1claw
HSM-backed secret management for AI agents.
Install
npx skills add BankrBot/skills --skill 1claw -g -a claude-code -y- Repository
- BankrBot/skills1.2k
- Category
- Security
- Updated
- 5d ago
- License
- See repository
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- Yes, review before use
What it does
HSM-backed secret management for AI agents. Store API keys (including Bankr `bk_` keys), passwords, and credentials in an encrypted vault; retrieve them at runtime via MCP without keeping secrets in chat context. Bankr Dynamic Key Vending issues short-lived scoped `bk_usr_` keys from a partner key (`bk_ptr_`) without manual rotation. Policy-based access control, secret rotation, sharing, EVM transaction intents (sign/simulate/broadcast), multi-chain signing keys, treasury multisig proposals, OIDC federation for external service auth, built-in prompt injection detection, and optional Shroud TEE LLM proxy. Use when the agent needs secure credential storage, just-in-time secret access, guarded on-chain signing, or security scanning, not for Bankr trading prompts, portfolio checks, or x402 calls (use the bankr skill instead).
1Claw, HSM-Backed Secrets for AI Agents
1Claw is a policy-gated secrets vault for autonomous agents. Secrets are encrypted with keys that never leave hardware security modules (HSMs); agents fetch values at runtime through MCP or the REST API instead of embedding credentials in prompts.
| Resource | URL |
|---|---|
| API | https://api.1claw.xyz |
| Dashboard | https://1claw.xyz |
| Docs | https://docs.1claw.xyz |
| Shroud (TEE LLM + signing) | https://shroud.1claw.xyz |
| OpenAPI spec | @1claw/openapi-spec on npm |
| Canonical skill (full) | https://github.com/1clawAI/1claw-skill |
