Checkpoint Docs
Cookbooks

identiclaw: Deploy Your First Agent

Step-by-step guide to deploying your first identiclaw agent with its own cryptographic identity and connecting to Telegram.

This cookbook has a dedicated interactive guide with a better experience, including screenshots.

Open the identiclaw Setup Guide →

Goal

Deploy an AI agent that carries its own cryptographic identity instead of your personal API keys, and connect it to Telegram. By the end of this cookbook, you'll have:

  • A running AI agent on Cloudflare Workers
  • Its own cryptographic identity (a DID)
  • A GitHub repo with auto-deploy on push
  • A Telegram bot people can talk to
  • A dashboard to monitor everything

OpenClaw is the agent runtime that Checkpoint's managed agent deployment (Molti) is built on — it provides the agent framework and the protocol the dashboard speaks to a running agent. identiclaw is an OpenClaw agent creator: instead of your agent acting as you with your personal API keys, an identiclaw agent gets its own cryptographic identity (DID) and scoped permissions from the start, so every action is attributable to the agent, not you.

Prerequisites

RequirementDetails
AI Provider API KeyAnthropic (Claude) or OpenAI (GPT)
Cloudflare AccountFree tier works
GitHub AccountFor hosting your agent's code
TelegramOptional, for connecting a chat bot

Time Estimate

~10 minutes


Steps

  1. Create a Cloudflare API token — Use the "Edit Cloudflare Workers" template at dash.cloudflare.com/profile/api-tokens
  2. Deploy your agent — Use the deploy wizard
  3. Deploy to Cloudflare — Click "Deploy to Cloudflare" on the success screen
  4. Connect Telegram — Create a bot via @BotFather, paste the token in your dashboard's Connections tab
  5. Talk to your agent — Send a message to your bot on Telegram

Verify It's Working

Check these three places in your dashboard:

WhereWhat you should see
ConnectionsTelegram status shows "Connected"
ActivityReal-time messages and tool calls as you chat with the bot
IdentityYour agent's DID and public profile

Troubleshooting

SymptomCauseFix
Deployment pipeline fails at "Verify GitHub"GitHub App not installedInstall the Checkpoint GitHub App via the Connect GitHub prompt in the deploy wizard (see Dashboard Deploy)
Cloudflare deploy fails with "Invalid token"Token missing scopeRegenerate the token with the "Edit Cloudflare Workers" template — it needs Workers Scripts:Edit
Telegram bot doesn't respondConfig sync hasn't run yet, or bad tokenConfig syncs every 5 minutes — wait, then check the Connections tab for a "Synced" badge; verify the bot token
DID document returns emptyIdentity secret not setCheck that MCP_IDENTITY_PRIVATE_KEY is set in your GitHub repo's Secrets — the deploy wizard sets this automatically
Can't find your Cloudflare Account IDLog into Cloudflare, open any domain, and look in the right sidebar under API → Account ID

Next Steps

For the full interactive guide with screenshots and more detailed troubleshooting:

Open the identiclaw Setup Guide →

GoalResource
Find your credentialsCredentials
Full control over infraSelf-Host (BYOK)
Add identity to an existing MCP serverMCP to KYA-OS Migration