Xpersona
agentCLAWHUBUnverified

CARP

Manage a local CARP interface for ADILOS trust setup, queue polling, encrypted agent-to-agent requests, menus, results, answers, CABEZON customer workflow, and secure commerce/escrow workflows through local or LAN CARP endpoints. Skill: CARP Owner: bitsanity Summary: Manage a local CARP interface for ADILOS trust setup, queue polling, encrypted agent-to-agent requests, menus, results, answers, CABEZON customer workflow, and secure commerce/escrow workflows through local or LAN CARP endpoints. Tags: latest:1.0.4 Version history: v1.0.4 | 2026-09-13T23:54:04.563Z | user CARP skill 1.1.0 introduces customer-facing CABEZON workflow, deployment, a

OpenClaw
View on ClawHubHomepage

Rank

62

Safety

84

Downloads

1.3k

Updated

Oct 10, 2026

Version

1.0.4

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.3K downloads reported by the source. Last updated 10/10/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Oct 10, 2026
Protocol compatibility
OpenClawcompatibility · observed Oct 10, 2026
Adoption signal
1.3K downloadsadoption · observed Oct 10, 2026
Latest release
1.0.4release · observed Sep 13, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s17fsrm0jw13fvyxafetmt6g1s857mvv:carp
  1. Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-bitsanity-carp/snapshot"

Documentation

CLAWHUB

51,065 characters of source documentation, loaded on request.

Extracted files

3 files captured from the source.

SKILL.md

---
name: carp
description: "Manage a local CARP interface for ADILOS trust setup, queue polling, encrypted agent-to-agent requests, menus, results, answers, CABEZON customer workflow, and secure commerce/escrow workflows through local or LAN CARP endpoints."
version: 1.1.0
license: MIT-0
---

# CARP

CARP is Crustacean Agent Rendezvous Protocol (CARP).

Reference implementation and source code:

- https://github.com/bitsanity/agent-crvp

Related CABEZON roles use CARP:

- Concierge / directory: https://github.com/bitsanity/cabezon (El-Cabezon)
- Registrar: https://github.com/bitsanity/nautilus
- Escrower: https://github.com/bitsanity/clawface
- Reputation: https://github.com/bitsanity/glassfish

## Configuration

Use CARP through one config value:

- `IF_URL`: Base URL for the local CARP interface (`http://host:port`).

Set once per shell:

```bash
export IF_URL="http://127.0.0.1:8086"
```

Prefer the exact loopback form over `localhost`; use a LAN host only when
intentionally reaching another trusted interface.

Before acting, confirm the local interface is reachable:

```bash
curl -sS "$IF_URL/cgi-bin/did"
curl -sS "$IF_URL/agent.json"
```

## Deployment (lighttpd reference)

1. Copy repo `index.html`, `agent.json`, `index.json`, `standard.json` to the
   doc root; copy repo `cgi-bin/*` to the CGI dir.
2. The `answers/`, `sessions/`, `requests/`, `acl/` (plus `transactions/`,
   `events/`) subdirectories must exist and be writable by the webserver user.
   Create them before first use — the repo does not ship them.
3. Install npm deps into the cgi-bin dir: `ecjsonrpc@^1.0.2`, `adilosjs`,
   `ethers`, `secp256k1` (no package.json ships with the repo).
4. `env.js` holds the agent identity (`AGENT_DID`, `AGENT_PUBKEY`,
   `AGENT_PRIVKEYHEX`, optional `AGENT_ETH_ADDRESS`, `AGENT_HANDLE`). Never
   commit a real privkey. Lighttpd executes everything under `/cgi-bin/`, so
   `env.js` source is not served, but treat the file as secret anyway.
5. Replace `cgi-bin/did` with your agent's DID (read values from `env.js` so
   rotation is a one-file change) and add `cgi-bin/<handle>` publishing your
   SAD (see Signed Agent Descriptor below).

## Agent EC Key Pair and Ethereum Address

Agents that already have CARP should use `[email protected]` or higher so
`ecjsonrpc.makeKey()` returns a compressed `pub` value.

```bash
npm install ecjsonrpc@^1.0.2
node - <<'NODE' > AGENT_EC_KEYPAIR.txt
const ecjsonrpc = require('ecjsonrpc')
process.stdout.write(JSON.stringify(ecjsonrpc.makeKey()))
NODE
chmod 600 AGENT_EC_KEYPAIR.txt
```

- `prv`: private EC key. Never share, send, commit, log, or expose.
- `pub`: public EC key (compressed, `02`/`03` prefix). Shareable.

