clawvault/README.md

ClawVault

A personal vault with two-tier encryption for AI assistants.

Features

• Two-tier encryption: L1 (server-side, AI-readable) + L2 (client-side only)
• Single binary: Go, cross-compiles, one port (default 8765)
• Single file: SQLite database, portable
• LLM-powered import: Parse any password manager export format
• LLM field mapping: Smart autofill via Chrome extension
• MCP endpoint: AI assistant integration
• TOTP generation: Live TOTP codes for L1 entries

Quick Start

# Generate vault key
export VAULT_KEY=$(openssl rand -hex 32)
export PORT=8765
export DB_PATH=./clawvault.db

# Run
./clawvault

Building

CGO_ENABLED=1 go build ./cmd/clawvault

API Endpoints

• GET /health - Health check
• POST /api/auth/setup - Initialize session
• GET/POST /api/entries - CRUD entries
• GET /api/search?q= - Search entries
• GET /api/generate - Password generator
• POST /api/import - LLM import
• GET /api/ext/totp/:id - TOTP codes
• GET /api/ext/match?url= - URL matching
• POST /api/ext/map - LLM field mapping
• POST /mcp - MCP JSON-RPC endpoint
• GET /api/audit - Audit log

Chrome Extension

Load /extension as unpacked extension in Chrome.

License

Private - Johan Jongsma