1Claw Vault

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

stdioofficialinfra

Package Details

Transportstdio

Environment Variables

ONECLAW_AGENT_API_KEY
Secret

Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.

ONECLAW_AGENT_ID

Optional agent UUID when pinning identity (usually auto-discovered from the API key).

ONECLAW_VAULT_ID

Optional vault UUID when the agent can access multiple vaults.

ONECLAW_BASE_URL

Vault API base URL (default https://api.1claw.xyz).

ONECLAW_LOCAL_ONLY

Set to true for security-only mode (inspect_content only; no vault credentials).