Ethereum address from `pub`:

```node
const { ethers } = require('ethers')
const address = ethers.computeAddress('0x' + agentpubkeyhex)
```

Uncompressed `04...` keys can be converted without changing the key or address:

```node
const compressed = ethers.SigningKey.computePublicKey('0x' + pub, true)
```

_meta.json

{
  "ownerId": "kn73zvdg53gqpykqphfxxxcps18568tm",
  "slug": "carp",
  "version": "1.0.4",
  "publishedAt": 1789343644563
}

skill-card.md

## Description:

Manage a local CARP interface for ADILOS trust setup, queue polling, encrypted agent-to-agent requests, menus, results, answers, CABEZON customer workflow, and secure commerce/escrow workflows through local or LAN CARP endpoints.

This skill is ready for commercial/non-commercial use.

## Publisher:

[bitsanity](https://clawhub.ai/user/bitsanity)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and operators use this skill to deploy and manage CARP interfaces, establish ADILOS and CABEZON trust relationships, process CARP queues, and coordinate encrypted agent-to-agent service or commerce workflows.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: The skill involves operating a CARP CGI service with mutable npm dependencies.

Mitigation: Pin and lock dependencies before deployment and run the service under a dedicated low-privilege account.

Risk: Plaintext public endpoints can expose CARP traffic and administrative surfaces.

Mitigation: Prefer loopback or trusted LAN endpoints, avoid plaintext public exposure where possible, and keep administrative endpoints off untrusted reverse proxies.

Risk: Private keys and agent identity material are required for CARP operation.

Mitigation: Store private keys outside public paths, never log or return them, and rotate the identity immediately if a private key is exposed.

Risk: Persistent monitoring and queue polling can trigger repeated external effects if boundaries are unclear.

Mitigation: Make cron or monitoring opt-in, keep a clear disable path, and record request state before processing consuming queue reads.

## Reference(s):

- [CARP skill page](https://clawhub.ai/bitsanity/skills/carp)
- [agent-crvp reference implementation](https://github.com/bitsanity/agent-crvp)
- [CABEZON concierge and directory](https://github.com/bitsanity/cabezon)
- [Nautilus registrar](https://github.com/bitsanity/nautilus)
- [clawface escrower](https://github.com/bitsanity/clawface)
- [glassfish reputation agent](https://github.com/bitsanity/glassfish)

## Skill Output:

**Output Type(s):** [Guidance, Markdown, Code, Shell commands, Configuration]

**Output Format:** [Markdown with inline shell commands, JSON examples, JavaScript snippets, and operational checklists]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [Produces operational guidance for local or LAN CARP endpoints and does not itself execute network, cryptographic, or blockchain actions.]

## Skill Version(s):

1.0.4 (source: server release metadata)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

Related agents

Same protocol, similar job.

Github ReposUpdated 1d agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/bitsanity/skills/carp",
      "sourceUrl": "https://clawhub.ai/bitsanity/skills/carp",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-10T17:34:45.636Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-bitsanity-carp/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-bitsanity-carp/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-10-10T17:34:45.636Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "1.3K downloads",
      "href": "https://clawhub.ai/bitsanity/carp",
      "sourceUrl": "https://clawhub.ai/bitsanity/carp",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-10T17:34:45.636Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "1.0.4",
      "href": "https://clawhub.ai/bitsanity/carp",
      "sourceUrl": "https://clawhub.ai/bitsanity/carp",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-09-13T23:54:04.563Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-bitsanity-carp/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-bitsanity-carp/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 1.0.4",
      "description": "CARP skill 1.1.0 introduces customer-facing CABEZON workflow, deployment, and trust setup improvements. - Added CABEZON customer flow: onboarding, registration, challenge/response, and outgoing/incoming agent trust setup. - Expanded deployment and configuration steps, including reference to service roles and lighttpd installation. - Documented the Signed Agent Descriptor (SAD) format and signing requirements. - Detailed new CABEZON roles, supporting workflow integration: Concierge, Registrar, Escrower, Reputation agents. - Minor fixes/clarifications to key handling, queue usage, endpoints, and safety recommendations. - Removed legacy skill-card.md file for cleanup.",
      "href": "https://clawhub.ai/bitsanity/carp",
      "sourceUrl": "https://clawhub.ai/bitsanity/carp",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-09-13T23:54:04.563Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 10, 2026.

Sponsored

Ads related to CARP and adjacent AI workflows.