# Welcome to Armorer 🛡️

**Armorer** is a secure-by-default installer and runner for Autonomous AI Agents.

It bridges the gap between powerful AI capabilities and system security, ensuring that agents like **OpenClaw** operate within strict, user-defined boundaries.

## Key Features

*   **🛡️ Secure Installer**: High-integrity Docker-based setup with automatic Docker Hub search for official images.
*   **🧠 AI Security Architect**: An interactive interview process to determine the least-privilege risk profile.
*   **🔑 Credential Vault**: Enter API keys once; auto-fill them securely for any new agent installation.
*   **👁️ Global Oversight Hub**: Real-time monitoring and autonomous secret redaction across all your agents.
*   **⚔️ Skill Armory**: A centralized library of **MCP (Model Context Protocol)** servers that can be injected into any agent.
*   **🚑 Agentic Recovery**: Autonomous self-healing for failed installations and configuration errors.
*   **📦 Sandboxing**: Strict Network and Filesystem policies (e.g., Scoped access to specific folders).

## Quick Start

```bash
# Configure AI Provider Keys (Securely)
armorer configure

# Preferred OpenClaw First-Run Setup
armorer chat
# then ask: install openclaw

# Run with Guided Startup
armorer run openclaw

# Inject a new capability
armorer inject openclaw brave-search
```

For OpenClaw specifically, first-run install and setup are now owned by Armorer chat/TUI so provider/model/API key/channel prompts, retry cleanup, Telegram verification, and the final `armorer run openclaw status` check stay inside Armorer. Use `armorer install openclaw` or native `run ... onboard/configure` commands only when you intentionally want the direct CLI path.
