Secret Wallet

Name: Secret Wallet
Rating: 3.5 (1 reviews)
Author: baekho-lim

By baekho-lim 👁 13 views ▲ 0 votes

OpenClaw Secret Wallet plugin with selective inject and gated tools

GitHub

Install

openclaw plugins install @baekho-lim/openclaw-secret-wallet

Configuration Example

{
  "command": ["node", "server.js"],
  "secretNames": ["OPENAI_KEY", "DB_URL"]
}

README

# OpenClaw Secret Wallet Plugin

OpenClaw plugin for the `secret-wallet` CLI with safer default behavior:

- read tools are available
- write tools are gated (`allowWriteTools=false` by default)
- inject tool is gated (`allowInjectTool=false` by default)
- `secret_wallet_inject` always injects selected secrets via repeated `--only`

## Install

```bash
openclaw plugins install @baekho-lim/openclaw-secret-wallet
```

## Required binary

Install `secret-wallet` first:

```bash
brew install baekho-lim/tap/secret-wallet
```

## Config

```json5
{
  plugins: {
    entries: {
      "secret-wallet": {
        enabled: true,
        config: {
          binaryPath: "/usr/local/bin/secret-wallet",
          allowWriteTools: false,
          allowInjectTool: true,
        },
      },
    },
  },
}
```

`binaryPath` can be omitted to resolve `secret-wallet` from `PATH`.

## Tools

- `secret_wallet_status`
- `secret_wallet_list`
- `secret_wallet_get`
- `secret_wallet_add` (registered only when `allowWriteTools=true`)
- `secret_wallet_remove` (registered only when `allowWriteTools=true`)
- `secret_wallet_inject` (registered only when `allowInjectTool=true`)

`secret_wallet_inject` input:

```json
{
  "command": ["node", "server.js"],
  "secretNames": ["OPENAI_KEY", "DB_URL"]
}
```

This maps to:

```bash
secret-wallet inject --only OPENAI_KEY --only DB_URL -- node server.js
```

## Local development

```bash
pnpm --filter @baekho-lim/openclaw-secret-wallet build
pnpm --filter @baekho-lim/openclaw-secret-wallet test
pnpm --filter @baekho-lim/openclaw-secret-wallet pack:smoke
```

## Contribution note (OpenClaw repository)

When contributing from the OpenClaw monorepo, follow repository guidance and use:

```bash
scripts/committer "<conventional-commit-message>" <files...>
```

tools