GitHub Repository

🔱 API key protection for AI agents. Credentials stay in your vault, never in the agent's memory.

32 starsTypeScript

Aquaman keeping your OpenClaw secrets safe

Name: Aquaman keeping your OpenClaw secrets safe
Availability: InStock
Author: tech4242

by tech4242·Feb 12, 2026·1 point·0 comments

Visit Project View on HN

AI Analysis

●●SolidNiche GemSolve My Problem

The Take

The plugin-proxy split is smart: credentials live in a backend (Keychain/1Password/Vault/etc.) and a separate proxy injects auth headers over a UDS so the agent process never handles raw keys. It autosurveys plugin configs and channels to migrate plaintext secrets and even ships a Docker image and CLI for local setups — very practical for anyone already on OpenClaw, though it’s narrowly focused and adds an extra trusted component that deserves an audit.

Post Description

Created this proxy & plugin setup to isolate credentials. Hope this is a welcome patch for anyone worried about their credentials and supply chain attacks. OpenClaw is cool being as open as it is but here are some batteries.