Ecosystem

LangChain

LangChain

LangGraph ReAct agent where every LLM call is routed through Shroud — 20 layers of inspection, vault-managed provider keys, and tool secrets fetched at runtime so nothing enters the LLM context. Quick start: `1claw spawn langchain`.

Scaffold-Agent

1Claw

Build onchain AI agents with Scaffold-ETH 2 and 1Claw. A starter kit that wires HSM-backed secrets and Intents API signing into a full-stack dApp scaffold.

Pinata Agents

Pinata

OpenClaw workspace template for Pinata Agents. Agents self-enroll with 1Claw, fetch secrets at runtime from the vault, and route LLM traffic through Shroud — all from a single ocv_ key.

OpenClaw

OpenAI

Official gateway plugin for the OpenClaw agent runtime: native 1claw tools, slash commands, secret redaction, optional Shroud LLM routing, and a bundled skill — HSM-backed secrets and Intents from one agent API key.

Hermes Agent

Nous Research

TypeScript integration for Hermes Agent — MCP-based secret fetching, Shroud LLM sidecar, per-subagent scoped identities, and Intents API transaction signing with client-side guardrails.

ElizaOS

ai16z

elizaOS plugin giving any character runtime access to a 1Claw vault and signing keys — HSM-backed secrets, EVM/Solana/BTC/XRP/Cardano/Tron signing, and optional Shroud TEE LLM proxy. One ocv_ key, 8 actions, zero raw keys in context. Quick start: `1claw spawn elizaos`.

CrewAI

CrewAI

Secure secret fetching for CrewAI agents via 1Claw vaults. Credentials are retrieved at runtime using a scoped agent identity — never copied into prompts, repos, or long-lived agent memory. Quick start: `1claw spawn crewai`.

NemoClaw by NVIDIA

NVIDIA

Run autonomous AI agents safely with NVIDIA NemoClaw — privacy and security controls over OpenClaw powered by NVIDIA OpenShell. 1Claw integration provides policy, plugin, and blueprint for secret management inside NemoClaw sandboxes.

AutoGen

Microsoft

autogen-1claw-adapter: vault-backed tools for AssistantAgent with an allowed_agents identity gate, so a credential scoped to one agent is refused when another asks. Verified with a live Claude agent and an adversarial leak prompt.

Google A2A

Agent2Agent Protocol

Agent-to-agent calls with 1Claw as the identity and credential layer: each A2A agent has its own vault identity, and secrets are injected at call time instead of passed in messages. Example: a pizza-ordering agent pair.

@1claw/wallet-react

1Claw

Embeddable React components for treasury wallets. Drop in <OneclawTreasuryWidget /> to add balance, send, receive, and swap functionality to any app. Authenticates via Platform API.

Arc

Circle

Stablecoin-native EVM L2 where USDC is the native gas token. Sign and broadcast USDC transfers on Arc using the Intents API — same flow as Ethereum/Base, but fees are paid in USDC.

Bitcoin

Bitcoin

Native Bitcoin signing via secp256k1 — UTXO selection, fee estimation (mempool.space), and broadcast. UTXO locking prevents concurrent double-spends. Supports SegWit (bc1q) addresses.

Solana

Solana

Ed25519 signing for Solana — native SOL and SPL token transfers with automatic Associated Token Account creation. Memo Program v2 support for on-chain annotations.

XRP Ledger

Ripple

Full XRPL transaction coverage — 30+ transaction types via xrpl-rust binary codec. Supports Payment, TrustSet, OfferCreate, NFTokenMint, AMMCreate, and more through the xrpl_tx_json field.

Cardano

Cardano Foundation

Ed25519 signing for Cardano — native ADA and multi-asset transfers with min-ADA enforcement. UTXO locking for safe concurrent transactions. Blockfrost-backed parameter/UTXO resolution.

Tron

Tron Foundation

Secp256k1 signing for Tron — native TRX and TRC-20 token transfers. TronGrid-backed reference block resolution. Energy/bandwidth fee management via fee_limit_sun.

Tenderly

Tenderly

Tenderly powers transaction simulation in the Intents API — simulate before sign, inspect gas and balance changes, and catch reverts with Tenderly’s dashboard links from failed runs.

Midnight

Midnight Network

Unshielded NIGHT transfers on Midnight Preprod through the midnight-signer sidecar: the vault stores a BIP32 seed, the sidecar builds, proves (DUST fee) and signs, the agent never holds a key. Plus a Compact audit-anchor contract that commits an agent's hash-chained log on chain.

Safe{Core}

Safe

Agent smart accounts on Safe. The agent's key is an allowance-module signer with on-chain per-transaction and daily caps; funds live in the Safe, not on the agent's EOA. Migration from EOA, allowance sync and a freeze guard are built in.

ampersend

Edge & Node

The control layer for the agent economy — policies, approvals, and audit trails for every agent transaction. 1Claw manages session keys in the vault while Ampersend handles smart-account x402 payments on Base.

