clawlock
Identity, credential vault, and audit security for AI agents. ClawLock gives every AI agent its own Ed25519 cryptographic identity, stores A
Open source Repository Open in the app JSON README (API)
About
Identity, credential vault, and audit security for AI agents. ClawLock gives every AI agent its own Ed25519 cryptographic identity, stores API keys in an AES-256-GCM encrypted vault, enforces least-privilege scopes, and maintains an immutable audit trail of every action. Includes 4 auto-activating skills (security scanning, agent identity management, credential vault, audit log analysis) plus 14 MCP tools via the built-in ClawLock MCP server. Works with Claude Code, Claude Cowork, OpenClaw, and any MCP studio client.
Details
- Kind
- Plugins
- Topic
- Security & identity
- Publisher
- palmcoast
- Origin
- marketplace
- Category
- ferramentas
- Open pull requests
- 1
- Last push
- 2026-08-12T20:18:40Z
- Repository state
- ativo
- Added
- 2026-08-30 01:48:58
- Updated
- 2026-08-30 01:48:58
- Origin id
palmcoast/clawlock-plugin/clawlock
README
# ClawLock — Identity & Security for AI Agents **The Claude Code plugin that gives your AI agents cryptographic identity, encrypted credential storage, and immutable audit trails.** ## Why ClawLock? 218,000+ AI agents deployed. Most run on shared credentials with no identity, no audit trail, and no access control. ClawLock fixes that. - **53% of MCP servers** use static API keys - **79% pass credentials** via plain environment variables - **30% of live MCP servers** have zero authentication ## What You Get ### 4 Skills (auto-activate when relevant) | Skill | Triggers On | |---|---| | `/clawlock:security-scan` | Security reviews, credential audits, MCP config checks | | `/clawlock:agent-identity` | Agent registration, permissions, multi-agent setup | | `/clawlock:credential-vault` | API key storage, secret management, key rotation | | `/clawlock:audit-log` | Activity review, incident investigation, compliance | ### 14 MCP Tools (via built-in MCP server) **Identity:** Register, get, list, suspend, revoke agents — each with Ed25519 keypair **Vault:** Store, retrieve, list, revoke credentials — AES-256-GCM encrypted **Audit:** Query immutable audit log with filters **System:** Check status, activate license ## Installation ### From the Official Marketplace ```bash /plugin install clawlock@claude-plugins-official ``` ### Manual Installation ```bash claude plugin marketplace add PalmCoast/clawlock-plugin claude plugin install clawlock@PalmCoast-clawlock-plugin ``` ### Requirements - Node.js >= 18 - Claude Code or Claude Cowork ## Quick Start Once installed, the skills activate automatically. Try: 1. **"Scan this project for security issues"** — triggers security-scan skill 2. **"Register an agent for my deploy bot"** — triggers agent-identity skill 3. **"Store my OpenAI API key securely"** — triggers credential-vault skill 4. **"Show me recent agent activity"** — triggers audit-log skill ## Pricing The security scan skill works standalone (no MCP server needed). For full identity + vault + audit functionality: | Tier | Price | Agents | Features | |---|---|---|---| | Trial | Free 48hr | 2 | Full features | | Starter | $29/mo | 5 | Core features | | Pro | $79/mo | 25 | + Auto-rotation | | Enterprise | $249/mo | Unlimited | + SSO, SLA | Purchase: [clawlock-security.netlify.app](https://clawlock-security.netlify.app) ## Compatibility Works with: Claude Code, Claude Cowork, OpenClaw, and any MCP stdio client. ## License BUSL-1.1 — Built by [AgentHive Inc.](https://agenthiveinc.com) **Lock your claws.** 🔒🐝