Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Remove internal spec from published package.
What This Skill Does
Agent Passport adds a consent layer between AI agents and sensitive actions. Users grant time-limited mandates that define what an agent can do, to whom, and under what constraints. Covers shell commands, emails, file writes, API calls, purchases, and public posts as distinct action categories with separate allowlists and rate limits.
Replaces all-or-nothing agent permissions with granular, expiring mandates scoped by action type, target, and rate limit rather than requiring a trust decision on the entire agent.
When to use it
- Limiting agent email sending to a specific company domain for 30 days
- Setting a per-transaction spending cap on automated purchases
- Freezing all agent actions instantly with the kill switch
- Reviewing an audit trail of every command an agent ran
- Granting temporary file write access to a specific folder path
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Allow my agent to send emails to my team at company.com
- 1Run mandate-ledger.sh create-from-template email-team company.com
- 2Confirm the mandate is created with the correct domain allowlist and daily rate limit
- 3Before sending any email, call check-action with category 'communication' and the recipient address
- 4On authorized: true, send the email and call log-action with the mandate ID and a human-readable description
Agent can send emails to *@company.com within the configured rate limit; every send is recorded in the audit trail
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.