a successful run

Voice

Local SenseVoice transcription, speaker labels, meeting-minute drafts, and Kokoro speech

Steering Rules

Markdown behavior rules at user or project scope, applied again within 30 seconds of an edit

Computer Use

Accessibility and PP-OCR observation, click and type actions, and reusable playbooks

Long-Running Goals

A goal keeps advancing inside its budget until it finishes or fails, and only when you ask for one

File Companion

Open a local file or arXiv PDF beside a chat that stays on that file, then share it through Hub

Desktop Pet & Devices

A text-first desktop pet with an optional wake word, plus a local device gateway and ClawMate for ESP32-S3

Governance: 4-Tier Capability System

Enterprises prefer their own approved capabilities; external sources are introduced under enterprise policy

Priority 1

Private Capability Market

Enterprise Hub Marketplace

Enterprise-built Skill/MCP library curated by admins. Employees' MaClaw calls these first by default; licenses for paid capabilities are centrally held and never leave enterprise boundaries.

Self-managed Approval-gated Top priority Centralized license
Priority 2

Public Capability Market

HubCenter Marketplace

HubCenter public market, including official SkillHub skills and commercial partners. Free Skills install directly; paid Skills and MCPs go through enterprise procurement. Admins can bulk-import into the private market.

Official Commercial Purchase / Subscribe
Priority 3

ClawHub

Community capabilities

Open community-built capability source. Free Skills can be tried with low friction; validated ones get promoted into the enterprise private market as enterprise assets.

Community Free Trial Try-then-Adopt
Priority 4

GitHub

Open-source ecosystem

Direct GitHub-repo Skills/MCPs offer the broadest reach. Enterprise admins can whitelist allowed sources to control what gets pulled in.

Open Source Maximum Breadth Allowlisted

Smart Routing in Enterprise Mode

When MaClaw is in enterprise mode, capability lookup order is: Private Market → Public Market → ClawHub → GitHub. Capabilities published in the enterprise Hub always win; whether external sources can be searched, trialed or imported is decided by enterprise policy.

  • Free capabilities: configurable as "trial-then-adopt" — validated capabilities are auto-archived into the enterprise market.
  • Paid capabilities: must be "approved and purchased, then made available" — license stays in the enterprise Hub throughout.
  • MCP services: when a secret is missing, status shows "needs configuration" without blocking the main flow.

Governance: Capability Build Process

Four steps to turn external capabilities into enterprise-owned assets

01

Discover

Admins search public market, ClawHub, GitHub for matching Skills/MCPs — or employees raise an intake request.

→
02

Approve / Purchase

Free capabilities follow trial or approval policy; paid ones go through procurement — license centrally held by the enterprise Hub.

→
03

Intake & Publish

Approved capabilities enter the private market with version, permission allowlist and source-provenance metadata.

→
04

Deploy & Install

Push to employees' MaClaw by department/role/project — force-install or recommend, with auto-retry on failure.

Dual-track policy: Free Trial-then-adopt — validated capabilities auto-archived to the enterprise market Paid Approve-then-use — license centralized, invocation controlled, never leaves enterprise boundary

Industry Solution: Research Assistance

Direction, papers, and master's or PhD theses — writing, outlines, review, group reading, and remote comments — on workflows and experts that ship with MaClaw.

Education

Eight research jobs MaClaw already sits beside you for

Research direction planning

Start with a literature review: define the topic, set the search, screen papers, and synthesize the gap. Grant and talent workflows then turn that gap into a research plan — the core question, feasibility, and a direction you can defend.

Literature review Grant proposal NSFC plans

Academic paper writing

The paper-writing workflow moves in phases you confirm: outline, literature, draft, figures, and polish. The paper-polish and academic-translation experts keep terminology stable. The LaTeX expert writes into your .tex template and sends you to compile preview.

Paper writing Polish Translation LaTeX

Graduation thesis outline

The outline phase of paper writing locks the chapter frame before prose is treated as final. The LaTeX expert reads the degree-thesis template — the main file and its included chapters — and keeps that structure.

Outline phase Thesis template

Master's / PhD thesis writing

Write on the degree-thesis template you already use. The LaTeX expert fills the .tex in place, chapter by chapter. The paper-writing workflow drafts the sections you confirm as you go.

LaTeX thesis Chapter drafts

Academic paper review

The paper-polish expert reviews academic language without changing the claim, and notes each edit. Open the PDF in the file companion to leave comments on the file. Changjiang Scholar and NSFC review workflows (Distinguished Youth, Excellent Youth, Youth, General, and Key) score completeness, achievements, the research plan, and writing quality, then write a combined report.

Polish review Companion notes Application review

Master's / PhD thesis review

Load the thesis into the file companion so comments stay on that file. The polish expert reads language and structure section by section. After you share it, the host approves or ignores each note before a reply is written back for the group.

Chapter notes Host review

Assisted reading and group sharing

Paste an arXiv id or link. The file companion downloads the PDF into its own tab, and the chat discusses only that paper. Share it with classmates or a lab group: questions become annotations, the host approves or ignores them, and approved replies are visible to everyone on the share. Rewrites of a selection, reading notes, and paper explainers stay on your machine.

arXiv File companion Group share

Remote paper review

Reviewers do not have to sit at the author's computer. A shared companion document goes through Hub: participants comment from their own MaClaw, the host approves, and the reply is stored on the same share. A Hub remote session lets you continue that review away from the desk.

Hub share Remote session

Industry Solution: Network Operations

A built-in SSH client brings routine checks, changes and troubleshooting into the conversation, all under enterprise governance.

Native SSH sessions

Connect to remote servers from the conversation, with up to 10 concurrent sessions and password, key or agent authentication.

Remote execution and background tasks

Run commands synchronously or as background tasks you can submit, check, wait on or stop; work can also target an SSH remote directory.

File transfer and privileges

Upload and download files, with automatic sudo token handling, shell responsiveness checks and cleanup after repeated failures.

Audit and approval

SSH commands and other key operations are logged automatically; high-risk operations require approval, and SSH activates only when the context calls for it.

Download and Deploy

1 Download & install
2 Register, then pick Pro or Simple
3 Connect an LLM provider
4 Optionally bind IM, then start