← Index

1Claw Vault

io.github.1clawAI/1claw-mcp·v0.31.1·Security

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The hybrid eval runs adversarial cases first; coverage rolls out as the corpus expands (15 of 150 labels to graduation). Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: hybrid eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
ONECLAW_AGENT_API_KEY
secret

Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.

ONECLAW_AGENT_ID

Optional agent UUID when pinning identity (usually auto-discovered from the API key).

ONECLAW_VAULT_ID

Optional vault UUID when the agent can access multiple vaults.

ONECLAW_BASE_URL

Vault API base URL (default https://api.1claw.xyz).

ONECLAW_LOCAL_ONLY

Set to true for security-only mode (inspect_content only; no vault credentials).

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
20
installability
25
documentation
15
stability
5
Alternatives in Security