1Claw Vault

Item: 1Claw Vault
Rating: 47
Author: M8ven

HSM-backed vault for AI agent secrets with just-in-time credential fetching and prompt injection scanning.

→ 1clawai/1claw-mcp· npm: @1claw/mcp· 5.3K installs· listed on pulsemcp

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCP Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: ONECLAW_AGENT_API_KEY, ONECLAW_AGENT_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configMCP_TRANSPORT— Set =httpStream and PORT=8080 to run in hosted mode.

🔐 secretONECLAW_AGENT_API_KEY— stdio (default) Local — Claude Desktop, Cursor Env: (recommended; auto-discovers agent + vault) or ONECLAW_AGENT_ID + key; or ONECLAW_AGENT_TOKEN + ONECLAW_VAULT_ID

configONECLAW_AGENT_ID— stdio (default) Local — Claude Desktop, Cursor Env: ONECLAW_AGENT_API_KEY (recommended; auto-discovers agent + vault) or + key; or ONECLAW_AGENT_TOKEN + ONECLAW_VAULT_ID

🔐 secretONECLAW_AGENT_TOKEN— stdio (default) Local — Claude Desktop, Cursor Env: ONECLAW_AGENT_API_KEY (recommended; auto-discovers agent + vault) or ONECLAW_AGENT_ID + key; or + ONECLAW_VAULT_ID

configONECLAW_BASE_URL

configONECLAW_CONFIG_DIR

configONECLAW_DAEMON_SOCKET— No ~/.config/1claw/daemon.sock Path to the local daemon Unix socket (local daemon mode only).

configONECLAW_DPOP

configONECLAW_LOCAL_ONLY— No false Set to true for security-only mode (no vault credentials needed).

configONECLAW_LOCAL_VAULT— No false Set to true to use the local daemon instead of the cloud API.

configONECLAW_MCP_EXFIL_PROTECTION— block block rejects tool inputs containing known secrets; warn logs but allows; off disables.

configONECLAW_MCP_PII_DETECTION— true Detect PII patterns (emails, SSNs, credit cards, etc.) in inputs and outputs.

configONECLAW_MCP_REDACT_SECRETS— true Redact known secret values from non-secret tool outputs. Requires security enabled.

configONECLAW_MCP_SANITIZATION_MODE— block block rejects critical/high threats; surgical normalizes Unicode but allows; log_only only logs.

configONECLAW_MCP_SECURITY_ENABLED— true Master switch. Set to false to disable all inspection.

configONECLAW_SECRET_PREFIX

configONECLAW_VAULT_ID— stdio (default) Local — Claude Desktop, Cursor Env: ONECLAW_AGENT_API_KEY (recommended; auto-discovers agent + vault) or ONECLAW_AGENT_ID + key; or ONECLAW_AGENT_TOKEN +

configPORT— Set MCP_TRANSPORT=httpStream and =8080 to run in hosted mode.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 0 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/1claw-mcp-c3qlpa)](https://m8ven.ai/mcp/1claw-mcp-c3qlpa)

commit: 415cd49f9ea042f4d9171554c45d1528205b6dad

code hash: a8b85dccb77a5c2ba0ba26ac4b7e3134eeddccd5bd1fb9ea6833768e72e73e09

verified: 7/9/2026, 10:22:09 AM

view raw JSON →