Tools
Trukyc Openclaw
By Copy of skills,plugins,cloudflare worker etc for openclaw
Install
npm install
npmConfiguration Example
"plugins": {
"load": {
"paths": [
"/path/to/trukyc-openclaw/trukyc-handler"
]
},
"entries": {
"trukyc-pairing": {
"enabled": true,
"config": {}
}
},
"installs": {
"trukyc-pairing": {
"source": "path",
"sourcePath": "/path/to/trukyc-openclaw/trukyc-handler",
"installPath": "/path/to/trukyc-openclaw/trukyc-handler",
"version": "1.0.0",
"installedAt": "2026-03-20T21:50:28.059Z"
}
}
}README
# TruKYC Guardrail for OpenClaw
> Stop AI agents from executing dangerous actions without human approval.
TruKYC integrates **OpenClaw agents** with the **TruClaw iOS app** to require **human validation for risky agent actions** before they execute.
This allows developers and enterprises to safely run autonomous agents without risking unintended **financial transactions, infrastructure changes, or other high-impact actions**.
---
# Demo
Short demo showing the flow:
1. A harmless **check positions** command executes normally
2. A **sell order** triggers an approval notification on the iPhone
3. The trade executes only after **human approval in the TruClaw app**
[](https://youtube.com/shorts/YJ6W6gcMNew)
---
# The Problem
AI agents with tool access can execute **real-world actions**:
* financial trades
* infrastructure changes
* database operations
* sending emails or messages
Without guardrails, a **hallucination, prompt injection, or tool misuse** could trigger these actions automatically.
TruClaw adds a simple safety primitive:
> **High-risk agent actions require approval on a trusted mobile device.**
---
# How It Works
```
OpenClaw Agent
│
│ risky action detected
▼
TruKYC Plugin (trukyc-handler)
│
▼
TruKYC Relay (Cloudflare Worker + Firebase Messaging)
│
| Push Notification
▼
TruClaw iOS App
│
│ human approval/ignore
▼
Action allowed / denied
```
This ensures:
* agents **cannot silently execute dangerous actions**
* the **human stays in the loop**
* approvals happen **out-of-band on a trusted device**
---
# Prerequisites
Before installing the plugin you will need:
* **OpenClaw 3.28+**
* **Node.js 18+**
* **Anthropic API key**
* **TruClaw iOS app installed on an iPhone**
---
# Installation
## 1. Install TruClaw (iOS) & onboard
## Demo Video
[](https://youtu.be/9qI_pPATIjs)
## 2. Clone the repository
```bash
git clone https://github.com/sanjaymk908/trukyc-openclaw.git
cd trukyc-openclaw/trukyc-handler
```
---
## 3. Install dependencies and build
```bash
npm install
npm run build
```
---
## 4. Add plugin to `openclaw.json`
Add the plugin path:
```json
"plugins": {
"load": {
"paths": [
"/path/to/trukyc-openclaw/trukyc-handler"
]
},
"entries": {
"trukyc-pairing": {
"enabled": true,
"config": {}
}
},
"installs": {
"trukyc-pairing": {
"source": "path",
"sourcePath": "/path/to/trukyc-openclaw/trukyc-handler",
"installPath": "/path/to/trukyc-openclaw/trukyc-handler",
"version": "1.0.0",
"installedAt": "2026-03-20T21:50:28.059Z"
}
}
}
```
---
## 5. Add environment variables
Add these to the `env` section of `openclaw.json`:
```json
"env": {
"TRUKYC_RELAY_URL": "https://trukyc-relay.trusources.workers.dev",
"ANTHROPIC_API_KEY_TRUKYC": "your-anthropic-api-key"
}
```
---
## 6. Restart OpenClaw
```bash
openclaw gateway stop
sleep 3
openclaw gateway install
sleep 5
```
---
## 7. Verify plugin loaded
```bash
openclaw plugins list | grep TruKYC
```
---
## 8. Pair your iPhone
Send the pairing command in the messaging channel setup for OpenClaw:
```
/trukyc-pair
```
You will receive a link in response.
Then:
1. Tap the pairing link on your iPhone where you installed TruClaw & onboarded youself.
2. This should automatically open the **TruClaw app**
3. Confirm pairing
Your device is now registered as an **approval authority**.
---
# Example Interaction
### Safe Action (No Approval Required)
```
with trader skill check positions
```
---
### Risky Action (Approval Required)
```
with trader skill buy NVDA at $165
```
Flow:
1. Agent attempts trade
2. TruKYC intercepts the action
3. Approval request sent to the TruClaw iPhone app
4. User approves the request
5. Trade executes
If the user **denies the request** OR **user ignore notification**, the action is **blocked**.
---
# Security Properties
TruClaw helps protect against:
* agent hallucinations executing dangerous commands
* prompt injection triggering tool misuse
* unintended autonomous financial actions
* unauthorized automation
Key properties:
* **human-in-the-loop validation**
* **out-of-band approval channel**
* **trusted mobile device authorization**
---
# License
MIT
---
tools
Comments
Sign in to leave a comment