@1claw/mcp 0.1.0

package/dist/tools/describe_secret.js

@@ -0,0 +1,52 @@
+import { z } from "zod";
+import { UserError } from "fastmcp";
+import { OneClawApiError } from "../client.js";
+export function describeSecretTool(client) {
+    return {
+        name: "describe_secret",
+        description: "Get metadata for a secret (type, version, expiry, access count) without fetching its value. Use this to check if a secret exists or is still valid before fetching it.",
+        parameters: z.object({
+            path: z
+                .string()
+                .min(1)
+                .describe("Secret path to describe, e.g. 'api-keys/stripe'"),
+        }),
+        execute: async (args) => {
+            const data = await client.listSecrets();
+            const match = data.secrets.find((s) => s.path === args.path);
+            if (!match) {
+                try {
+                    const secret = await client.getSecret(args.path);
+                    return JSON.stringify({
+                        path: secret.path,
+                        type: secret.type,
+                        version: secret.version,
+                        metadata: secret.metadata,
+                        created_at: secret.created_at,
+                        expires_at: secret.expires_at,
+                    }, null, 2);
+                }
+                catch (err) {
+                    if (err instanceof OneClawApiError) {
+                        if (err.status === 404) {
+                            throw new UserError(`No secret found at path '${args.path}'.`);
+                        }
+                        if (err.status === 410) {
+                            throw new UserError(`Secret at path '${args.path}' is expired or has exceeded its maximum access count.`);
+                        }
+                    }
+                    throw err;
+                }
+            }
+            return JSON.stringify({
+                path: match.path,
+                type: match.type,
+                version: match.version,
+                metadata: match.metadata,
+                created_at: match.created_at,
+                expires_at: match.expires_at,
+            }, null, 2);
+        },
+    };
+}
+//# sourceMappingURL=describe_secret.js.map

package/dist/tools/describe_secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe_secret.js","sourceRoot":"","sources":["../../src/tools/describe_secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,eAAe,EAAsB,MAAM,cAAc,CAAC;AAEnE,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,OAAO;QACL,IAAI,EAAE,iBAA0B;QAChC,WAAW,EACT,wKAAwK;QAC1K,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,iDAAiD,CAAC;SAC/D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAsB,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;YAE7D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjD,OAAO,IAAI,CAAC,SAAS,CACnB;wBACE,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;qBAC9B,EACD,IAAI,EACJ,CAAC,CACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;wBACnC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;4BACvB,MAAM,IAAI,SAAS,CAAC,4BAA4B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;wBACjE,CAAC;wBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;4BACvB,MAAM,IAAI,SAAS,CACjB,mBAAmB,IAAI,CAAC,IAAI,wDAAwD,CACrF,CAAC;wBACJ,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CACnB;gBACE,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,EACD,IAAI,EACJ,CAAC,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/get_secret.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+import { type OneClawClient } from "../client.js";
+export declare function getSecretTool(client: OneClawClient): {
+    name: "get_secret";
+    description: string;
+    parameters: z.ZodObject<{
+        path: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        path: string;
+    }, {
+        path: string;
+    }>;
+    execute: (args: {
+        path: string;
+    }, { log }: {
+        log: {
+            info: (msg: string) => void;
+        };
+    }) => Promise<string>;
+};
+//# sourceMappingURL=get_secret.d.ts.map

package/dist/tools/get_secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_secret.d.ts","sourceRoot":"","sources":["../../src/tools/get_secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAEnE,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa;;;;;;;;;;oBAWzB;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,WAAW;QAAE,GAAG,EAAE;YAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;SAAE,CAAA;KAAE;EAyB5F"}

