1Claw launches zero-trust security platform for AI agents with Bankr partnership
The startup’s framework encrypts credentials in hardware and processes operations server-side to prevent data exposure.
Also in: 日本語 · エージェント経済 · 한국어 · 에이전트포스트 · 简体中文 · 链智日报
Startup 1Claw’s framework encrypts credentials in hardware and processes operations server-side to prevent data exposure in agent prompts or logs.
1Claw, a security platform for AI agents, announced on October 6, 2026, a zero-trust framework designed to prevent agents from accessing sensitive data while executing transactions and API calls. The company said its platform encrypts credentials in hardware and processes operations server-side, eliminating exposure in agent prompts or logs.
The 1Claw Platform API includes three components, according to the company’s documentation. Shroud scans for malicious code in agent traffic. The Intents API signs transactions and executes API calls without exposing keys. Automations and Runtimes provide secure, autonomous execution environments. The platform supports 109 Ethereum Virtual Machine chains and additional blockchains including Bitcoin, Solana, XRP, Cardano, and Tron.
The company said its system assigns each agent an identity and scoped permissions, with keys stored in hardware security modules and traffic inspected in trusted execution environments. Secrets are encrypted with per-secret data encryption keys wrapped by cloud key management services, optionally split across Google Cloud Platform, AWS, and Azure. The company claims this prevents prompt injection attacks, API key leaks, and exfiltration attempts.
The platform integrates with development tools including Claude, Cursor, and GPT, replacing environment files with runtime credential fetching. For on-chain operations, DeFi agents sign transactions through the Intents API, with keys remaining wrapped in hardware security modules or stored in user passkeys. Customer-facing agents receive scoped credentials, and every action generates an audit log entry.
1Claw said it is working with Bankr, alongside partners Google Cloud, Circle, Tenderly, Coder, and the XRP Ledger Foundation. The company offers a free tier for new users.
According to 1Claw’s site, the platform provides bi-directional injection scoring, exfiltration URL blocking, and multi-layer threat detection covering encoding, network, filesystem, and social engineering vectors. Agents can be configured with token caps, blocked domains, and spend limits. The Intents API supports allowlists, daily transaction limits, and Tenderly simulation for pre-execution validation.
The company’s documentation states that secrets are never exposed in agent context windows, logs, or memory. Instead, agents execute through server-side bindings, with credentials injected at runtime. The platform also offers embedded wallets on six blockchains, spend policies, and OAuth-based authentication.