Carapace

Companion app for your openclaw setup

Carapace is a local-only security companion for OpenClaw.

Carapace helps you move sensistive secrets into your OpenClaw host safely, even over insecure chat channels.

How it works:

1. OpenClaw generates a public key and shows it as a QR code (or ask your agent to send it to you)
2. In Carapace, you load that key by live scan, photo import or paste
3. You enter any secret (API key, token, password etc)
4. Carapace encrypts it locally and copies a payload: carapace:v1:ciphertext.
5. You paste that payload into your message channel and send it to your OpenClaw
6. OpenClaw decrypts locally and stores the secret on the host

Security Model:

No backend No cloud sync No Firebase No network calls from Carapace

Encryption is done on device with Libsodium sealed-box cryptography.

Requirements:

1. OpenClaw host companion package: @oakroadapps/openclaw-carapace-vault
2. OpenClaw host setup is required for decryption/import (add to your soul.md)

Ideal for users who want a lightweight, local-first way to provision secrets into OpenClaw without pasting plaintext into chat.