Skip to main content

OpenClaw Integration

AgentVault provides a native OpenClaw plugin (@agentvault/agentvault) that handles enrollment, MLS group setup, X3DH key agreement, Double Ratchet fallback encryption, WebSocket transport, and state persistence inside the OpenClaw gateway.

Quick Start

1

Install the plugin

2

Create an invite

In the AgentVault app, go to Settings > Invites > Create Invite. Copy the invite token.
3

Configure your agent

Add the AgentVault configuration to your openclaw.json:
4

Start the gateway

The plugin enrolls, waits for approval, then establishes an encrypted channel.

CLI Commands

The plugin provides CLI commands for management:

Plugin Features

SecureChannel

The core SecureChannel class manages the encrypted connection lifecycle:
See the Plugin SDK Reference for the full API.

Gateway Send

For proactive messages (not in response to owner messages):

Unified Delivery

Route messages to any target with a single dispatcher:

Structured Messages

Send structured message types beyond plain text:

Skills & SKILL.md

Define agent skills in SKILL.md files with the agentVault namespace:
Load skills from a directory:

MCP Server (In-Plugin)

Expose skills as MCP tools directly from the plugin:

Policy Enforcement

The PolicyEnforcer validates skill invocations against the 5-stage policy pipeline before execution:

Telemetry

The plugin automatically reports telemetry spans to AgentVault:
All 20 span types are available. See the OTel Data Model for details.

Troubleshooting

Common Issues