@sirrlock/openclaw-skill

OpenClaw workspace skill for Sirr — the ephemeral secret manager.

Installation

npm install @sirrlock/openclaw-skill

Add to your OpenClaw workspace:

// openclaw.config.js
module.exports = {
  skills: ["@sirrlock/openclaw-skill"]
};

Configuration

| Field | Description | Default | |-------|-------------|---------| | serverUrl | Base URL of your Sirr server | http://localhost:39999 | | token | Bearer token (master key or scoped API key) | — | | org | Organization slug for multi-tenant mode (optional) | — |

When org is set, all API calls are scoped to /orgs/{org}/... endpoints.

Triggers

The skill activates on keywords: secret, sirr, credential, burn after read, ephemeral, api key, vault.

Operations

| Category | Operations | |----------|-----------| | Secrets | getSecret, checkSecret, pushSecret, listSecrets, patchSecret, deleteSecret, pruneSecrets | | Audit | queryAudit | | Webhooks | createWebhook, listWebhooks, deleteWebhook | | Keys | createKey, deleteKey (list via getMe) | | Me | getMe, patchMe | | Orgs | createOrg, listOrgs, deleteOrg | | Principals | createPrincipal, listPrincipals, deletePrincipal | | Roles | createRole, listRoles, deleteRole | | Server | healthCheck |

Multi-Tenant Support

Set the org config field to your organization slug to scope all operations to that org:

// openclaw.config.js
module.exports = {
  skills: [{
    name: "@sirrlock/openclaw-skill",
    config: {
      serverUrl: "https://sirr.example.com",
      token: "sk_...",
      org: "my-team"
    }
  }]
};

With org: "my-team", requests route to /orgs/my-team/secrets, /orgs/my-team/audit, etc. Without org, requests use the default single-tenant paths (/secrets, /audit, etc.).

Documentation

Full guide at sirrlock.com/docs/openclaw.

License

MIT — see LICENSE.