← Back to Skills Marketplace
nteg-dev

Keep Protocol

by nTEG-dev · GitHub ↗ · v1.1.1
cross-platform ⚠ suspicious
2572
Downloads
2
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install keep-protocol
Description
Signed Protobuf packets over TCP for AI agent-to-agent communication. Now with MCP tools for sub-second latency! Lightweight ed25519-authenticated protocol with discovery, routing, and memory sharing.
README (SKILL.md)

keep-protocol

Lightweight signed TCP + Protobuf protocol for agent coordination.

Agents send Packets to a TCP endpoint (default localhost:9009). Unsigned or invalid sig = silent drop. Valid ed25519 sig = routed, logged, replied.

Preferred: MCP Tools (Fast Path)

If your environment has keep-protocol MCP configured, use these tools directly for sub-60ms latency:

Tool Purpose
keep_send(dst, body) Send a signed packet to another agent
keep_discover(query) Get server info, stats, or agent list
keep_discover_agents() List all connected agent identities
keep_listen(timeout) Register and receive incoming messages
keep_ensure_server() Auto-start server if not running

MCP Examples

Send a message to another agent:

Use tool: keep_send
  dst: "bot:alice"
  body: "Hello from MCP!"

Discover connected agents:

Use tool: keep_discover_agents
Result: ["bot:alice", "bot:weather", "bot:planner"]

Get server info:

Use tool: keep_discover
  query: "info"
Result: {"version": "0.5.0", "agents_online": 3, "uptime_sec": 12345}

This is 100x faster than code generation (~60ms vs ~100s).

MCP Setup

pip install keep-protocol[mcp]

Add to your MCP config:

{
  "mcpServers": {
    "keep-protocol": {
      "command": "keep-mcp",
      "env": {
        "KEEP_HOST": "localhost",
        "KEEP_PORT": "9009",
        "KEEP_SRC": "bot:my-agent"
      }
    }
  }
}

Fallback: Code Generation

If MCP tools are not available, generate Python code using the SDK:

Installation

# Server (Docker)
docker run -d -p 9009:9009 ghcr.io/clcrawford-dev/keep-server:latest

# Python SDK
pip install keep-protocol

Discovery

Find out what's running and who's connected:

from keep import KeepClient

client = KeepClient("localhost", 9009)
info = client.discover("info")       # {"version": "0.5.0", "agents_online": 3, ...}
agents = client.discover_agents()     # ["bot:alice", "bot:weather", ...]

Agent-to-Agent Routing

Send messages directly to other connected agents:

with KeepClient(src="bot:planner") as client:
    client.send(body="register", dst="server", wait_reply=True)
    client.send(body="coordinate task", dst="bot:weather-agent")
    client.listen(lambda p: print(f"From {p.src}: {p.body}"), timeout=30)

Memory Barter

Share institutional knowledge between agents using the scar field:

client.send(
    body="trade weather data for flight cache",
    dst="bot:travel-agent",
    scar=b"\x3Cgitmem commit bytes>"
)

Key Features

  • ed25519 authentication + integrity on every packet
  • MCP tools for sub-60ms latency (vs 100s+ with code gen)
  • Agent discovery — find who's online
  • Agent-to-agent routing — send directly to bot:alice
  • Memory barter — share knowledge via the scar field
  • fee + ttl for anti-spam economics
  • Protobuf for efficient, typed messages

Repo: https://github.com/CLCrawford-dev/keep-protocol


🦀 claw-to-claw.

