Skill: gogo6969/clawapi (version 1.0.1)

--- name: clawapi description: Switch AI models and manage API keys for OpenClaw with a native macOS app. Supports 16 providers including OpenAI, Anthropic, xAI, Google, Groq, Ollama, LM Studio, and more. homepage: https://github.com/Gogo6969/clawapi user-invocable: true metadata: {"openclaw":{"emoji":"🔑","requires":{"bins":["curl"],"config":["skills.entries.clawapi"]},"install":[{"kind":"script","command":"curl -fsSL https://raw.githubusercontent.com/Gogo6969/clawapi/main/install.sh | bash"}]}} --- # ClawAPI — Model Switcher & Key Vault for OpenClaw ClawAPI is a native macOS app that lets you switch AI models and manage API keys for OpenClaw. ## What It Does - **One-click model switching** — Pick any model from any provider and apply it instantly - **Touch ID** — Biometric authentication for adding and deleting API keys - **16 providers** — OpenAI, Anthropic, xAI, Google, Groq, Mistral, OpenRouter, Cerebras, Kimi, MiniMax, Z.AI, OpenCode Zen, Vercel AI, HuggingFace, Ollama, LM Studio - **Config safety** — JSON validation before writing, automatic `.bak` backups ## Installation ### Option 1: Download from GitHub Releases (recommended) Download the latest signed and notarized `.zip` from [GitHub Releases](https://github.com/Gogo6969/clawapi/releases), unzip, and move `ClawAPI.app` to `/Applications`. ### Option 2: Install script ```bash curl -fsSL https://raw.githubusercontent.com/Gogo6969/clawapi/main/install.sh | bash ``` The install script downloads the same signed `.zip` from GitHub Releases, verifies the SHA-256 checksum, unzips it, and moves the app to `/Applications`. You can [review the script source](https://github.com/Gogo6969/clawapi/blob/main/install.sh) before running it. Requires macOS 14+. The app is signed with an Apple Developer ID and notarized by Apple. ## How It Works 1. **Add a provider** — Click `+`, pick a provider, paste your API key 2. **Pick a model** — Use the dropdown to choose a sub-model (GPT-4.1, Claude Sonnet 4, Grok 4, etc.) 3. **Done** — ClawAPI syncs everything to OpenClaw automatically ## Where API Keys Are Stored API keys are managed in **two places** by design: 1. **macOS Keychain (master copy)** — The key you enter is stored in the macOS Keychain, protected by hardware encryption and Touch ID. This is the authoritative copy. 2. **`auth-profiles.json` (sync copy for OpenClaw)** — OpenClaw reads API keys from its own `auth-profiles.json` config file. ClawAPI writes a copy of the key there so OpenClaw can use it. This file lives in `~/Library/Application Support/OpenClaw/`. The active model selection is written to `openclaw.json`. No proxy, no middleware — OpenClaw talks directly to provider APIs. ## Security & Privacy - API keys are stored in the **macOS Keychain** with hardware encryption; a sync copy is written to OpenClaw's `auth-profiles.json` so that OpenClaw can read them - **Touch ID** authentication for adding/deleting keys (password fallback on Macs without Touch ID) - The app is **signed with Apple Developer ID** and **notarized by Apple** - Hardened runtime enabled - **No data leaves your machine** — ClawAPI only reads/writes local OpenClaw config files - No telemetry, no analytics, no phone-home ## External Endpoints | Endpoint | Purpose | Data Sent | |----------|---------|-----------| | `raw.githubusercontent.com` | Check for app updates | None (reads `update.json`) | | `localhost:11434` | Discover Ollama models | None (reads local API) | | `localhost:1234` | Discover LM Studio models | None (reads local API) | No other network requests are made by ClawAPI. ## Links - **GitHub:** [github.com/Gogo6969/clawapi](https://github.com/Gogo6969/clawapi) - **Wiki:** [github.com/Gogo6969/clawapi/wiki](https://github.com/Gogo6969/clawapi/wiki) - **User Guide:** [docs/USER_GUIDE.md](https://github.com/Gogo6969/clawapi/blob/main/docs/USER_GUIDE.md)


Security scan verdicts — ClawScan: suspicious | static analysis:  | VirusTotal: suspicious | SkillSpector: suspicious (MEDIUM)