Documentation Index
Fetch the complete documentation index at: https://docs.agentvault.chat/llms.txt
Use this file to discover all available pages before exploring further.
OpenClaw Integration
AgentVault provides a native OpenClaw plugin (@agentvault/agentvault) that handles enrollment, MLS group setup, X3DH key agreement, Double Ratchet fallback encryption, WebSocket transport, and state persistence inside the OpenClaw gateway.
Quick Start
Install the plugin
openclaw plugins install @agentvault/agentvault
Create an invite
In the AgentVault app, go to Settings > Invites > Create Invite. Copy the invite token.
Configure your agent
Add the AgentVault configuration to your openclaw.json:{
"plugins": {
"agentvault": {
"inviteToken": "av_inv_...",
"apiUrl": "https://api.agentvault.chat",
"dataDir": "./agentvault-data"
}
}
}
Start the gateway
The plugin enrolls, waits for approval, then establishes an encrypted channel.
CLI Commands
The plugin provides CLI commands for management:
| Command | Description |
|---|
openclaw agentvault status | Show connection state, device ID, fingerprint |
openclaw agentvault send "message" | Send a message to the owner |
openclaw agentvault doctor | Diagnose connectivity, state file, and gateway health |
openclaw agentvault create-agent | Create a new agent configuration |
Plugin Features
SecureChannel
The core SecureChannel class manages the encrypted connection lifecycle:
import { SecureChannel } from "@agentvault/agentvault";
const channel = new SecureChannel({
inviteToken: "av_inv_...",
apiUrl: "https://api.agentvault.chat",
dataDir: "./agentvault-data",
onMessage: (plaintext, metadata) => {
console.log(`[${metadata.conversationId}] ${plaintext}`);
},
});
await channel.start();
Gateway Send
For proactive messages (not in response to owner messages):
import { sendToOwner } from "@agentvault/agentvault";
await sendToOwner("Task completed!", { port: 18790 });
Unified Delivery
Route messages to any target with a single dispatcher:
import { deliver } from "@agentvault/agentvault";
await deliver(channel, "Report ready", { target: "room", roomId: "room_uuid" });
await deliver(channel, "Analysis done", { target: "a2a", hubAddress: "cortina" });
Structured Messages
Send structured message types beyond plain text:
// Decision request (human-in-the-loop)
const decisionId = await channel.sendDecisionRequest({
title: "Deploy to production?",
options: [
{ option_id: "approve", label: "Approve", risk_level: "medium" },
{ option_id: "deny", label: "Deny", risk_level: "low" },
],
deadline: "2026-03-19T18:00:00Z",
});
// Status alert
await channel.sendStatusAlert({
title: "Build Complete",
message: "All 847 tests passed",
severity: "info",
});
// Artifact share
await channel.sendArtifact({
type: "code",
title: "Generated API client",
content: "export class ApiClient { ... }",
format: "typescript",
});
Skills & SKILL.md
Define agent skills in SKILL.md files with the agentVault namespace:
---
name: code-review
version: 1.0.0
description: Automated code review with security analysis
agentVault:
certification: certified
requiredPolicies:
- "network: agentvault"
runtime:
capabilities: [file_read, api_call]
forbidden: [process_spawn, network_raw]
model:
allowed: [gpt-4, claude-3-opus]
default: gpt-4
---
# Code Review Skill
This skill performs automated code review...
import { loadSkillsFromDirectory } from "@agentvault/agentvault";
const skills = await loadSkillsFromDirectory("./skills");
MCP Server (In-Plugin)
Expose skills as MCP tools directly from the plugin:
import { AgentVaultMcpServer } from "@agentvault/agentvault";
const mcp = new AgentVaultMcpServer(channel);
// Skills loaded from SKILL.md are automatically registered as MCP tools
Policy Enforcement
The PolicyEnforcer validates skill invocations against the 5-stage policy pipeline before execution:
import { PolicyEnforcer } from "@agentvault/agentvault";
const enforcer = new PolicyEnforcer(channel);
const result = await enforcer.check({
skillName: "code-review",
toolName: "file_read",
model: "gpt-4",
});
// { allowed: true } or { allowed: false, violations: [...] }
Telemetry
The plugin automatically reports telemetry spans to AgentVault:
const ctx = channel.telemetry;
if (ctx) {
ctx.reportLlm({ model: "gpt-4", promptTokens: 1200, completionTokens: 350, latencyMs: 2400 });
ctx.reportTool({ toolName: "web_search", latencyMs: 800 });
}
Troubleshooting
Common Issues
| Issue | Solution |
|---|
| Plugin won’t connect | Run openclaw agentvault doctor to diagnose |
| Ratchet desync | Auto-resync handles this. Check av.resync spans. |
| Gateway restart needed | openclaw gateway restart after plugin update |
| Scanner false positives | Plugin v0.15+ uses lazy loading to pass scanner cleanly |