package/dist/tools/get_secret.js

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import { UserError } from "fastmcp";
+import { OneClawApiError } from "../client.js";
+export function getSecretTool(client) {
+    return {
+        name: "get_secret",
+        description: "Fetch the decrypted value of a secret from the 1claw vault by its path (e.g. 'api-keys/stripe'). Use this immediately before making an API call that requires the credential. Do not store the value or include it in summaries.",
+        parameters: z.object({
+            path: z
+                .string()
+                .min(1)
+                .describe("Secret path, e.g. 'api-keys/stripe' or 'passwords/db-prod'"),
+        }),
+        execute: async (args, { log }) => {
+            try {
+                const secret = await client.getSecret(args.path);
+                log.info(`secret accessed: ${args.path}`);
+                return JSON.stringify({
+                    path: secret.path,
+                    type: secret.type,
+                    version: secret.version,
+                    value: secret.value,
+                });
+            }
+            catch (err) {
+                if (err instanceof OneClawApiError) {
+                    if (err.status === 410) {
+                        throw new UserError(`Secret at path '${args.path}' is expired or has exceeded its maximum access count.`);
+                    }
+                    if (err.status === 404) {
+                        throw new UserError(`No secret found at path '${args.path}'.`);
+                    }
+                }
+                throw err;
+            }
+        },
+    };
+}
+//# sourceMappingURL=get_secret.js.map

package/dist/tools/get_secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_secret.js","sourceRoot":"","sources":["../../src/tools/get_secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,eAAe,EAAsB,MAAM,cAAc,CAAC;AAEnE,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO;QACL,IAAI,EAAE,YAAqB;QAC3B,WAAW,EACT,kOAAkO;QACpO,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,4DAA4D,CAAC;SAC1E,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAsB,EAAE,EAAE,GAAG,EAA4C,EAAE,EAAE;YAC3F,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACvB,MAAM,IAAI,SAAS,CACjB,mBAAmB,IAAI,CAAC,IAAI,wDAAwD,CACrF,CAAC;oBACJ,CAAC;oBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACvB,MAAM,IAAI,SAAS,CAAC,4BAA4B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/grant_access.d.ts

@@ -0,0 +1,33 @@
+import { z } from "zod";
+import type { OneClawClient } from "../client.js";
+export declare function grantAccessTool(client: OneClawClient): {
+    name: "grant_access";
+    description: string;
+    parameters: z.ZodObject<{
+        vault_id: z.ZodString;
+        principal_type: z.ZodEnum<["user", "agent"]>;
+        principal_id: z.ZodString;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["read", "write", "delete"]>, "many">>;
+        secret_path_pattern: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        vault_id: string;
+        principal_type: "user" | "agent";
+        principal_id: string;
+        permissions: ("read" | "write" | "delete")[];
+        secret_path_pattern: string;
+    }, {
+        vault_id: string;
+        principal_type: "user" | "agent";
+        principal_id: string;
+        permissions?: ("read" | "write" | "delete")[] | undefined;
+        secret_path_pattern?: string | undefined;
+    }>;
+    execute: (args: {
+        vault_id: string;
+        principal_type: "user" | "agent";
+        principal_id: string;
+        permissions: string[];
+        secret_path_pattern: string;
+    }) => Promise<string>;
+};
+//# sourceMappingURL=grant_access.d.ts.map

package/dist/tools/grant_access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant_access.d.ts","sourceRoot":"","sources":["../../src/tools/grant_access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa;;;;;;;;;;;;;;;;;;;;;;oBAwB3B;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;QACjC,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,mBAAmB,EAAE,MAAM,CAAC;KAC7B;EAkBJ"}

