agentkeys

What This Skill Does

The AgentKeys skill serves as a secure credential proxy for your AI agents, fundamentally changing how agents handle sensitive authentication data. Instead of exposing raw API keys, OAuth tokens, or passwords to an agent's memory or environment variables, AgentKeys intercepts requests and performs the authentication server-side. By routing traffic through the proxy, the real secrets never leave the secure, encrypted vault, effectively preventing credential leakage even if the agent is compromised or logs are exposed.

Installation

To install this skill in your OpenClaw environment, run the following command in your terminal: clawhub install openclaw/skills/skills/alexandr-belogubov/agentkeys After installation, you can configure your credentials via your environment variables. Use AGENTKEYS_API_KEY for multi-credential management or AGENTKEYS_PROXY_TOKEN for single-target access, both using https://proxy.agentkeys.io as the proxy endpoint.

Use Cases

This skill is ideal for security-conscious development environments and production AI deployments. Use it to:

• Manage multiple third-party API integrations (like Resend, Stripe, or OpenAI) without keeping keys in your local config.
• Enforce granular security policies for agents operating on untrusted infrastructure.
• Provide an audit trail for every single API request an agent makes, allowing you to debug and monitor activity through the AgentKeys dashboard.
• Safely share access to services among different agents without ever revealing the underlying authentication secrets to the agents themselves.

Example Prompts

1. "Use AgentKeys to send an email via Resend to the customer with the subject 'Welcome to our platform' and the content 'We are happy to have you.'"
2. "Route a request to the Stripe API through the proxy to fetch the details for customer_id_9921."
3. "Proxy a POST request to the internal logging service using my existing credentials stored in AgentKeys."

Tips & Limitations

• Security: Always use the principle of least privilege. Prefer Proxy Tokens over Workspace API Keys if you only need the agent to perform one specific task.
• Encryption: Remember that all credentials are encrypted with AES-256-GCM, providing industry-standard protection at rest.
• Limitations: This skill requires an active internet connection to the AgentKeys proxy server to function; if the proxy is unreachable, your agents will not be able to authenticate against external APIs. Ensure your environment variables are correctly set before initializing your agents.