AGENTSCAN for OpenClaw

Verifiable receipts for OpenClaw agents. Every run becomes a cryptographically signed, on-chain anchored receipt that can be shared and verified from a URL.

Live at agentscan.online. Docs at docs.agentscan.online.

---

What you get

Install the Agent Scan plugin once in your OpenClaw config. From that moment forward, every agent reply produces a receipt:

• Full audit trail - every tool call, web search, file read, MCP call, and Claude Code action is hashed, signed, and recorded.
• Encrypted by default - receipts are stored encrypted on 0G Storage. The key stays on your machine, and /agentscan_share controls who can reveal the content.
• On-chain anchor - the receipt root hash is minted as an ERC-7857 iNFT on 0G Chain for tamper-evident verification.
• Cold-verifiable - paste the URL into any browser. No login, wallet, or setup required.

Example receipt: agentscan.online/verify/112 → see a real agent's 4 web searches + LLM response, end-to-end verifiable.

---

Quickstart (testnet, ~3 minutes)

You need OpenClaw installed, plus Node.js 20+ on your system.

1. Install the plugin from npm

openclaw plugins install @blockchainoracle/openclaw-verifiable-execution

2. Enable it

openclaw plugins enable verifiable-execution

3. Restart the OpenClaw gateway

openclaw gateway restart

The plugin auto-generates a signing wallet on first load and writes it to ~/.openclaw/verifiable-execution/wallet.json (mode 0o600, never leaves your machine). The startup banner prints the wallet address — copy it.

4. Fund the wallet from the testnet faucet

The plugin needs a few testnet 0G tokens to pay gas when it mints receipts. Without this step, every anchor attempt fails with "insufficient funds for gas."

• Open faucet.0g.ai
• Paste the wallet address from step 3
• Claim 0.1 0G (free, daily limit)

5. Fire your agent

Send a message to your bot, run a Claude Code session, anything that triggers agent_end. The plugin auto-anchors and prints:

{
  "level": "INFO",
  "component": "agent_end",
  "msg": "Session anchored on-chain",
  "data": {
    "tokenId": "42",
    "verifyUrl": "https://agentscan.online/verify/42"
  }
}

6. Share the receipt

Type /agentscan_share in the chat. The bot replies with a URL containing your reveal key in the URL fragment (#k=...). Send that URL to anyone — they decrypt and verify in their browser, your server never sees the key.

See all your tokens: open https://agentscan.online/agent/<your-wallet-address> for a feed of every receipt you've ever minted.

For per-flag configuration, mainnet setup, troubleshooting, and the full API → docs.agentscan.online.

---

Networks

Network	chainId	AgenticID	TEE Verifier
0G Galileo (testnet)	16602	0xd4a5eA…0E38	0x058fc3…C3AD
0G Aristotle (mainnet)	16661	0xC6f7fB…8937	0x4fffB5…58D2

Mainnet has no faucet — fund the wallet via a CEX withdrawal to native 0G chain. Everything else stays the same.

---

Verify a receipt without installing anything

Want to just see a proof? No setup required:

• Open any receipt at agentscan.online/verify/<tokenId>
• Or hit the JSON: agentscan.online/api/verify/112
• Or read the iNFT directly on the explorer: chainscan-galileo.0g.ai/token/0xd4a5eA…0E38?a=0

---

Repo layout (for contributors)

apps/
  dashboard/    Next.js 14 verifier UI            → agentscan.online
  docs/         Nextra docs site                  → docs.agentscan.online
plugin/         The OpenClaw plugin source        → @blockchainoracle/openclaw-verifiable-execution on npm
packages/       Shared workspace libraries (imported by apps/ + plugin/)
  chain-client/   AgenticIDClient + SessionAnchor (on-chain reads + mints)
  logger/         SessionLogger + 0G Storage upload
  tee-adapter/    TEE signing-message helpers + MockTEEVerifier ABI
contracts/      AgenticID.sol + MockTEEVerifier.sol (Hardhat, Solidity 0.8.24)
scripts/        Utility scripts — install.sh, smoke tests, init-wallet
tests/visual/   Playwright visual regression for the dashboard
nixpacks.toml   Multi-target Coolify deploy (APP_NAME picks dashboard or docs)

Each subfolder has its own README.md with what's inside and how to work on it: plugin/, packages/chain-client/, packages/logger/, packages/tee-adapter/, contracts/, scripts/.

Naming notes

• plugin/ is singular because this repo ships exactly one OpenClaw plugin. OpenClaw renamed "skills" → "plugins" in 2026.4 — the folder matches the current terminology.
• plugin/dist/ is the npm-publish artifact (gitignored). Build with pnpm --filter @verifiable-agent-execution/plugin build.
• packages/ vs apps/ is standard pnpm-workspace convention — apps are deployables, packages are libraries imported by apps and the plugin.
• The npm-publish name (@blockchainoracle/openclaw-verifiable-execution) is different from the workspace name (@verifiable-agent-execution/plugin) and intentionally so — the npm name is user-facing and frozen.

To build from source:

git clone https://github.com/Blockchain-Oracle/agentscan
cd agentscan
pnpm install
pnpm exec tsc --noEmit && pnpm run lint && pnpm test && pnpm run build

Full developer setup, smoke scripts, contract redeployment, and contribution guide → docs.agentscan.online/contributing.

---

Links

• Live dashboard: agentscan.online (testnet) · mainnet.agentscan.online (mainnet)
• Documentation: docs.agentscan.online
• npm package: @blockchainoracle/openclaw-verifiable-execution
• OpenClaw: openclaw.ai
• 0G Network: 0g.ai · docs.0g.ai
• Testnet faucet: faucet.0g.ai (0.1 0G/day, Galileo only)

---

License

Apache-2.0. See LICENSE.