ClawKey for Openclaw

A verifiable identity layer for AI agents that bonds digital keys to physical human owners via biometric palm verification.

oyyblin
v1.0.2
Feb 11, 2026
1
2k
7

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install clawkey

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install clawkey using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is ClawKey?

ClawKey provides a robust framework for establishing verifiable human ownership for Openclaw Skills and other autonomous agents. By integrating VeryAI palm verification, it bridges the gap between digital agent actions and physical human accountability, ensuring that every agent operation is backed by a verified identity. This skill is essential for developers building high-trust Openclaw Skills that require biometric proof of ownership for sensitive operations.

ClawKey Use Cases

  • Registering a new agent under a specific human owner's identity to enhance security for Openclaw Skills.
  • Providing proof of human ownership to third-party services before granting elevated API access.
  • Verifying the authenticity of agent signatures in complex multi-agent workflows.
  • Building trust in autonomous systems through biometric-backed identity verification.

How ClawKey Works

  1. The agent generates a signed AgentChallenge using its local Ed25519 private key found in its Openclaw Skills identity store.
  2. The agent initiates a registration session via the ClawKey API using a secure challenge-response flow.
  3. A unique registration URL is generated for the human owner to complete VeryAI palm verification.
  4. The human completes the biometric scan in a browser (the agent must never open the browser itself).
  5. The agent polls the status endpoint to confirm successful registration and ownership binding.

ClawKey Setup

Ensure your agent has access to its identity file at ~/.openclaw/identity/device.json. To start the registration process for your Openclaw Skills, use the following API call:

curl -X POST https://api.clawkey.ai/v1/agent/register/init \
  -H "Content-Type: application/json" \
  -d '{
    "deviceId": "your-device-id",
    "publicKey": "base64-encoded-spki",
    "message": "clawkey-register-timestamp",
    "signature": "base64-signature",
    "timestamp": 1738500000000
  }'

ClawKey Data Schema & Taxonomy

ClawKey utilizes a standardized AgentChallenge schema to manage identity within the Openclaw Skills ecosystem. It relies on the local device.json file for secure key management.

Field Type Description
deviceId string Stable identifier for the agent device.
publicKey string Ed25519 public key in base64 DER SPKI format.
message string The specific string signed by the agent for verification.
signature string The resulting cryptographic signature (base64).
timestamp int64 Unix timestamp in milliseconds for replay protection.

ClawKey Advanced Features

  • Remote Signature Verification: Confirm that messages were signed by a registered agent within the Openclaw Skills network.
  • Device Identity Lookup: Query the biometric registration status of any device ID.
  • Secure Key Handling: Uses Ed25519 keys without ever exposing the private key to external servers.
  • Replay Protection: Timestamps and unique challenges ensure the security of every identity transaction.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*