package/dist/tools/grant_access.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+export function grantAccessTool(client) {
+    return {
+        name: "grant_access",
+        description: "Grant a user or agent access to one of your vaults. You can only grant access on vaults you created. " +
+            "Use this to share secrets with team members or other agents.",
+        parameters: z.object({
+            vault_id: z.string().uuid().describe("ID of the vault to share"),
+            principal_type: z
+                .enum(["user", "agent"])
+                .describe("Type of principal to grant access to"),
+            principal_id: z
+                .string()
+                .uuid()
+                .describe("UUID of the user or agent to grant access to"),
+            permissions: z
+                .array(z.enum(["read", "write", "delete"]))
+                .default(["read"])
+                .describe("Permissions to grant (default: read-only)"),
+            secret_path_pattern: z
+                .string()
+                .default("**")
+                .describe("Glob pattern for which secrets the policy covers (default: all)"),
+        }),
+        execute: async (args) => {
+            const policy = await client.createPolicy(args.vault_id, args.principal_type, args.principal_id, args.permissions, args.secret_path_pattern);
+            return (`Access granted.\n` +
+                `  Policy ID: ${policy.id}\n` +
+                `  Vault: ${policy.vault_id}\n` +
+                `  Granted to: ${policy.principal_type}:${policy.principal_id}\n` +
+                `  Permissions: ${policy.permissions.join(", ")}\n` +
+                `  Path pattern: ${policy.secret_path_pattern}`);
+        },
+    };
+}
+//# sourceMappingURL=grant_access.js.map

package/dist/tools/grant_access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant_access.js","sourceRoot":"","sources":["../../src/tools/grant_access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,OAAO;QACL,IAAI,EAAE,cAAuB;QAC7B,WAAW,EACT,uGAAuG;YACvG,8DAA8D;QAChE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAChE,cAAc,EAAE,CAAC;iBACd,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;iBACvB,QAAQ,CAAC,sCAAsC,CAAC;YACnD,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,QAAQ,CAAC,8CAA8C,CAAC;YAC3D,WAAW,EAAE,CAAC;iBACX,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;iBAC1C,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;iBACjB,QAAQ,CAAC,2CAA2C,CAAC;YACxD,mBAAmB,EAAE,CAAC;iBACnB,MAAM,EAAE;iBACR,OAAO,CAAC,IAAI,CAAC;iBACb,QAAQ,CAAC,iEAAiE,CAAC;SAC/E,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAMf,EAAE,EAAE;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CACtC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,mBAAmB,CACzB,CAAC;YACF,OAAO,CACL,mBAAmB;gBACnB,gBAAgB,MAAM,CAAC,EAAE,IAAI;gBAC7B,YAAY,MAAM,CAAC,QAAQ,IAAI;gBAC/B,iBAAiB,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,YAAY,IAAI;gBACjE,kBAAkB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACnD,mBAAmB,MAAM,CAAC,mBAAmB,EAAE,CAChD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/list_secrets.d.ts

@@ -0,0 +1,17 @@
+import { z } from "zod";
+import type { OneClawClient } from "../client.js";
+export declare function listSecretsTool(client: OneClawClient): {
+    name: "list_secrets";
+    description: string;
+    parameters: z.ZodObject<{
+        prefix: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        prefix?: string | undefined;
+    }, {
+        prefix?: string | undefined;
+    }>;
+    execute: (args: {
+        prefix?: string;
+    }) => Promise<string>;
+};
+//# sourceMappingURL=list_secrets.d.ts.map

package/dist/tools/list_secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list_secrets.d.ts","sourceRoot":"","sources":["../../src/tools/list_secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa;;;;;;;;;;oBAW3B;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;EAoB5C"}

package/dist/tools/list_secrets.js

@@ -0,0 +1,26 @@
+import { z } from "zod";
+export function listSecretsTool(client) {
+    return {
+        name: "list_secrets",
+        description: "List all secrets stored in the 1claw vault. Returns paths, types, versions, and metadata — never secret values. Use this to discover what credentials are available before fetching one.",
+        parameters: z.object({
+            prefix: z
+                .string()
+                .optional()
+                .describe("Optional path prefix to filter secrets (e.g. 'api-keys/')"),
+        }),
+        execute: async (args) => {
+            const data = await client.listSecrets();
+            let secrets = data.secrets;
+            if (args.prefix) {
+                secrets = secrets.filter((s) => s.path.startsWith(args.prefix));
+            }
+            if (secrets.length === 0) {
+                return "No secrets found in this vault.";
+            }
+            const lines = secrets.map((s) => `- ${s.path}  (type: ${s.type}, version: ${s.version}, expires: ${s.expires_at ?? "never"})`);
+            return `Found ${secrets.length} secret(s):\n${lines.join("\n")}`;
+        },
+    };
+}
+//# sourceMappingURL=list_secrets.js.map

