Scoped authorization
Agent connections belong to an authorized user and workspace context.
Read setup guide →Security
Agents get useful access—not unlimited access.
Arawa Cloud is designed around explicit authorization, website boundaries, structured tools, validation, and controlled publishing.
Security model
Guardrails at every layer.
Agent-native should also mean permission-aware, auditable, and reviewable.
Website boundaries
Operations require explicit access to the target website.
See documentation →Structured operations
Agents use defined tools and validated inputs rather than infrastructure access.
Explore the agent →Render validation
Components are compiled and tested with real and generated fixture values.
Explore the CMS →Preview-first workflow
Review page and component previews before production publishing.
See the workflow →Activity context
Track the client, actor, action, target, result, and timing of agent work.
Get started →Responsible disclosure
To report a potential security issue, email security@arawacloud.com. Please do not disclose an unresolved issue publicly.
Now live
Start building on Arawa Cloud.
Create a workspace, open the builder, and use Arawa to draft and publish websites.
Works withClaude · ChatGPT · Codex · MCP-compatible clients