360 Secure SkillHub
360 安全技能中心

ClawAPI

核心功能:支持一键切换16个主流AI提供商的模型,通过Touch ID安全管理API密钥,提供配置校验与自动备份。典型场景:使用OpenClaw时快速切换模型、安全管理多平台API密钥。通过图形界面操作,自动同步配置到OpenClaw,密钥存于macOS钥匙串及OpenClaw配置文件,无数据外传,应用经苹果签名公证。

gogo6969
gogo6969
热度 40.64
最近更新 2026-05-17 12:14:51
分类:开发依赖:代码执行 / 联网浏览搜索 / 第三方 API / MCP 服务应用场景:API 集成 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add clawapi
Metadata
name
clawapi
description
Switch AI models and manage API keys for OpenClaw with a native macOS app. Supports 16 providers including OpenAI, Anthropic, xAI, Google, Groq, Ollama, LM Studio, and more.
homepage
https://github.com/Gogo6969/clawapi
user-invocable
true
metadata
{"openclaw":{"emoji":"🔑","requires":{"bins":["curl"],"config":["skills.entries.clawapi"]},"install":[{"kind":"script","command":"curl -fsSL https://raw.githubusercontent.com/Gogo6969/clawapi/main/install.sh | bash"}]}}

ClawAPI — Model Switcher & Key Vault for OpenClaw

ClawAPI is a native macOS app that lets you switch AI models and manage API keys for OpenClaw.

What It Does

  • One-click model switching — Pick any model from any provider and apply it instantly
  • Touch ID — Biometric authentication for adding and deleting API keys
  • 16 providers — OpenAI, Anthropic, xAI, Google, Groq, Mistral, OpenRouter, Cerebras, Kimi, MiniMax, Z.AI, OpenCode Zen, Vercel AI, HuggingFace, Ollama, LM Studio
  • Config safety — JSON validation before writing, automatic .bak backups

Installation

Option 1: Download from GitHub Releases (recommended)

Download the latest signed and notarized .zip from GitHub Releases, unzip, and move ClawAPI.app to /Applications.

Option 2: Install script

curl -fsSL https://raw.githubusercontent.com/Gogo6969/clawapi/main/install.sh | bash

The install script downloads the same signed .zip from GitHub Releases, verifies the SHA-256 checksum, unzips it, and moves the app to /Applications. You can review the script source before running it.

Requires macOS 14+. The app is signed with an Apple Developer ID and notarized by Apple.

How It Works

  1. Add a provider — Click +, pick a provider, paste your API key
  2. Pick a model — Use the dropdown to choose a sub-model (GPT-4.1, Claude Sonnet 4, Grok 4, etc.)
  3. Done — ClawAPI syncs everything to OpenClaw automatically

Where API Keys Are Stored

API keys are managed in two places by design:

  1. macOS Keychain (master copy) — The key you enter is stored in the macOS Keychain, protected by hardware encryption and Touch ID. This is the authoritative copy.
  2. auth-profiles.json (sync copy for OpenClaw) — OpenClaw reads API keys from its own auth-profiles.json config file. ClawAPI writes a copy of the key there so OpenClaw can use it. This file lives in ~/Library/Application Support/OpenClaw/.

The active model selection is written to openclaw.json. No proxy, no middleware — OpenClaw talks directly to provider APIs.

Security & Privacy

  • API keys are stored in the macOS Keychain with hardware encryption; a sync copy is written to OpenClaw's auth-profiles.json so that OpenClaw can read them
  • Touch ID authentication for adding/deleting keys (password fallback on Macs without Touch ID)
  • The app is signed with Apple Developer ID and notarized by Apple
  • Hardened runtime enabled
  • No data leaves your machine — ClawAPI only reads/writes local OpenClaw config files
  • No telemetry, no analytics, no phone-home

External Endpoints

Endpoint Purpose Data Sent
raw.githubusercontent.com Check for app updates None (reads update.json)
localhost:11434 Discover Ollama models None (reads local API)
localhost:1234 Discover LM Studio models None (reads local API)

No other network requests are made by ClawAPI.

Links