1claw MCP
未认领MCP server for 1claw secrets vault — gives AI agents secure, just-in-time access to secrets
01 / 选择客户端
03 / 添加配置
claude mcp add --transport stdio '1claw-mcp' -- 'npx' '-y' '@1claw/mcp'04 / 在客户端中确认
打开客户端的 MCP 设置，确认服务器已连接并列出工具。复制配置不代表连接成功。
更多Security服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
40 个工具中显示 40 个
文档中列出的工具 (40)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
create_vault
Create a new vault (auto-shared with the agent's human creator)
delete_secret
Soft-delete a secret at a path
describe_secret
Get metadata without fetching the value
get_env_bundle
Fetch an envbundle secret and parse it as KEY=VALUE JSON
get_secret
Fetch the decrypted value of a secret by path. Accepts optional clientshare for MPC vaults.
get_signing_key_balance
Get native and optional token balances for an agent signing key on a chain.
get_transaction
Get one transaction by id (optional includesignedtx).
grant_access
Share a vault with a user or agent (own vaults only)
import_signing_key
Import an existing private key as a signing key (human-only, step-up auth).
list_secrets
List all secrets (metadata only — never values)
list_signing_keys
List all signing keys for an agent across all chains.
list_transactions
List transaction intents for the agent.
list_vaults
List all vaults the agent can access (own + shared)
list_versions
List all versions of a secret (version numbers, dates, disabled status)
platform_bootstrap_user
Bootstrap resources (vault, agent, policies) for a connected user from a template.
platform_create_app
Register a new platform app (returns plt API key). User-only.
platform_create_template
Create a bootstrap template (vault, agents, policies, signing keys).
platform_get_fleet
Fleet summary for a template: cohort size, version skew, drift. Read-only.
platform_grant_access
Grant a platform app access to vaults/agents for a connected user.
platform_list_apps
List all platform apps in the caller's org.
platform_list_fleet_agents
The agents in a fleet, with the version each was provisioned from. Read-only.
platform_list_grants
List active resource grants for a platform connection.
platform_list_templates
List bootstrap templates for a platform app.
platform_list_users
List connected users for a platform app (status, resources, claim state).
platform_plan_fleet_rollout
Plan a rollout. Always a dry run — it sets that itself.
platform_reissue_claim
Reissue a claim URL for an already-bootstrapped connection without re-provisioning resources.
platform_rotate_key
Rotate the API key for a platform app. Returns the new plt key (one-time).
provision_signing_key
Generate a multi-chain signing key for an agent. Returns public key, address, and metadata. Private key stored securely in vault.
put_secret
Create or update a secret (creates a new version). Response includes clientshare when the vault has MPC enabled.
resolve_env
Resolve environment variables for a vault and environment (returns the final KEY=VALUE set with precedence applied). When the agent has envautoresolve: true, omit environment and the server uses the agent's tagged environment from the JWT.
rotate_and_store
Store a new value for an existing secret and return the version
rotate_generate
Server-side secret rotation with generated value (length, charset configurable)
share_secret
Share a secret with your creator, a user/agent by ID, or create an open link
sign_digest
Sign a client-computed 32-byte digest directly (raw/blind signing) for ERC-1271/ERC-7739 nested EIP-712 flows (e.g. Polymarket). Requires rawsigningenabled; audit-logged.
sign_message
Sign a message using EIP-191 personalsign. Returns signature and signer address.
sign_transaction
Sign-only (no broadcast). EVM returns signedtx hex; non-EVM returns chain-specific signed payload. Supports xrpltxjson for arbitrary XRPL transactions.
sign_typed_data
Sign EIP-712 typed structured data. Returns signature, typed data hash, and signer address.
simulate_bundle
Simulate an ordered sequence of transactions (Tenderly bundle) without signing
simulate_transaction
Simulate a transaction via Tenderly without signing or broadcasting
submit_transaction
Submit a transaction intent to be signed and optionally broadcast (EVM + Bitcoin, Solana, XRP, Cardano, Tron). Auto-generates an Idempotency-Key header for replay protection. Supports xrpltxjson for 30+ XRPL transaction types (Payment, TrustSet, NFTokenMint, AMMCreate, EscrowCreate, etc.).