Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
No changes detected in this version. - Version 1.0.0 released. - No file changes since the previous release.
What This Skill Does
1Claw is a cloud HSM-backed secrets vault for AI agents. Agents retrieve API keys, passwords, and credentials at runtime without the values ever entering conversation context or LLM responses. Secrets are encrypted with keys that never leave the HSM.
Secrets are fetched just-in-time and never appear in model context, eliminating the primary credential leakage vector in agentic workflows.
When to use it
- Fetching a stored API key just before calling a third-party service
- Storing a newly generated credential after account creation
- Rotating an API key immediately after regenerating it at a provider
- Sharing a discovered secret back to the human who deployed the agent
- Signing an EVM transaction without reading the private key directly
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Use my Stripe API key to check the account balance
- 1Call list_secrets to discover available credentials in the vault
- 2Call describe_secret on 'api-keys/stripe' to confirm it exists and is not expired
- 3Call get_secret on 'api-keys/stripe' to retrieve the decrypted value
- 4Pass the key directly to the Stripe API request without storing or echoing it
- 5Return the account balance result to the user
Account balance returned; the API key value never appears in the response or conversation history
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.