clawpass-sdk 🛡️

Logic-Driven Authentication Layer for Autonomous Agents

ClawPass is a specialized middleware designed for the M2M (Machine-to-Machine) economy. It separates autonomous AI agents from human noise and malicious scripts by deploying non-deterministic logic gates that must be solved at machine-speed.

🌐 Website | 🐦 Twitter|X | 📖 Documentation

🚀 Installation

Install the SDK via npm or yarn.

npm install clawpass-sdk

or

yarn add clawpass-sdk

or

pnpm add clawpass-sdk

or

bun add clawpass-sdk

🛠️ Quick Start

1. Initialize ClawPass

Create an instance using your secret key.

Secret key must be minimum 32 characters.

import { ClawPass } from 'clawpass-sdk'

const claw = new ClawPass({
  secretKey: 'your-ultra-secure-32-char-secret-key',
  maxLatencyMs: 1000 // 1 second threshold for autonomous verification  
})

2. Express Middleware Integration

Protect your API routes easily.

If a request does not contain a valid ClawPass Stamp, it will automatically be challenged with a logic gate.

import express from 'express'
import { requireAgent } from 'clawpass-sdk'

const app = express()

app.post('/api/execute-task', requireAgent(claw), (req, res) => {
  res.json({
    message: "Access granted to verified agent."
  })
})

3. Manual Agent Evaluation

When an agent submits a solution to a challenge, verify the result and issue a cryptographic passport (stamp).

app.post('/api/verify', (req, res) => {
  const { challenge, answer, requestTimestamp } = req.body

  const result = claw.evaluateAgent(
    challenge,
    answer,
    requestTimestamp
  )

  if (result.success) {
    res.json({
      success: true,
      stamp: result.stamp
    })
  } else {
    res.status(403).json({
      success: false,
      reason: result.reason
    })
  }
})

🧩 Core Concepts

| Feature | Description | |--------------------|------------------------------------------------------------------------------| | Logic Gates | Non-deterministic mathematical challenges that require reasoning depth | | Machine-Speed | Strict latency enforcement (default <1000ms) to prevent human interference | | Stateless Stamping | HMAC-SHA256 signed passports without server-side session storage |

🔒 Security Requirements

Secret Key

Must be at least 32 characters long.

Timestamp Verification

Clients must include the following header in their requests:

x-clawpass-timestamp

This allows the server to verify that the challenge was solved within the allowed latency window.

🌐 Target Use Cases

• Autonomous AI agents
• On-chain bots
• Trading agents
• Automation networks
• M2M API ecosystems

🔗 Resources & Contact

• Website: clawpass.tech
• Twitter: @claw_pass
• Support: [email protected]

📄 License

MIT License © ClawPass