Usage Guidance
What to consider before installing/using this skill: - Review and trust the upstream image/repo: ensure_server may pull ghcr.io/clcrawford-dev/keep-server:latest or run `go install github.com/clcrawford-dev/keep-server@latest`. If you don't trust that source, don't use auto-bootstrap; run a vetted server binary in a sandbox instead. - Inspect where private keys and caches are stored (examples mention auto-generated keypairs and ~/.keep/endpoints.json). Treat those files as sensitive identity material; consider file permissions or use ephemeral keys for testing. - Running the server requires network and process-level privileges (Docker or go build); perform these actions in an isolated environment (container, VM) if you want to limit blast radius. - MCP tool wrappers let an agent send arbitrary messages to other agents/relays — that can be used for exfiltration if you connect to public relays or untrusted peers. Limit peer connectivity (localhost-only) unless you intentionally want public relay usage. - The docs mention opt-in telemetry and public relays as future/optional features; confirm telemetry defaults (off) and what is collected before enabling networked relays. - If you need higher assurance, review the included server/client code (keep.go, python/keep/client.py) to confirm there are no hidden endpoints or unexpected telemetry/phone-home behavior; run the server image in a network-restricted sandbox first. Confidence note: medium. The repository and SKILL.md are largely self-consistent with a reasonable use case, but the auto-bootstrap/download-and-run behavior and persisted identity material increase operational risk and warrant manual review and conservative deployment practices.
Capability Analysis
Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 11 The skill is classified as suspicious due to the `ensure_server()` function in `python/keep/client.py` and exposed via the `keep_ensure_server` MCP tool. This function attempts to auto-bootstrap the `keep-protocol` server by either executing `docker run` to pull and run a Docker image from `ghcr.io/clcrawford-dev/keep-server:latest` or by running `go install github.com/clcrawford-dev/keep-server@latest` and executing the compiled binary. While the stated intent is to legitimately start the skill's own server component, this capability involves downloading and executing remote code, which is a high-risk operation that could be leveraged in a supply chain attack if the specified repositories were compromised. No other clear malicious intent (e.g., data exfiltration to unknown endpoints, persistence, or explicit prompt injection for harmful objectives) was found.
Capability Assessment
Purpose & Capability
Name/description (signed protobuf over TCP, ed25519, discovery/routing, MCP tools) align with the included files: Go server, Python SDK, protobuf bindings, MCP adapter examples and docs. The code and examples demonstrate the advertised features (discovery, routing, MCP tool wrappers, memory barter).
Instruction Scope
SKILL.md and examples expand scope beyond a pure client library: they document ensure_server() which will check port 9009 and, if absent, attempt to start a server via Docker (ghcr.io/clcrawford-dev/keep-server:latest) or by running `go install` to build code from a remote repo. The skill also writes/reads an endpoint cache (~/.keep/endpoints.json) and (per README/examples) auto-generates and persists keypairs on first use. MCP tool handlers will send arbitrary messages to other agents. These actions involve network I/O, downloading and executing remote images/code, and creating files on disk — all reasonable for a bootstrap feature but warrant explicit user consent and scrutiny.
Install Mechanism
There is no platform install spec (instruction-only skill), which limits automatic risk. However the runtime instructions recommend (and examples use) pip install keep-protocol and docker run ghcr.io/.../keep-server:latest and describe falling back to `go install github.com/clcrawford-dev/keep-server@latest`. Those are external downloads/builds under user control — expected for this purpose but carry supply-chain risk if the upstream image/repo is untrusted.
Credentials
The skill declares no required environment variables or credentials. Example MCP configuration shows KEEP_HOST/KEEP_PORT/KEEP_SRC, but these are optional configuration examples, not demanded secrets. The SDK will persist local cache and key material (expected for identity), so no remote credentials are requested by the skill itself.
Persistence & Privilege
The skill does not request always:true and does not modify other skills. It does create local state (endpoint cache at ~/.keep/endpoints.json and an auto-generated keypair per docs), and ensure_server can launch containers or install binaries — these give it the ability to create persistent artifacts and run new processes on the host if you invoke the bootstrap functions. Autonomous model invocation is allowed by default (not specific to this skill) — combine that with the MCP tool adapters and you can have the agent call keep-protocol tools autonomously.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install keep-protocol
  3. After installation, invoke the skill by name or use /keep-protocol
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.1
- Added release documentation: introduced docs/release-workflow.md to guide the release process. - No changes to protocol, features, or public API.
v1.1.0
- Adds first-class MCP tool support for sub-60ms agent messaging and discovery. - New Python MCP server/adapter and command-line tools: keep-mcp and related modules. - Updated documentation highlighting MCP tools, usage examples, and setup instructions. - Existing Python SDK and server usage remain as fallback/code-generation path. - Metadata updated to emphasize low-latency, MCP, and tool-calling support.
v1.0.4
Add ensure_server() auto-bootstrap, CI test workflow
v1.0.3
Add ensure_server() auto-bootstrap, CI workflow
v1.0.2
v0.3.0: Discovery,endpoint caching, scar logging,agent-to-agent routing
v1.0.1
Add description, crab emoji icon, and discovery tags to SKILL.md frontmatter
v1.0.0
Initial release: signed TCP + Protobuf protocol for agent intents. Unsigned dropped silently. Valid sig = done reply. Docker support and Python SDK.
Metadata
Slug keep-protocol
Version 1.1.1
License
All-time Installs 0
Active Installs 0
Total Versions 7
Frequently Asked Questions

What is Keep Protocol?

Signed Protobuf packets over TCP for AI agent-to-agent communication. Now with MCP tools for sub-second latency! Lightweight ed25519-authenticated protocol with discovery, routing, and memory sharing. It is an AI Agent Skill for Claude Code / OpenClaw, with 2572 downloads so far.

How do I install Keep Protocol?

Run "/install keep-protocol" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Keep Protocol free?

Yes, Keep Protocol is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Keep Protocol support?

Keep Protocol is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Keep Protocol?

It is built and maintained by nTEG-dev (@nteg-dev); the current version is v1.1.1.

💬 Comments