package/dist/tools/list_secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list_secrets.js","sourceRoot":"","sources":["../../src/tools/list_secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,OAAO;QACL,IAAI,EAAE,cAAuB;QAC7B,WAAW,EACT,0LAA0L;QAC5L,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,2DAA2D,CAAC;SACzE,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;YAC3C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAE3B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,iCAAiC,CAAC;YAC3C,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CACvB,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,UAAU,IAAI,OAAO,GAAG,CAC/F,CAAC;YAEF,OAAO,SAAS,OAAO,CAAC,MAAM,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/list_vaults.d.ts

@@ -0,0 +1,9 @@
+import { z } from "zod";
+import type { OneClawClient } from "../client.js";
+export declare function listVaultsTool(client: OneClawClient): {
+    name: "list_vaults";
+    description: string;
+    parameters: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    execute: () => Promise<string>;
+};
+//# sourceMappingURL=list_vaults.d.ts.map

package/dist/tools/list_vaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list_vaults.d.ts","sourceRoot":"","sources":["../../src/tools/list_vaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa;;;;;EAsBnD"}

package/dist/tools/list_vaults.js

@@ -0,0 +1,18 @@
+import { z } from "zod";
+export function listVaultsTool(client) {
+    return {
+        name: "list_vaults",
+        description: "List all vaults accessible to you (both your own and those shared with you). Returns vault IDs, names, and who created them. Use this to discover available vaults before accessing secrets.",
+        parameters: z.object({}),
+        execute: async () => {
+            const data = await client.listVaults();
+            const vaults = data.vaults;
+            if (vaults.length === 0) {
+                return "No vaults found. Create one with create_vault.";
+            }
+            const lines = vaults.map((v) => `- ${v.name}  (id: ${v.id}, created by: ${v.created_by_type}, ${v.created_at})`);
+            return `Found ${vaults.length} vault(s):\n${lines.join("\n")}`;
+        },
+    };
+}
+//# sourceMappingURL=list_vaults.js.map

package/dist/tools/list_vaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list_vaults.js","sourceRoot":"","sources":["../../src/tools/list_vaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,OAAO;QACL,IAAI,EAAE,aAAsB;QAC5B,WAAW,EACT,8LAA8L;QAChM,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAE3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,gDAAgD,CAAC;YAC1D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,UAAU,GAAG,CAClF,CAAC;YAEF,OAAO,SAAS,MAAM,CAAC,MAAM,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/put_secret.d.ts

@@ -0,0 +1,41 @@
+import { z } from "zod";
+import type { OneClawClient } from "../client.js";
+export declare function putSecretTool(client: OneClawClient): {
+    name: "put_secret";
+    description: string;
+    parameters: z.ZodObject<{
+        path: z.ZodString;
+        value: z.ZodString;
+        type: z.ZodDefault<z.ZodEnum<["api_key", "password", "private_key", "certificate", "file", "note", "ssh_key", "env_bundle"]>>;
+        metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        expires_at: z.ZodOptional<z.ZodString>;
+        max_access_count: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        path: string;
+        type: "api_key" | "password" | "private_key" | "certificate" | "file" | "note" | "ssh_key" | "env_bundle";
+        metadata?: Record<string, unknown> | undefined;
+        expires_at?: string | undefined;
+        max_access_count?: number | undefined;
+    }, {
+        value: string;
+        path: string;
+        type?: "api_key" | "password" | "private_key" | "certificate" | "file" | "note" | "ssh_key" | "env_bundle" | undefined;
+        metadata?: Record<string, unknown> | undefined;
+        expires_at?: string | undefined;
+        max_access_count?: number | undefined;
+    }>;
+    execute: (args: {
+        path: string;
+        value: string;
+        type: string;
+        metadata?: Record<string, unknown>;
+        expires_at?: string;
+        max_access_count?: number;
+    }, { log }: {
+        log: {
+            info: (msg: string) => void;
+        };
+    }) => Promise<string>;
+};
+//# sourceMappingURL=put_secret.d.ts.map

