Private control plane

PhantomClaw Cloud keeps auth, storage, and dashboards private.

The open-source PhantomClaw core runs browser automations locally. This private app handles workspace-aware bundle storage, dashboard links, and operator login flows without leaking control-plane logic into the public repo.

API
/v1/*
CLI-facing endpoints live at the root path, not behind an app-only API prefix.
Storage
Workspace scoped
Every stored bundle is attached to a workspace slug and preserved as a durable source payload.
Auth
Clerk + device flow
Users authenticate in the browser with Clerk, then approve CLI device logins without exposing the hosted database to the public runner.

Product split

Public runtime, private control plane, shared contract.

01

OSS PhantomClaw

Public browser runners, automation adapters, artifacts, and the `phantomclaw.run-bundle.v1` export seam.

02

PhantomClaw CLI

Private operator entrypoint for device login, workspace switching, bundle upload, and dashboard deep links.

03

PhantomClaw Cloud

Private hosted surface for auth, workspace membership, bundle persistence, and dashboards with real access control.