Primer

Primer Systems

Payment and privacy infrastructure for the agentic economy: an open x402 facilitator (no signup, no API keys), onion-routed requests, and pooled settlement so a merchant never learns which agent paid. 1claw pay settles against Primer-verified x402 paywalls, and 1Claw's own x402 billing can point its facilitator at x402.primer.systems; the paying key stays in the vault either way.

Laso Finance

Laso

Crypto-native prepaid and gift cards, issued per-agent via x402. 1Claw's Payment Card Vault stores only a card reference — PAN/CVV are fetched just-in-time from Laso at reveal. Each agent gets its own isolated Laso wallet identity.

Circle (USDC)

Circle

USDC is the settlement currency for x402 card ordering and agent treasury operations. x402 payments use EIP-3009 TransferWithAuthorization on Base for gasless, agent-signed USDC transfers. 1Claw is a member of the Circle Alliance Program.

Coinbase

Coinbase Developer Platform

Default x402 facilitator for 1Claw's own pay-per-request billing and for 1claw pay settlements on Base, and Coinbase Onramp for fiat into agent wallets. Funds move customer-to-Coinbase directly; 1Claw never takes a deposit.

MoonPay

MoonPay

Fiat on-ramp and off-ramp sessions for embedded and treasury wallets. 1Claw opens the session; KYC, payment and settlement happen with MoonPay directly.

Darkbloom

Eigen Labs

Decentralized inference on hardware-attested Apple Silicon with end-to-end encryption. Route LLM traffic through Shroud to Darkbloom — the node operator never sees your prompts.

Venice AI

Venice

Privacy-first inference with zero data retention, optional TEE and E2EE modes. Supports Claude, GPT, Grok, and TEE-backed open-source models — all accessible through Shroud.

Bankr LLM Gateway

Bankr

Unified LLM interface for crypto agents — Claude, Gemini, GPT, Grok, and more. Dynamic key vending via lease_bankr_key (policy-gated, short TTL); Shroud auto-resolves leased keys with X-Shroud-Provider: bankr.

Anthropic

Claude

Claude via Shroud (X-Shroud-Provider: anthropic): the API key is injected inside the TEE, prompts are inspected for injection and secrets are redacted before they reach the model. Also the model behind Claude Code and Claude Desktop MCP clients.

OpenAI

OpenAI

GPT models via Shroud, and the OpenAI-compatible endpoint that 1claw proxy exposes locally so any OpenAI-SDK client routes through the TEE without code changes.

Mistral

Mistral AI

Mistral models via Shroud, same key injection, inspection and redaction as every provider.

Cohere

Cohere

Command models via Shroud's /v2/chat route.

OpenRouter

OpenRouter

One Shroud provider, hundreds of models: route to anything on OpenRouter with a single vaulted key.

Telegram

Channels

Agents that talk on Telegram. Bot tokens live in the vault; inbound messages are policy-checked and auto-respond can be gated by approval.

Discord

Channels + Connected Accounts

Discord as an agent channel and as an OAuth-connected account for execution bindings.

WhatsApp

Channels

WhatsApp Business as an agent channel, with SMS alongside it for notifications and step-up codes.

Gmail

Connected Accounts

OAuth-connected Gmail (read, send, modify) as an execution binding: tokens refreshed by the vault, never handed to the agent.

Google Calendar

Connected Accounts

Calendar read and write through a connected account, policy-gated per agent.

Google Sheets

Connected Accounts

Sheets as a connector for reading and appending rows from automations and agents.

GitHub

Connected Accounts

GitHub as an OAuth-connected account for agents, plus the 1claw-action for CI (listed under DevOps).

Slack

Connected Accounts

Slack as a connected account for agents that post, read and react in channels.

Notion

Connected Accounts

Notion pages and databases through a connected account.

X

Connected Accounts

X (Twitter) as a connected account for posting and reading on an agent's behalf.

Coder

Coder

Terraform workspace module that gives every Coder workspace a dedicated 1Claw agent identity with scoped vault access. Per-workspace provisioning, lifecycle cleanup, and MCP config for Cursor and Claude Code.

Google Cloud

Google

1Claw uses Google Cloud for production cryptography: Cloud HSM–backed envelope encryption for secrets, and Confidential Computing (including AMD SEV-SNP) for the Shroud TEE proxy.

AWS KMS

Amazon Web Services

Bring your own key: org KEKs wrapped in AWS KMS instead of Google Cloud HSM, and a share of the 2-of-3 multi-HSM Shamir scheme.

Azure Key Vault

Microsoft Azure

Bring your own key on Azure: Key Vault–wrapped KEKs and a share in the multi-HSM scheme.

Kong

Kong Gateway

1claw-kong-plugin: resolve vault secrets at the gateway so upstream credentials are injected by Kong and never live in route config.

GitHub Actions

GitHub

1claw-action fetches short-TTL, policy-gated secrets from a vault at CI runtime as masked env vars and step outputs. Deny by default.