package/dist/tools/put_secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put_secret.d.ts","sourceRoot":"","sources":["../../src/tools/put_secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;oBAiCzB;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,WAAW;QAAE,GAAG,EAAE;YAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;SAAE,CAAA;KAAE;EAcvD"}

package/dist/tools/put_secret.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+import { SECRET_TYPES } from "../types.js";
+export function putSecretTool(client) {
+    return {
+        name: "put_secret",
+        description: "Store a new secret or update an existing one in the 1claw vault. Provide the path, value, and type. Each call creates a new version. Supports optional expiry and max access count.",
+        parameters: z.object({
+            path: z
+                .string()
+                .min(1)
+                .describe("Secret path, e.g. 'api-keys/stripe'"),
+            value: z
+                .string()
+                .min(1)
+                .describe("The secret value to store"),
+            type: z
+                .enum(SECRET_TYPES)
+                .default("api_key")
+                .describe("Secret type: api_key, password, private_key, certificate, file, note, ssh_key, or env_bundle"),
+            metadata: z
+                .record(z.unknown())
+                .optional()
+                .describe("Optional JSON metadata to attach to the secret"),
+            expires_at: z
+                .string()
+                .optional()
+                .describe("Optional ISO 8601 expiry datetime (e.g. '2025-12-31T23:59:59Z')"),
+            max_access_count: z
+                .number()
+                .int()
+                .positive()
+                .optional()
+                .describe("Optional maximum number of times the secret can be read before auto-expiring"),
+        }),
+        execute: async (args, { log }) => {
+            const result = await client.putSecret(args.path, {
+                value: args.value,
+                type: args.type,
+                metadata: args.metadata,
+                expires_at: args.expires_at,
+                max_access_count: args.max_access_count,
+            });
+            log.info(`secret stored: ${args.path}`);
+            return `Secret stored at '${args.path}' (version ${result.version}, type: ${result.type}).`;
+        },
+    };
+}
+//# sourceMappingURL=put_secret.js.map

package/dist/tools/put_secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"put_secret.js","sourceRoot":"","sources":["../../src/tools/put_secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO;QACL,IAAI,EAAE,YAAqB;QAC3B,WAAW,EACT,qLAAqL;QACvL,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,qCAAqC,CAAC;YAClD,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,2BAA2B,CAAC;YACxC,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,YAAY,CAAC;iBAClB,OAAO,CAAC,SAAS,CAAC;iBAClB,QAAQ,CAAC,8FAA8F,CAAC;YAC3G,QAAQ,EAAE,CAAC;iBACR,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;iBACnB,QAAQ,EAAE;iBACV,QAAQ,CAAC,gDAAgD,CAAC;YAC7D,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,iEAAiE,CAAC;YAC9E,gBAAgB,EAAE,CAAC;iBAChB,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,8EAA8E,CAAC;SAC5F,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAOf,EAAE,EAAE,GAAG,EAA4C,EAAE,EAAE;YACtD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACxC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAExC,OAAO,qBAAqB,IAAI,CAAC,IAAI,cAAc,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,IAAI,IAAI,CAAC;QAC9F,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/share_secret.d.ts

