Back to the catalog

clawlock

Identity, credential vault, and audit security for AI agents. ClawLock gives every AI agent its own Ed25519 cryptographic identity, stores A

Open source Repository Open in the app JSON README (API)

About

Identity, credential vault, and audit security for AI agents. ClawLock gives every AI agent its own Ed25519 cryptographic identity, stores API keys in an AES-256-GCM encrypted vault, enforces least-privilege scopes, and maintains an immutable audit trail of every action. Includes 4 auto-activating skills (security scanning, agent identity management, credential vault, audit log analysis) plus 14 MCP tools via the built-in ClawLock MCP server. Works with Claude Code, Claude Cowork, OpenClaw, and any MCP studio client.

Details

Kind
Plugins
Topic
Security & identity
Publisher
palmcoast
Origin
marketplace
Category
ferramentas
Open pull requests
1
Last push
2026-08-12T20:18:40Z
Repository state
ativo
Added
2026-08-30 01:48:58
Updated
2026-08-30 01:48:58
Origin id
palmcoast/clawlock-plugin/clawlock

README

# ClawLock — Identity & Security for AI Agents

**The Claude Code plugin that gives your AI agents cryptographic identity, encrypted credential storage, and immutable audit trails.**

## Why ClawLock?

218,000+ AI agents deployed. Most run on shared credentials with no identity, no audit trail, and no access control. ClawLock fixes that.

- **53% of MCP servers** use static API keys
- **79% pass credentials** via plain environment variables
- **30% of live MCP servers** have zero authentication

## What You Get

### 4 Skills (auto-activate when relevant)

| Skill | Triggers On |
|---|---|
| `/clawlock:security-scan` | Security reviews, credential audits, MCP config checks |
| `/clawlock:agent-identity` | Agent registration, permissions, multi-agent setup |
| `/clawlock:credential-vault` | API key storage, secret management, key rotation |
| `/clawlock:audit-log` | Activity review, incident investigation, compliance |

### 14 MCP Tools (via built-in MCP server)

**Identity:** Register, get, list, suspend, revoke agents — each with Ed25519 keypair
**Vault:** Store, retrieve, list, revoke credentials — AES-256-GCM encrypted
**Audit:** Query immutable audit log with filters
**System:** Check status, activate license

## Installation

### From the Official Marketplace

```bash
/plugin install clawlock@claude-plugins-official
```

### Manual Installation

```bash
claude plugin marketplace add PalmCoast/clawlock-plugin
claude plugin install clawlock@PalmCoast-clawlock-plugin
```

### Requirements

- Node.js >= 18
- Claude Code or Claude Cowork

## Quick Start

Once installed, the skills activate automatically. Try:

1. **"Scan this project for security issues"** — triggers security-scan skill
2. **"Register an agent for my deploy bot"** — triggers agent-identity skill
3. **"Store my OpenAI API key securely"** — triggers credential-vault skill
4. **"Show me recent agent activity"** — triggers audit-log skill

## Pricing

The security scan skill works standalone (no MCP server needed). For full identity + vault + audit functionality:

| Tier | Price | Agents | Features |
|---|---|---|---|
| Trial | Free 48hr | 2 | Full features |
| Starter | $29/mo | 5 | Core features |
| Pro | $79/mo | 25 | + Auto-rotation |
| Enterprise | $249/mo | Unlimited | + SSO, SLA |

Purchase: [clawlock-security.netlify.app](https://clawlock-security.netlify.app)

## Compatibility

Works with: Claude Code, Claude Cowork, OpenClaw, and any MCP stdio client.

## License

BUSL-1.1 — Built by [AgentHive Inc.](https://agenthiveinc.com)

**Lock your claws.** 🔒🐝

More