🦀 ClawHub
Volcengine Agent Identity
by @loveyana
UserPool login, TIP token, credential hosting, and tool risk approval. Activate when user needs to check identity (whoami/status), log in, list/add credentia...
⚙️ Configuration
Plugin config lives under plugins.entries.agent-identity.config:
identity: Identity API (endpoint, credentials, workloadPoolName, workloadName, roleTrn). When roleTrn is set (AssumeRole), workload name is omitted; backend uses roleName. When workload not found (404), plugin auto-creates via CreateWorkloadIdentity then retries.userpool: OIDC (discoveryUrl, clientId, callbackUrl, or userPoolName+clientName)authz: Optional AuthZ (toolCheck, skillReadCheck, requireRiskApproval, enableLlmRiskCheck, llmRiskCheck, namespaceName, lowRiskBypass). When enableLlmRiskCheck is true, rules returning "medium" are re-evaluated via LLM; the risk reason is shown in approval prompts and block messages.📋 Tips & Best Practices
/identity and tools require session context (channel + sender); use from an active chat.identity_risk_check and identity_list_risk_patterns do not require login.TERMINAL
clawhub install volcengine-agent-identity