@@ -0,0 +1,33 @@
+import { z } from "zod";
+import type { OneClawClient } from "../client.js";
+export declare function shareSecretTool(client: OneClawClient): {
+    name: "share_secret";
+    description: string;
+    parameters: z.ZodObject<{
+        secret_id: z.ZodString;
+        recipient_type: z.ZodEnum<["user", "agent", "anyone_with_link"]>;
+        recipient_id: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodString;
+        max_access_count: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        expires_at: string;
+        max_access_count: number;
+        secret_id: string;
+        recipient_type: "user" | "agent" | "anyone_with_link";
+        recipient_id?: string | undefined;
+    }, {
+        expires_at: string;
+        secret_id: string;
+        recipient_type: "user" | "agent" | "anyone_with_link";
+        max_access_count?: number | undefined;
+        recipient_id?: string | undefined;
+    }>;
+    execute: (args: {
+        secret_id: string;
+        recipient_type: "user" | "agent" | "anyone_with_link";
+        recipient_id?: string;
+        expires_at: string;
+        max_access_count: number;
+    }) => Promise<string>;
+};
+//# sourceMappingURL=share_secret.d.ts.map

package/dist/tools/share_secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share_secret.d.ts","sourceRoot":"","sources":["../../src/tools/share_secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa;;;;;;;;;;;;;;;;;;;;;;oBA+B3B;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,GAAG,OAAO,GAAG,kBAAkB,CAAC;QACtD,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;KAC1B;EAyBJ"}

package/dist/tools/share_secret.js

@@ -0,0 +1,53 @@
+import { z } from "zod";
+export function shareSecretTool(client) {
+    return {
+        name: "share_secret",
+        description: "Share a specific secret with a user or agent by their ID, or create " +
+            "an open share link (anyone_with_link). Agents cannot create email-based shares — " +
+            "only human users can share via email from the dashboard. " +
+            "For vault-wide access, use grant_access instead.",
+        parameters: z.object({
+            secret_id: z
+                .string()
+                .uuid()
+                .describe("UUID of the secret entry to share"),
+            recipient_type: z
+                .enum(["user", "agent", "anyone_with_link"])
+                .describe("Type of recipient: user, agent, or anyone_with_link"),
+            recipient_id: z
+                .string()
+                .uuid()
+                .optional()
+                .describe("UUID of the recipient user or agent (required for user/agent types)"),
+            expires_at: z
+                .string()
+                .describe("ISO-8601 expiry date (e.g. '2026-12-31T00:00:00Z')"),
+            max_access_count: z
+                .number()
+                .int()
+                .positive()
+                .default(5)
+                .describe("Max number of times the secret can be accessed (default: 5)"),
+        }),
+        execute: async (args) => {
+            if ((args.recipient_type === "user" || args.recipient_type === "agent") &&
+                !args.recipient_id) {
+                return `Error: recipient_id is required when sharing with a ${args.recipient_type}.`;
+            }
+            const share = await client.shareSecret(args.secret_id, {
+                recipient_type: args.recipient_type,
+                recipient_id: args.recipient_id,
+                expires_at: args.expires_at,
+                max_access_count: args.max_access_count,
+            });
+            return (`Secret shared successfully.\n` +
+                `  Share ID: ${share.id}\n` +
+                `  Recipient: ${args.recipient_type}${args.recipient_id ? ` (${args.recipient_id})` : ""}\n` +
+                `  Expires: ${share.expires_at}\n` +
+                `  Max accesses: ${share.max_access_count}\n` +
+                `  URL: ${share.share_url}\n\n` +
+                `The recipient must accept the share before they can access the secret.`);
+        },
+    };
+}
+//# sourceMappingURL=share_secret.js.map

