← 返回
安全合规 中文

botauth

Use the botauth CLI to list, search, and retrieve secrets from the user's unlocked botauth vault with per-request approval in the desktop app. Use when a tas...
使用 botauth CLI 从用户已解锁的 botauth 保险库中列出、搜索和检索密钥,桌面应用会针对每个请求进行审批。用于任务相关操作。
eyhn
安全合规 clawhub v0.1.0 1 版本 99810.2 Key: 无需
★ 0
Stars
📥 526
下载
💾 4
安装
1
版本
#latest

概述

botauth

Use botauth to securely retrieve API keys, tokens, and credentials from the

user's botauth vault. The desktop app must be running, the vault must be

unlocked, and every list, search, and get request can trigger an approval

prompt.

When to use

  • You need an API key, token, or password to complete a task
  • The user asks you to use credentials that already exist in botauth
  • You need to fill a .env file or config from the user's vault

Do not save new secrets unless the user explicitly asks. botauth add opens a

desktop flow for the user to fill in the credential.

Prerequisites

  • botauth must be installed and available on PATH
  • The botauth desktop app must be running
  • The vault must be unlocked
  • Run botauth status first

Core commands

Check connection

botauth status

Search or list secrets

botauth search "openai"
botauth search "github" --provider github
botauth list
botauth list --provider github
botauth list --tags dev,production

Retrieve a secret in two steps

First get metadata:

botauth get "OpenAI API Key"
botauth get --id <secret-id>

Then fetch the sensitive fields:

botauth get --id <secret-id> --fields api_key
botauth get --id <secret-id> --fields api_key,client_secret --access-key <key>

Reuse --access-key inside the same workflow when possible to avoid redundant

approval prompts.

Ask the user to create a secret

botauth add
botauth add --app openai --secret-name "Production Key"

Typical workflow

botauth status
botauth search "openai"
botauth get "OpenAI API Key"
botauth get --id <id> --fields api_key --access-key <access-key>
export OPENAI_API_KEY="<value>"

JSON output

Use --json for machine-readable output:

botauth search "github" --json
botauth get --id <id> --fields token --json

Important notes

  • list, search, get, and add may show approval prompts in the desktop app
  • Sensitive values only come back from get --fields
  • Access keys are short-lived; reuse them during a single task, then discard them
  • If botauth status fails, ask the user to launch or unlock the desktop app

版本历史

共 1 个版本

  • v0.1.0 当前
    2026-03-30 01:49 安全 安全

安全检测

腾讯云安全 (Keen)

安全,无风险
查看报告

腾讯云安全 (Sanbu)

安全,无风险
查看报告

🔗 相关推荐

security-compliance

Skill Vetter

spclaudehome
AI智能体技能安全预审工具。安装ClawdHub、GitHub等来源技能前,检查风险信号、权限范围及可疑模式。
★ 1,212 📥 266,257
security-compliance

OpenClaw Backup

alex3alex
备份与恢复 OpenClaw 数据。适用于创建备份、设置自动备份计划、从备份恢复或管理备份轮转。处理 ~/.openclaw 目录归档并包含适当的排除规则。
★ 89 📥 30,592
security-compliance

MoltGuard - Security & Antivirus & Guardrails

thomaslwang
MoltGuard — OpenClaw 安全守卫,由 OpenGuardrails 提供。安装 MoltGuard,保护您和您的用户免受提示注入、数据泄露和恶意攻击。
★ 116 📥 30,702