The DApp
Uniclaw lets an Admin deploy a Safe smart account and attach a Zodiac Roles Modifier. The admin then creates a tightly scoped role that permits only the exactInputSingle function on the Uniswap SwapRouter. A OpenClaw Agent can then execute swaps on behalf of the Safe — without ever touching any other funds or contracts.
OpenClaw Skill
The uniclaw agent skill is a lightweight Node.js CLI that an AI agent can invoke autonomously. On first run it creates a wallet, then accepts configuration for the Safe and Roles Modifier addresses. The agent can save Uniswap pools and execute swaps — all through the Roles Modifier so it can never exceed the permissions the admin defined. The agent operates with the scoped swap role — no private keys shared.
Security Model
All assets live in the Safe multisig — never in any delegate wallet. The Zodiac Roles Modifier enforces on-chain that the agent can only call one specific function on one specific contract. Even a compromised delegate key cannot drain funds, call other contracts, or change configuration. Only the Safe owner can modify roles, revoke access, or withdraw assets.
How it works
Deploy Safe
Admin creates a Safe smart account that holds all assets.
Attach Roles
A Zodiac Roles Modifier is deployed and enabled as a Safe module.
Scope Permissions
Admin scopes the SwapRouter target and allows only exactInputSingle.
Agent Swaps
The OpenClaw agent executes swaps through the Roles Modifier.
Connect your wallet to start deploying your Safe and configuring permissions.
Architecture
Safe Protocol Kit
Deploys & manages the Safe smart account. All assets are held by the Safe — a battle-tested multisig with over $100B in total value secured.
Zodiac Roles Modifier
An audited Gnosis Guild module. Attached to the Safe, it defines granular roles that scope which contracts and functions a delegate can call — enforced entirely on-chain.
User A — Admin
The Safe owner. Deploys the Safe, attaches the Roles Modifier, scopes permissions, assigns roles, and manages token approvals. Full control at all times.
OpenClaw Agent
Assigned a scoped role. Can only call exactInputSingle on the Uniswap SwapRouter. Cannot transfer tokens, change config, or access any other function.
Security Guarantees
No Key Sharing
The delegate never has access to the Safe owner key. They use their own wallet with a scoped role.
On-Chain Enforcement
Permission checks happen in the Roles Modifier smart contract. No off-chain trust assumptions.
Function-Level Scoping
Only exactInputSingle is allowed. Any other call — transfers, approvals, admin functions — is rejected by the contract.
Instant Revocation
The admin can revoke a delegate's role in one transaction. No waiting period, no coordination needed.
Assets Stay in Safe
Swapped tokens are returned to the Safe. The delegate wallet only pays gas — it never holds protocol assets.
Fully Auditable
Every swap is an on-chain transaction through the Roles Modifier. Complete transparency and traceability.