package/dist/tools/share_secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share_secret.js","sourceRoot":"","sources":["../../src/tools/share_secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,OAAO;QACL,IAAI,EAAE,cAAuB;QAC7B,WAAW,EACT,sEAAsE;YACtE,mFAAmF;YACnF,2DAA2D;YAC3D,kDAAkD;QACpD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACnB,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,QAAQ,CAAC,mCAAmC,CAAC;YAChD,cAAc,EAAE,CAAC;iBACd,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;iBAC3C,QAAQ,CAAC,qDAAqD,CAAC;YAClE,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,qEAAqE,CAAC;YAClF,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,CAAC,oDAAoD,CAAC;YACjE,gBAAgB,EAAE,CAAC;iBAChB,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,OAAO,CAAC,CAAC,CAAC;iBACV,QAAQ,CAAC,6DAA6D,CAAC;SAC3E,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAMf,EAAE,EAAE;YACH,IACE,CAAC,IAAI,CAAC,cAAc,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC;gBACnE,CAAC,IAAI,CAAC,YAAY,EAClB,CAAC;gBACD,OAAO,uDAAuD,IAAI,CAAC,cAAc,GAAG,CAAC;YACvF,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE;gBACrD,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACxC,CAAC,CAAC;YACH,OAAO,CACL,+BAA+B;gBAC/B,eAAe,KAAK,CAAC,EAAE,IAAI;gBAC3B,gBAAgB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;gBAC5F,cAAc,KAAK,CAAC,UAAU,IAAI;gBAClC,mBAAmB,KAAK,CAAC,gBAAgB,IAAI;gBAC7C,UAAU,KAAK,CAAC,SAAS,MAAM;gBAC/B,wEAAwE,CACzE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,56 @@
+export declare const SECRET_TYPES: readonly ["api_key", "password", "private_key", "certificate", "file", "note", "ssh_key", "env_bundle"];
+export type SecretType = (typeof SECRET_TYPES)[number];
+export interface SecretMetadata {
+    id: string;
+    path: string;
+    type: SecretType;
+    version: number;
+    metadata: Record<string, unknown>;
+    created_at: string;
+    expires_at: string | null;
+}
+export interface SecretWithValue extends SecretMetadata {
+    value: string;
+}
+export interface SecretListResponse {
+    secrets: SecretMetadata[];
+}
+export interface VaultResponse {
+    id: string;
+    name: string;
+    description: string;
+    created_by: string;
+    created_by_type: string;
+    created_at: string;
+}
+export interface VaultListResponse {
+    vaults: VaultResponse[];
+}
+export interface PolicyResponse {
+    id: string;
+    vault_id: string;
+    secret_path_pattern: string;
+    principal_type: string;
+    principal_id: string;
+    permissions: string[];
+    conditions: Record<string, unknown>;
+    expires_at: string | null;
+    created_by: string;
+    created_by_type: string;
+    created_at: string;
+}
+export interface ShareLinkResponse {
+    id: string;
+    share_url: string;
+    recipient_type: string;
+    recipient_email?: string;
+    expires_at: string;
+    max_access_count: number;
+}
+export interface ApiErrorBody {
+    type: string;
+    title: string;
+    status: number;
+    detail: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,yGASf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,11 @@
+export const SECRET_TYPES = [
+    "api_key",
+    "password",
+    "private_key",
+    "certificate",
+    "file",
+    "note",
+    "ssh_key",
+    "env_bundle",
+];
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,SAAS;IACT,UAAU;IACV,aAAa;IACb,aAAa;IACb,MAAM;IACN,MAAM;IACN,SAAS;IACT,YAAY;CACJ,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@1claw/mcp",
+  "version": "0.1.0",
+  "description": "MCP server for the 1claw secrets vault — lets AI agents fetch, store, and manage secrets at runtime",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "1claw-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "dev": "npx fastmcp dev src/index.ts",
+    "inspect": "npx fastmcp inspect src/index.ts",
+    "start": "node dist/index.js"
+  },
+  "keywords": [
+    "mcp",
+    "secrets",
+    "vault",
+    "ai-agents",
+    "hsm",
+    "1claw"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/1clawAI/1claw-mcp.git"
+  },
+  "homepage": "https://1claw.xyz",
+  "license": "SEE LICENSE IN LICENSE",
+  "dependencies": {
+    "fastmcp": "^3.33.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.5.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}