Get Started

Have OpenClaw

Install OpenClaw from the getting started guide, then install a background gateway. Skip if you already have a running gateway.

openclaw gateway install
openclaw gateway status

Check: gateway status reports the gateway is running. Full host with Podman + nginx TLS: openclaw-agents.

Install the Passport plugin

Install the IdentyClaw Passport plugin and restart the gateway:

openclaw plugins install clawhub:@identyclaw/openclaw-identyclaw-plugin --accept-capabilities
openclaw gateway restart

Check: Restart succeeds. Prefer the auto-bootstrap 64-character hex account id the gateway printed (implicit_account_id). If none printed, create one:

mkdir -p "${HOME}/.local/bin"
# Point PLUGIN_ROOT at the installed plugin dir (often under ~/.openclaw/extensions/)
ln -sfn "${PLUGIN_ROOT}/scripts/generate-near-account.mjs" "${HOME}/.local/bin/identyclaw-generate-near-account"
export PATH="${HOME}/.local/bin:${PATH}"
identyclaw-generate-near-account

Check: Command prints a 64-character hex id. Copy that id for step 3 — never a private key or JWT.

PLUGIN_FLAGS=(--accept-capabilities)
openclaw plugins install clawhub:@identyclaw/openclaw-identyclaw-webhooks-plugin "${PLUGIN_FLAGS[@]}"
openclaw plugins install clawhub:@identyclaw/openclaw-a2a-plugin "${PLUGIN_FLAGS[@]}"
openclaw plugins install clawhub:@identyclaw/openclaw-identyclaw-httpbearer-plugin "${PLUGIN_FLAGS[@]}"
openclaw gateway restart

Obtain a Passport

Open purchase.identyclaw.com, paste the 64-character hex account id, and mint. Then restart and open the TUI:

openclaw gateway restart
openclaw tui

In the TUI, ask the agent to call identyclaw_ensure_session, then identyclaw_get_my_identity.

Check: Identity shows Passport fields including token_id. If lookup fails, wait for on-chain confirm and retry — do not create a new account.

Write IDENTITY.md

In the TUI (or openclaw tui), send:

please read all your idcp passport details and use that information to write IDENTITY.md

Check: IDENTITY.md exists and contains Passport details (including token_id).

Have Hermes

Install Hermes Agent. Skip if hermes --version already works. Expect a few minutes and about 2.3 GB under ~/.hermes.

curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash -s -- --non-interactive --skip-browser --skip-computer-use
export PATH="$HOME/.local/bin:$PATH"
hermes --version

Check: hermes --version prints a version. If a new terminal cannot find hermes, add the PATH export to your shell rc.

Install the Passport plugin

Install libatomic, then identyclaw-auth, then run install-deps:

# Fedora / RHEL
sudo dnf install -y libatomic
# Debian / Ubuntu
sudo apt-get update && sudo apt-get install -y libatomic1

hermes plugins install discernible-io/hermes-identyclaw-auth --enable
hermes identyclaw install-deps

Check: install-deps prints a 64-character hex account_id. Copy that id for step 3 — never a private key or JWT. To reprint later: hermes identyclaw enroll.

hermes identyclaw sidecar start
hermes plugins install discernible-io/hermes-identyclaw-a2a
hermes plugins install discernible-io/hermes-identyclaw-webhook

hermes identyclaw ensure_session --force
hermes identyclaw ensure_session --base https://peer.example.com

Obtain a Passport

Open purchase.identyclaw.com, paste the printed account_id, and mint. Then confirm:

hermes identyclaw me

Check: Output includes Passport fields with token_id. If you see nested RODIT_NOT_FOUND, wait for on-chain confirm and retry — do not re-enroll.

Write IDENTITY.md

In Hermes chat, send:

please read all your idcp passport details and use that information to write IDENTITY.md

Check: IDENTITY.md exists and contains Passport details (including token_id).

Install near-cli-rs

Install the near binary from near-cli-rs (required for idcp-wallet.sh). Pick one path:

# Mac / Linux installer
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/near/near-cli-rs/releases/latest/download/near-cli-rs-installer.sh | sh

# or npm
npm install -g near-cli-rs@latest

# or Cargo (needs Rust; on Debian/Ubuntu also: sudo apt install libudev-dev)
cargo install near-cli-rs

near --version

Check: near --version prints a version.

Create a NEAR account

Clone discernible-io/infra and create an account:

git clone https://github.com/discernible-io/infra.git ~/infra
cd ~/infra
./idcp-wallet.sh help
./idcp-wallet.sh gennearaccount

Check: gennearaccount prints a 64-character hex account id under ~/.near-credentials/. Copy that id for step 3 — never a private key or JWT. New accounts need ~0.01 NEAR to initialize. Set BLOCKCHAIN_ENV=mainnet (or testnet) as needed.

Obtain a Passport

Open purchase.identyclaw.com, paste the account id, and mint. Then list it:

./idcp-wallet.sh <accountID>

Check: Listing shows the Passport. If empty, wait for on-chain confirm and retry.