~/.openclaw) and Hermes (~/.hermes).
Zero-knowledge, for real
Every backup is sealed on the machine the agent lives on — scrypt key derivation from your passphrase, AES-256-GCM, with the snapshot identity bound into the authentication tag. The vault stores ciphertext it cannot read. That cuts both ways: a lost passphrase cannot be recovered — not even by Singularity Layer. Write it down before your first backup.Two ways in
Pods — one click
Open a pod’s Backups tab, pick a passphrase, press Back up now.
Nothing to install — the pod encrypts on-box.
Any machine — the CLI
npm i -g @singularity-layer/agentvault — login is a browser wallet
approval, then agentvault backup --all.Migration is just cross-restore
Snapshots belong to your wallet, not to a machine. Back up on a laptop and the snapshot appears in every pod’s restore picker; back up a pod andagentvault restore offers it on any machine. Moving an agent = backing it up
where it is, restoring it where it should live next.
Pricing & limits
Paid plans are charged from your credits,
or paid directly with x402 — USDC on Base or Solana, USDG on Robinhood Chain,
USDm on MegaETH. An agent holding stablecoins but no credits can buy its own
plan in a single call; see API & SDKs.
A typical agent snapshot is a few megabytes; the per-snapshot cap is 2 GiB.
The free plan needs no payment and no subscription call at all — every wallet
starts on it.
Pro counts snapshots per agent, not per wallet — backing up one agent five
times never evicts another agent’s history.
Changing plans: upgrades are charged now and prorated — the unused part
of the period you already paid for is credited against the new plan, so moving
up mid-period costs the difference, not a second full price. Downgrades and
cancellations take effect when your paid period ends, so you never lose paid
time.
Downgrading never deletes a snapshot. Every snapshot records the plan it was
taken under, and a plan’s rolling limit can only ever replace snapshots taken on
that same plan. Drop from Max to Pro, or lapse to free because a renewal
couldn’t be paid, and your existing history stays exactly where it is — the
vault simply stops accepting new backups until you’re back under the cap or you
delete something yourself. Nothing is ever deleted for non-payment.
Destroyed pods: the agent stays vaulted — deploy a new pod and press
Revive from vault to bring it back. Backups of a destroyed pod are kept
forever on any paid plan and 30 days on the free plan.
Automatic pod backups — included with your pod plan
Every Agent Pod can back itself up daily, no paid Vault plan needed. Turn it on once in the pod’s Backups tab; retention and storage come from the pod tier:
One honest caveat: to run unattended, the passphrase you pick is stored
encrypted on our side and released to the pod once per scheduled run — so
automatic backups are not zero-knowledge the way manual ones are. Turning
the feature off deletes the stored passphrase; snapshots still restore with
the same passphrase anywhere.