Skip to main content

Go SDK

The official Go SDK provides a typed client for the 1claw Vault API. It covers secrets, vaults, agents, policies, billing, audit, and the Intents API.

Installation​

go get github.com/1clawAI/1claw-go-sdk

Requires Go 1.21+.

Quick start​

package main

import (
	"context"
	"fmt"
	"log"
	"os"

	oneclaw "github.com/1clawAI/1claw-go-sdk"
)

func main() {
	client, err := oneclaw.NewClient(
		oneclaw.WithBaseURL("https://api.1claw.xyz"),
		oneclaw.WithAPIKey(os.Getenv("ONECLAW_API_KEY")),
	)
	if err != nil {
		log.Fatal(err)
	}

	ctx := context.Background()

	// List vaults
	vaults, err := client.Vaults.List(ctx)
	if err != nil {
		log.Fatal(err)
	}
	for _, v := range vaults {
		fmt.Printf("Vault: %s (%s)\n", v.Name, v.ID)
	}

	// Get a secret
	secret, err := client.Secrets.Get(ctx, "VAULT_ID", "api-keys/openai")
	if err != nil {
		log.Fatal(err)
	}
	fmt.Println("Secret value:", secret.Value)
}

Agent authentication​

Agents authenticate by exchanging their ocv_ API key for a short-lived JWT. The SDK handles token exchange and auto-refresh.

client, err := oneclaw.NewClient(
	oneclaw.WithBaseURL("https://api.1claw.xyz"),
	oneclaw.WithAgentAuth(
		os.Getenv("ONECLAW_AGENT_ID"),
		os.Getenv("ONECLAW_AGENT_API_KEY"),
	),
)
if err != nil {
	log.Fatal(err)
}

// Token exchange happens automatically on first request.
// The SDK refreshes the JWT 60 seconds before expiry.
secret, err := client.Secrets.Get(ctx, "VAULT_ID", "api-keys/stripe")

You can also use key-only auth (no agent ID required — resolved from the key prefix):

client, err := oneclaw.NewClient(
	oneclaw.WithBaseURL("https://api.1claw.xyz"),
	oneclaw.WithAgentAPIKey(os.Getenv("ONECLAW_AGENT_API_KEY")),
)

Available services​

ServiceDescription
AuthToken exchange, federation, MFA
VaultsCreate, list, get, delete vaults
SecretsCRUD, versioning, rotation, CMEK
AgentsRegister, update, list, delete agents
PoliciesAccess policy management
SharingShare secrets (links, email, agent-to-human)
ChainsList supported blockchains
BillingSubscription status, credits, usage
AuditQuery audit events
PlatformPlatform API (apps, templates, bootstrap)
SigningKeysMulti-chain signing key lifecycle
TreasuryTreasury multisigs and access requests

Submit a transaction (Intents API)​

tx, err := client.Agents.SubmitTransaction(ctx, agentID, &oneclaw.SubmitTransactionRequest{
	Chain:   "ethereum",
	ChainID: 1,
	To:      "0xRecipientAddress",
	Value:   "0.01",
	Data:    "0x",
})
if err != nil {
	log.Fatal(err)
}
fmt.Printf("TX hash: %s, status: %s\n", tx.TxHash, tx.Status)

Error handling​

All methods return a typed *oneclaw.Error when the API responds with 4xx/5xx:

secret, err := client.Secrets.Get(ctx, vaultID, "missing/path")
if err != nil {
	var apiErr *oneclaw.Error
	if errors.As(err, &apiErr) {
		fmt.Printf("Status: %d, Detail: %s\n", apiErr.StatusCode, apiErr.Detail)
	}
}