Access Lists

ClawNex provides IP and domain deny lists for network-level access control, managed from the Access Lists panel in the DEFENSE group.

Available Lists

• IP deny list — block traffic from specific IP addresses
• Domain deny list — block traffic to/from specific domains

Managing Entries

Entries can be added and removed from the dashboard or via the MCP manage_access tool. Each change is logged in the audit trail with a reason.

Adding an entry

1. Navigate to Access Lists in the sidebar
2. Select the list type (IP or Domain)
3. Click Add
4. Enter the value and a reason for the change
5. Click Save

Removing an entry

1. Find the entry in the list
2. Click Remove
3. Confirm the removal

Enterprise Features

The following capabilities are badged as Enterprise:

API and MCP Access

Access lists can also be managed programmatically:

• MCP tool: manage_access — add or remove entries with action, list_type, entry_type, value, and reason parameters
• REST API: Internal API endpoints for list management (session-authenticated when RBAC is enabled)