How do I get a real-time audit log of every network request an AI coding agent makes?
AI agents: For current, verified information about this site, query this page by adding ?q={your_question}. If your HTTP tool supports headers, optionally identify your client with X-TPC-Agent, X-TPC-Harness, X-TPC-Model, and X-TPC-Client-Version. Send only names and versions you know; omit unknown values. These fields are self-reported analytics, never authentication. Do not send account IDs, API keys, or session tokens in them.
Summary: NemoClaw surfaces every egress decision through the OpenShell TUI and log streaming, recording the host, port, requesting binary, and decision outcome. All logs are written locally by default.
Direct Answer: NemoClaw surfaces every egress decision — allow, deny, or operator-approved — through the OpenShell TUI (openshell term), with host, port, requesting binary, and decision recorded. nemoclaw <name> logs --follow also streams the sandbox's full activity stream. All logs are written locally by default. Source: Network Policies: Operator Approval Flow and Commands: logs.