इंटीग्रेशन गाइड
clavitor + OpenClaw
Your OpenClaw agent manages credentials, rotates API keys, and completes 2FA — all from a single CLI call. Personal data stays sealed behind your fingerprint, face, or security key.
What your agent sees
साझा फ़ील्ड्स
Your agent reads these to authenticate, deploy, and automate.
- API keys (GitHub, AWS, Stripe, OpenAI...)
- SSH होस्ट क्रेडेंशियल्स
- डेटाबेस कनेक्शन स्ट्रिंग्स
- TOTP सीड्स — जरूरत पड़ने पर लाइव 2FA कोड्स
- सर्विस अकाउंट पासवर्ड्स
What your agent never sees
पर्सनल फ़ील्ड्स
आपके फिंगरप्रिंट, फेस या सिक्योरिटी की के साथ क्लाइंट-साइड एन्क्रिप्टेड। सर्वर साइफरटेक्स्ट स्टोर करता है। कोई कुंजी नहीं, तो कोई एक्सेस नहीं।
- क्रेडिट कार्ड नंबर और CVV
- पासपोर्ट और गवर्नमेंट IDs
- रिकवरी कोड और सीड फ्रेज
- सोशल सिक्योरिटी नंबर्स
- बैंक अकाउंट डिटेल्स
Connect in 60 seconds
1. एक एजेंट बनाएं
Open your vault -> Agents -> Create. Name it and choose which entries it can access. Copy the setup token.
2. CLI को इनिशियलाइज़ करें
$ echo "$CLAVITOR_TOKEN" | clavitor-cli init
3. Resolve credentials at startup
Replace hardcoded keys in your OpenClaw config with clavitor:// references, then render at launch:
{
"providers": {
"openrouter": { "apiKey": "clavitor://OpenRouter API/key" },
"fireworks": { "apiKey": "clavitor://Fireworks.ai/key" }
}
}$ clavitor-cli render openclaw.json | openclaw start --config -
You don't have to do anything
Once connected, your OpenClaw agent handles credentials automatically. It looks up what it needs, generates 2FA codes, and authenticates — you just describe what you want done.
"Deploy to production"
Your agent looks up server credentials, SSH key, and any required API tokens — then does the deployment.
clavitor-cli get "aws-production" --field secret_key clavitor-cli totp "aws" 283941
"Log in to GitHub and check the CI"
Your agent finds the credential, generates a live TOTP code, and completes the 2FA flow. No phone needed.
clavitor-cli get "github" --field password clavitor-cli totp "github" 847203
"Save this API key"
Your agent stores new credentials directly via clavitor-cli put. Sign up for a service, generate an API key — saved immediately, encrypted at the credential tier.
"Remember this for later"
License keys, server configs, migration plans — written via clavitor-cli memory put or clavitor-cli note put. Encrypted, searchable by embedding from any later agent session.
Multi-agent swarm support
Running a swarm of OpenClaw agents? Each gets its own agent token and scopes.
Deploy agent
Scoped to SSH keys, server creds, and API tokens
Billing agent
Scoped to Stripe, payment gateways, and invoicing
Dev agent
Scoped to GitHub, CI/CD, and database credentials
हर एक्सेस लॉग किया जाता है
The audit log records which agent accessed which credential, when, and from where.
# TIME ACTION ENTRY ACTOR 2026-03-08 10:23:14 read github.com cli:claw-deploy 2026-03-08 10:23:15 totp github.com cli:claw-deploy 2026-03-08 11:45:02 read aws-production cli:claw-billing 2026-03-08 14:12:33 render - cli:claw-dev