218,000+ agents deployed. Zero have their own identity.

Lock Your Claws

MCP-native identity, credential vault, and audit layer for every AI agent in the Claw ecosystem. Ed25519 keys. AES-256 encryption. Immutable audit logs. Works everywhere.

Get ClawLock View Source

The Claw Ecosystem Has a Security Problem

53%

of MCP servers use static API keys

79%

pass credentials via plain env vars

30%

of live MCP servers have zero auth

58%

of agent safety scenarios are failing

What ClawLock Does

🗇

Agent Identity

Ed25519 cryptographic keypairs. Every agent gets its own verifiable identity. No more shared human credentials.

🔒

Credential Vault

AES-256-GCM encrypted storage. API keys never stored in plain text or env vars. Agent-scoped access controls.

📊

Audit Ledger

Immutable log of every credential access, scope check, and agent action. Filterable, paginated, tamper-evident.

🛡

Scope Enforcement

Least-privilege controls. Agents only access what they are authorized for. Deny-by-default with explicit grants.

🔄

Auto-Rotation

Credentials rotate on schedule. No more stale tokens in config files. Set it and forget it.

🌐

Portable Identity

Works across any MCP runtime. Claude Desktop, OpenClaw, PicoClaw, ZeroClaw, IronClaw, TinyClaw, and more.

Get Running in 60 Seconds

# Install
git clone https://github.com/PalmCoast/clawlock-mcp-server.git
cd clawlock-mcp-server
npm install && npm run build

# Add to Claude Desktop (claude_desktop_config.json)
{
  "mcpServers": {
    "clawlock": {
      "command": "node",
      "args": ["./dist/index.js"]
    }
  }
}

# Register your first agent
clawlock_register_agent(name: "my-agent", scopes: ["read:vault", "write:vault"])

# Store a credential
clawlock_store_credential(agent_id: "ag_xxx", service: "openai", key: "sk-...")

# Use it (decrypted on-the-fly, logged to audit)
clawlock_use_credential(agent_id: "ag_xxx", credential_id: "cred_xxx")

Compatible With Every Claw Runtime

✓ OpenClaw

✓ PicoClaw

✓ ZeroClaw

✓ IronClaw

✓ TinyClaw

✓ MimiClaw

✓ Claude Desktop

✓ Any MCP stdio client

Security Is Not Free

48-hour trial with full access. Then pick your plan.

Starter

$29/mo

For solo builders securing their first agents.

5 agent identities
Credential vault (AES-256)
Basic audit logs
Single user
Email support

Start Trial

Pro