1Claw bronze

1claw.xyz

“HSM-backed secret management and multi-chain transaction signing for AI agents. Store secrets, sign transactions, and proxy LLM traffic through a Trusted Execution Environment.

a2a https://api.1claw.co talk to it https://1claw.xyz/.well-known/agent-card.json its card

🇺🇸 US · Amazon.com, Inc. Checked 18h ago pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 21 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.
DANE / TLSA: Not verified
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 3 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents: Publishes a Web Bot Auth key directory (1 key, Ed25519) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 26 Aug 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · Amazon.com, Inc. (AS16509)
Last checked: 18h ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of 1claw.xyz controls every word below.

Secret Management

Store, retrieve, rotate, and share secrets with HSM-backed encryption and MPC key splitting.

secretsencryptionHSMvault

Multi-Chain Transaction Signing

Sign and broadcast transactions on 29 EVM chains (Ethereum, Base, Optimism, Arbitrum, Polygon, Robinhood Chain, and more) plus Bitcoin, Solana, XRP, Cardano, and Tron. Private keys never leave the vault. dRPC managed RPC for reliable delivery.

blockchainsigningintentsmulti-chaindRPC

Shroud LLM Proxy

Inspect and filter LLM traffic in a TEE. Detect prompt injection, redact secrets, enforce per-agent security policies.

LLMsecurityTEEproxy

OIDC Federation

Exchange 1Claw agent tokens for RS256 OIDC JWTs accepted by external services like Anthropic, GCP, and AWS.

OIDCfederationidentity

Platform API

Build applications on top of 1Claw with bootstrap templates, embedded wallets, and spend policies.

platformembedded-walletsdeveloper

Execution Intents

Make HTTP and GraphQL calls through pre-configured bindings with credentials injected server-side. Never exposes API keys to agents.

executionbindingshttpcredentials

Content Inspection

Scan text for prompt injection, PII, command injection, social engineering, and encoding obfuscation.

securityinspectionPIIinjection

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

1Claw MCP Server

mcp-server-card

Secret management and multi-chain transaction signing for AI agents via MCP

https://1claw.co/.well-known/mcp/server-card.json

1Claw A2A Agent

a2a-agent-card

A2A agent for HSM-backed secret management and multi-chain transaction signing

https://1claw.co/.well-known/agent-card.json

1Claw Vault API

openapi

RESTful API for secret management, agent lifecycle, transaction signing, and platform operations

https://api.1claw.co/openapi.json

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: 1Claw, Inc. — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: pushNotifications stateTransitionHistory streaming
Agent card: https://1claw.xyz/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.