Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

Use Native Credential Proxy (NanoClaw)

Switches NanoClaw off the OneCLI credential gateway and injects Anthropic API keys or OAuth tokens straight from .env into the agent container.

Dev & CodingAdvanced★ 30,471⑂ 12,865AI score 8/10Last updated: Aug 9, 2026

What it does

NanoClaw normally keeps Anthropic credentials in the OneCLI agent vault and injects them per request. This skill deliberately inverts that: it reads ANTHROPIC_API_KEY / CLAUDE_CODE_OAUTH_TOKEN / ANTHROPIC_AUTH_TOKEN (plus optional ANTHROPIC_BASE_URL) from .env and passes them into the Docker container as -e env vars the Claude Agent SDK reads natively.

  • Copies native-credential-proxy.ts and two test files from the skill folder into src/
  • Makes a single one-line reach-in in buildContainerArgs (src/container-runner.ts), right after the TZ line
  • Fully gated: without NANOCLAW_NATIVE_CREDENTIALS=true the function is a no-op and the OneCLI path is untouched
  • Includes build + vitest validation, service restart steps, troubleshooting, and a REMOVE.md rollback

Who it's for

  • Self-hosters of NanoClaw who want no OneCLI vault, no HTTPS proxy, no certificates
  • People preferring plain .env credential management (Claude Pro/Max token or console API key)
  • Anyone routing traffic to a custom endpoint via ANTHROPIC_BASE_URL

Prerequisites: the NanoClaw repo itself, Node/pnpm, Docker. You must accept that credentials end up in container environment variables.

Examples

  1. "Run NanoClaw on my Claude Max subscription without OneCLI" — the skill patches the code, tells you to run claude setup-token in a separate terminal, adds the flag and token to .env, then restarts the service.
  2. "Is this already applied?" — the Phase 1 pre-flight command prints applied / not-applied so only the missing steps run.
  3. "Container says no credential found, or I get 401s" — the troubleshooting table maps each symptom to a fix (missing flag, expired token, service not restarted).

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/nanocoai/nanoclaw/HEAD/.claude/skills/use-native-credential-proxy/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the .claude/skills/use-native-credential-proxy folder from the GitHub repo nanocoai/nanoclaw into my ~/.claude/skills/use-native-credential-proxy/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/nanocoai/nanoclaw.git && mkdir -p ~/.claude/skills && cp -r nanoclaw/.claude/skills/use-native-credential-proxy ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Clone the project: git clone https://github.com/nanocoai/nanoclaw.git && cd nanoclaw
  2. Verify the skill ships with the repo: ls .claude/skills/use-native-credential-proxy
  3. Optionally make it a personal skill too: mkdir -p ~/.claude/skills && cp -r .claude/skills/use-native-credential-proxy ~/.claude/skills/
  4. Install dependencies: pnpm install
  5. Run claude from the project root and ask: "use the use-native-credential-proxy skill to switch to .env credentials".
  6. Choose the subscription token path (claude setup-token) or an API key, then add NANOCLAW_NATIVE_CREDENTIALS=true and the credential to .env yourself — never paste tokens into chat.
  7. Confirm pnpm run build and the two vitest files both pass.
  8. Restart the service, send a test message in a registered chat, and confirm the agent replies. To revert, follow REMOVE.md.
View source on GitHub ↗License: MIT