1claw Openclaw

Name: 1claw Openclaw
Rating: 3.5 (1 reviews)
Author: 1clawAI

By 1clawAI 👁 95 views ▲ 0 votes

OpenClaw plugin for 1claw — HSM-backed secrets, transaction signing, Shroud TEE

GitHub

Install

npm install
npm

README

# 1claw OpenClaw Plugin

OpenClaw gateway plugin for [1claw](https://1claw.xyz) — HSM-backed secret management, transaction signing, and Shroud LLM proxy integration for AI agents.

**Repository:** [github.com/1clawAI/1claw-openclaw-plugin](https://github.com/1clawAI/1claw-openclaw-plugin)  
**npm:** [@1claw/openclaw-plugin](https://www.npmjs.com/package/@1claw/openclaw-plugin)  
**Docs:** [OpenClaw Plugins](https://docs.openclaw.ai/tools/plugin) · [1claw](https://docs.1claw.xyz)

---

## Features

- **Native agent tools** — 13 tools for secrets, vaults, policies, sharing, and EVM transactions (optional, configurable)
- **Secret redaction** — Scan outbound messages and redact leaked secret values (default on)
- **Secret injection** — Replace `{{1claw:path/to/secret}}` placeholders at prompt time (opt-in)
- **Shroud routing** — Route LLM traffic through [Shroud](https://shroud.1claw.xyz) TEE when the agent has `shroud_enabled` (opt-in)
- **Key rotation monitor** — Background warnings for secrets expiring within 7 days (opt-in)
- **Slash commands** — `/oneclaw`, `/oneclaw-list`, `/oneclaw-rotate` (optional)
- **Gateway RPC** — `1claw.status` for programmatic health/status
- **Bundled skill** — 1claw skill (`skills/1claw/SKILL.md`) auto-discovered by OpenClaw

All features are toggled via `plugins.entries.1claw.config.features`. Auth uses config or env vars.

---

## Install

```bash
openclaw plugins install @1claw/openclaw-plugin
```

Or from the repo (e.g. when developing or using as a submodule):

```bash
openclaw plugins install -l ./path/to/1claw-openclaw-plugin
```

---

## Config

Minimal config (config file or env):

```json5
{
  plugins: {
    entries: {
      "1claw": {
        enabled: true,
        config: {
          apiKey: "ocv_..."
          // agentId, vaultId, baseUrl, shroudUrl optional
          // features: { tools: true, secretRedaction: true, ... }
        }
      }
    }
  }
}
```

**Env fallback:** `ONECLAW_AGENT_API_KEY`, `ONECLAW_AGENT_ID`, `ONECLAW_VAULT_ID`, `ONECLAW_BASE_URL`, `ONECLAW_SHROUD_URL`.

Restart the OpenClaw Gateway after changing config.

---

## Tool names

When enabled, tools are registered with a `oneclaw_` prefix (e.g. `oneclaw_list_secrets`, `oneclaw_get_secret`). Add them to your agent’s `tools.allow` (e.g. `"1claw"` or specific names).

---

## Slash commands

| Command           | Description                                      |
|-------------------|--------------------------------------------------|
| `/oneclaw`        | Connection status, vault info, token TTL, features |
| `/oneclaw-list`   | List secret paths (optional prefix arg)          |
| `/oneclaw-rotate` | Rotate a secret: `/oneclaw-rotate <path> <new-value>` |

---

## Development

```bash
npm install
npm run typecheck
```

- **TypeScript** only (no build step required for OpenClaw; jiti loads `.ts` at runtime).
- Optional: `npm run build` to emit `dist/` (not required for `openclaw plugins install` when using source).

### As a submodule in 1claw

From the [1claw](https://github.com/1clawAI/1claw) repo root:

```bash
git submodule add https://github.com/1clawAI/1claw-openclaw-plugin.git packages/openclaw-plugin
git submodule update --init --recursive
```

Clone 1claw with the submodule:

```bash
git clone --recurse-submodules https://github.com/1clawAI/1claw.git
```

---

## License

MIT © [1claw](https://1claw.xyz)

tools