Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
- SKILL.md significantly updated for clarity, conciseness, and easier onboarding. - Audience refocus: emphasizes agent and end-user security, user control, and setup simplicity. - Adds quick start, usage, troubleshooting, and explicit security sections. - Highlights install command, service requirements, and provider compatibility. - Updates metadata for improved integration and discoverability. - Removes older SKILL.md sections now superseded by new structured documentation.
What This Skill Does
Keychains proxies API requests from AI agents, replacing placeholder variables like {{OAUTH2_ACCESS_TOKEN}} with real credentials server-side. The agent never handles actual tokens or keys. Users approve credential access once via biometric on keychains.dev, and all subsequent requests to that provider succeed automatically.
Unlike passing real API keys to agents directly, Keychains keeps credentials in the user's encrypted vault and injects them only at proxy time, so a compromised agent cannot exfiltrate secrets.
When to use it
- Letting an AI agent list GitHub repos without exposing a personal access token
- Sending Slack messages from an agent using an OAuth token the agent never sees
- Reading Gmail inbox from an automated workflow without storing credentials locally
- Making Stripe API calls from an agent without hardcoding secret keys
- Delegating API access to a cloud-hosted agent without sharing credentials directly
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: List my GitHub repositories
- 1Run `keychains curl https://api.github.com/user/repos -H 'Authorization: Bearer {{OAUTH2_ACCESS_TOKEN}}'`
- 2Keychains returns an approval URL on first use — display it to the user
- 3Run `keychains wait <approval-url>` to poll until the user approves via biometric
- 4Replay the original command — Keychains injects the real token and forwards the request
- 5Return the API response to the user
JSON list of the user's GitHub repositories
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.