Protect API keys and secrets for OpenClaw. Credentials stay in your vault, never in the agent's memory
ClawTunnel — one-time, never-stored, out-of-band secret hand-off plugin for OpenClaw
Auto-rotates Tavily API keys on 429 rate limit errors for OpenClaw
