gloves

gloves is a secure secrets control plane for multi-agent runtimes and human operators.

It provides:

agent-owned encrypted secrets
human approval workflows
access/audit controls
vault and daemon operations
an interactive TUI navigator

Documentation

Start here: Documentation Index

Fast links:

Command Model

Primary command groups:

gloves secrets ...: set/get/grant/revoke/status
gloves request ...: create one pending human request
gloves requests ...: list/approve/deny pending requests
gloves vault ...: encrypted vault operations
gloves gpg ...: per-agent GPG key workflows
gloves tui: interactive command center

Recursive help is supported:

gloves help
gloves help secrets
gloves help secrets set
gloves secrets help set
gloves requests help approve

Quick Example

# initialize runtime layout
gloves --root .openclaw/secrets init

# create one secret
gloves --root .openclaw/secrets secrets set service/token --generate --ttl 1

# read secret
gloves --root .openclaw/secrets secrets get service/token

# list entries
gloves --root .openclaw/secrets list

For complete setup and human/agent workflows, use Quickstart.

Install

From release binaries (recommended)

curl -fsSL https://raw.githubusercontent.com/openclaw/gloves/main/scripts/setup-openclaw.sh | bash

From crates.io

cargo install gloves

From source

git clone https://github.com/openclaw/gloves
cd gloves
cargo install --path .

Security and Policy

Use least-privilege agent access in .gloves.toml
Prefer gloves secrets get --pipe-to <command> over raw stdout in automation
Keep secrets root and config permissions private
Use gloves audit --json for machine-readable audit export

Details:

Development

cargo fmt --all
cargo clippy --all-targets --all-features -- -D warnings
cargo test --all-features --locked
cargo doc --no-deps

gloves 0.5.6