Agent skill · security · bankrbot
1claw
HSM-backed secret management for AI agents. Store API keys (including Bankr `bk_` keys), passwords, and credentials in an encrypted vault; retrieve them at runtime via MCP without keeping secrets in chat context. Bankr Dynamic Key Vending issues short-lived scoped `bk_usr_` keys from a partner key (`bk_ptr_`) without manual rotation. Policy-based access control, secret rotation, sharing, EVM transaction intents (sign/simulate/broadcast), multi-chain signing keys, treasury multisig proposals, OIDC federation for external service auth, built-in prompt injection detection, and optional Shroud TEE LLM proxy. Use when the agent needs secure credential storage, just-in-time secret access, guarded on-chain signing, or security scanning — not for Bankr trading prompts, portfolio checks, or x402 calls (use the bankr skill instead).
Why this skill is useful
Adds a comprehensive suite of HSM-backed secret management capabilities, including policy-based access control and multi-chain signing that the AI cannot generate on its own.
What it needs
Requires @1claw/openapi-spec installed locally. Requires 1claw account access. About 11k tokens when loaded. Last updated 2026-08-06. 1,172 stars on the source repository.
What this skill does
1Claw — HSM-Backed Secrets for AI Agents 1Claw is a policy-gated secrets vault for autonomous agents. Secrets are encrypted with keys that never leave hardware security modules (HSMs); agents fetch values at runtime through MCP or the REST API instead of embedding credentials in prompts. Resource URL --- --- API https://api.1claw.xyz Dashboard https://1claw.xyz Docs https://docs.1claw.xyz Shroud (TEE LLM + signing) https://shroud.1claw.xyz OpenAPI spec @1claw/openapi-spec on npm Canonical skill (full) https://github.com/1clawAI/1claw-skill --- Key capabilities HSM envelope encryption — AES-256-GCM DEKs wrapped by Google Cloud KMS (HSM-backed) KEKs Policy-based access control — agents get zero access until a human explicitly grants path-level policies 36 MCP tools — secrets CRUD, signing, transactions, Bankr key leasing, treasury proposals, platform bootstrap, approvals, security inspection Multi-chain signing keys — Ethereum, Bitcoin, Solana, XRP, Cardano, Tron (private keys never leave the vault) Transaction guardrails — per-agent chain allowlists, address allowlists, per-tx caps, daily spend limits OIDC federation — 1claw is a JWKS-published issuer; agents can get RS256 tokens for external services (Anthropic WIF, GCP STS, AWS STS) without static keys MPC secret storage — DEKs split across 2-of-3 HSMs (GCP + AWS + Azure) or XOR 2-of-2 client custody Exfil protection — MCP server blocks secret leakage by default (tracks fetched values and blocks re-emission) inspectcontent (free, no vault) — prompt injection / threat scanning without any credentials Shroud TEE proxy — inspected LLM traffic + confidential signing in AMD SEV-SNP enclaves Platform API — build applications on top of 1claw (bootstrap users, provision vaults, issue plt keys) Treasury multisig — Safe proposals with threshold signing and auto-execute Human-in-the-loop approvals — agents request policy changes; humans approve/deny Secret versioning and rotation — every write creates a new version; server-ge …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills bankrbot/1claw