name: keychat description: "Install Keychat — sovereign E2E encrypted messaging for OpenClaw agents via Signal Protocol over Nostr relays. Use when the user wants to add Keychat or set up encrypted messaging for their agent." metadata: {"openclaw":{"emoji":"🔐","homepage":"https://github.com/keychat-io/keychat-openclaw"}}

Install Keychat

openclaw plugins install @keychat-io/keychat
openclaw gateway restart

Supported platforms: macOS (ARM/x64), Linux (x64/ARM64).

The plugin automatically downloads the bridge binary, configures channels.keychat in openclaw.json, and generates a new Nostr identity on first start.

The agent will send its Keychat ID (npub1...), contact link, and QR code to the user's active chat after first install.

Security Warnings

The scanner may show two warnings during install. Both are expected:

• bridge-client.ts — Spawns a Rust sidecar for Signal Protocol and MLS Protocol encryption (Keychat's crypto is implemented in Rust, needs bridging to Node.js)
• keychain.ts — Stores identity mnemonics in the OS keychain (macOS Keychain / Linux libsecret) for security

Upgrade

Tell the agent "upgrade keychat" in any chat, or manually:

openclaw plugins install @keychat-io/keychat@latest
openclaw gateway restart

Connect

After install, the user can add the agent as a Keychat contact:

1. Open the Keychat app → tap Add Contact
2. Scan the QR code, or paste the agent's npub
3. The agent automatically accepts and establishes an encrypted session

The user can also ask the agent "what's my Keychat ID" at any time to get the npub, link, and QR code.

More info: github.com/keychat-io/keychat-openclaw