botauth for Openclaw

A secure CLI-based skill for retrieving secrets and credentials from a desktop vault with human-in-the-loop approval.

eyhn
v0.1.0
Mar 10, 2026
0
819
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install botauth

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install botauth using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is botauth?

The botauth skill provides a secure bridge between your AI agent and your local credential vault. By leveraging Openclaw Skills, developers can allow their agents to safely access sensitive information like API tokens and passwords without compromising security. Every retrieval request can trigger a desktop notification for manual approval, ensuring that you maintain full control over which secrets are shared during an automated workflow. This integration is essential for workflows that require authenticated access to external services while keeping credentials encrypted and private.

botauth Use Cases

  • Retrieving API keys or tokens to complete software integration tasks.
  • Filling .env files or configuration templates from an existing secure vault.
  • Accessing platform-specific credentials for GitHub, OpenAI, or AWS during coding sessions.
  • Requesting the user to securely add new credentials via a desktop-guided flow without exposing them in shell history.

How botauth Works

  1. The agent initializes the session by checking the connection status to ensure the desktop vault is unlocked and accessible.
  2. The skill performs a search or lists available credentials based on keywords, providers, or tags defined by the user.
  3. Secret metadata is retrieved first to identify the specific record needed for the task.
  4. Sensitive fields are requested specifically, which triggers a secure approval prompt on the user's desktop application.
  5. Upon user approval, the skill provides the sensitive value and a short-lived access key to streamline subsequent requests in the same workflow session.

botauth Setup

Ensure the botauth CLI is installed and available in your system PATH. The botauth desktop application must be running and the vault must be in an unlocked state before the Openclaw Skills integration can interact with your data.

# Verify the connection to the desktop app
botauth status

# List available secrets to confirm access
botauth list

botauth Data Schema & Taxonomy

The skill interacts with structured credential data stored in the local vault. Metadata includes provider names, tags, and unique IDs, while sensitive data is isolated into specific fields.

Component Description
Secret ID Unique identifier for the specific credential record
Provider The service name associated with the secret (e.g., github, stripe)
Tags User-defined labels for filtering (e.g., dev, production, ci)
Fields Specific sensitive keys such as api_key, client_secret, or password
Access Key A temporary token used to authorize multiple requests without repeated prompts

botauth Advanced Features

  • Support for multi-field retrieval in a single command to reduce workflow friction.
  • Use of short-lived access keys to minimize redundant desktop approval prompts during complex tasks.
  • Integration with machine-readable JSON output for precise agent processing and automation.
  • Secure desktop-bridged flow for adding new secrets, ensuring sensitive data never touches the terminal or agent logs directly.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*