Skip to main content

Overview

OpenClaw is a popular open-source AI agent framework. Bloom provides seamless integration to secure your OpenClaw agents with authentication, authorization, audit logging, and real-time protection.

Quick Start

1. Install the Bloom Skill

2. Configure Environment Variables

Add to your .env file:

3. Use in Your Agent

How It Works

Configuration Options

Create a config.yaml in your skill directory:

Security Features

Kill Switch

Immediately halt a compromised agent:
Go to Agents → Click the red Kill button

Prompt Injection Detection

Bloom automatically scans requests for injection attacks:
  • Direct instruction overrides (“ignore previous instructions”)
  • Role manipulation (“you are now…”)
  • Credential extraction attempts
  • Encoded payloads

Audit Logging

Every API call is logged with:
  • Timestamp
  • Agent ID
  • Target service/endpoint
  • Request/response metadata
  • Latency
  • Authorization result
View logs at: Dashboard > Activity

Example: Full Agent Setup

Troubleshooting

  • Verify BLOOM_API_KEY is set correctly
  • Check the agent exists in the dashboard
  • Ensure the agent has scopes assigned
  • Check the agent’s scopes allow the endpoint
  • Review audit logs for the denial reason
  • Temporarily set injection detection to “log” mode to debug
  • Bloom adds ~10-50ms overhead
  • Enable caching for repeated requests
  • Check network connectivity to iam.bloomtechnologies.app

Next Steps