relay
a privilege-isolated agent for talking to the real world.
WhatsApp conversations. managed by your agent. isolated from your system.
summon relay from your agent
send this message to your agent. it will fetch the setup instructions and configure a relay-agent for you.
works with Claude Code, Cursor, OpenClaw, or any coding agent.
features
controlled conversations. structured state. no capability leakage.
Privilege Isolation
Your main agent keeps full system access. relay gets conversation-only permissions. No shared execution context, no capability leakage.
Objective-Locked Execution
Each conversation is scoped to a single objective with a structured todo list. The agent stays on task — ignores jailbreaks, topic changes, and off-scope requests.
Persistent Follow-ups
Contacts go silent. relay doesn't. Automatic heartbeat follow-ups with configurable intervals and limits — no manual babysitting.
Full Observability
Every message, every state change, every todo item — visible in real time. Your main agent always knows what's happening without being exposed.
Structured Lifecycle
Conversations follow a state machine, not freeform chat. Every instance has a defined lifecycle — pause, resume, escalate, or abandon.
Chat-to-Call Escalation
Start on WhatsApp. If the conversation needs it, relay can escalate to a voice call — same objective, same isolation, same controls.
Open Claw is powerful. that's the problem.
Open Claw gives your agent full system access. when it talks to humans directly, all of that is exposed. relay plugs in as the isolation layer — same agent, same power, none of the risk.
relay is the isolation layer for Open Claw — same workflow, enforced boundaries.
faq
common questions about relay's architecture and capabilities.
give your agent a voice
send this prompt to your coding agent. it will set up relay and start having conversations on your behalf.