← Back to Skills Marketplace
maverick-software

Pipedream Connect

by maverick-software · GitHub ↗ · v1.6.0 · MIT-0
cross-platform ⚠ suspicious
1065
Downloads
0
Stars
2
Active Installs
8
Versions
Install in OpenClaw
/install pipedream-connect
Description
Connect OpenClaw agents to thousands of apps via Pipedream Connect with per-agent OAuth isolation, first-class MCP tool exposure, live connected-account disc...
Usage Guidance
This skill appears to do what it says: integrate OpenClaw with Pipedream and register per-agent MCP tools. Before installing or running any setup scripts, do these simple checks: 1) Backup your existing mcporter config (~/.openclaw/workspace/config/mcporter.json, ~/.config/mcporter/config.json, ~/.mcporter.json) and any existing OpenClaw secrets/config files. 2) Inspect the included scripts (scripts/setup-cron.sh and scripts/pipedream-token-refresh.py) before running — setup-cron.sh will create a cron entry if you run it. 3) Be aware the code will auto-migrate plaintext clientId/clientSecret found in pipedream-credentials.json into ~/.openclaw/secrets.json (vault) the first time it's read; if you want to control that move, remove or move credentials.json first. 4) Confirm you trust the Pipedream endpoints used (api.pipedream.com, mcp.pipedream.com, remote.mcp.pipedream.net) and restrict the OAuth client to least privilege/appropriate redirect URIs. 5) If you do not want the skill to modify mcporter or create cron jobs, do not run the provided setup scripts and review gateway RPCs it calls. Overall: coherent and expected for this integration, but review/back up configs and the packaged scripts before enabling.
Capability Analysis
Type: OpenClaw Skill Name: pipedream-connect Version: 1.6.0 The pipedream-connect skill bundle provides a legitimate integration for managing Pipedream OAuth connections and MCP tools within OpenClaw. It demonstrates positive security patterns, such as automatically migrating plaintext credentials from configuration files to a dedicated vault (~/.openclaw/secrets.json) and sanitizing server names before using them in shell commands (execSync) within pipedream-backend.ts. The persistence mechanism (cron job via setup-cron.sh) and the token refresh script (pipedream-token-refresh.py) are standard requirements for maintaining OAuth sessions and are clearly documented for the user.
Capability Assessment
Purpose & Capability
Name/description (Pipedream Connect integration) match the code and instructions: the skill expects Pipedream OAuth credentials, talks to Pipedream APIs, registers mcporter servers, and exposes per-agent app connections. There are no unrelated credentials or surprising external binaries requested.
Instruction Scope
SKILL.md and INSTALL.md explicitly instruct reading/writing ~/.openclaw/secrets.json, ~/.openclaw/workspace/config/*, and mcporter config paths; they also document auto-migration of legacy plaintext credentials to the vault and optional token-refresh cron setup. This behavior is coherent for the integration but does grant the skill ability to read existing credential files and modify local agent/gateway config files—users should be aware of that scope.
Install Mechanism
No network download/install spec is present (instruction-only with bundled reference code and scripts). Included scripts (token refresh, setup-cron.sh) are local and packaged with the skill; nothing is fetched from untrusted or shortener URLs during install.
Credentials
The skill does not request arbitrary env vars but does require Pipedream client_id/client_secret (stored in the OpenClaw vault) and reads/writes mcporter config files. Those credentials and config file access are expected for this integration, but they are sensitive and the skill will auto-migrate plaintext credentials if present—this is proportionate but worth noting.
Persistence & Privilege
always:false and model invocation allowed (normal). The skill will persist configuration changes: writing vault (~/.openclaw/secrets.json), writing non-secret config (~/.openclaw/workspace/config/pipedream-credentials.json), updating/creating mcporter.json (possibly at multiple candidate paths), and optionally installing a cron job via setup-cron.sh. Those persistent changes are consistent with its function but are significant and should be reviewed before execution.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install pipedream-connect
  3. After installation, invoke the skill by name or use /pipedream-connect
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.6.0
Sync OpenClaw Pipedream integration docs and references with first-class MCP tools, dynamic catalog loading, and live icon metadata.
v1.5.2
Add A-Z app browser letter filter, improve app name readability, and sync latest catalog/CSP reference snapshots.
v1.5.1
Metadata hardening: explicit config paths/capabilities + docs aligned to actual vault/config behavior.
v1.5.0
Live full app catalog loading + backend timeout fix for stuck loading state.
v1.4.0
Removed 1Password integration entirely. Cleaned script paths. Metadata now declares all config paths read/written.
v1.3.0
Security: clientId/clientSecret moved to vault (secrets.json), PIPEDREAM_CLIENT_SECRET removed from mcporter.json, auto-migration on first start, resolves VirusTotal suspicious flag
v1.2.0
Multi-agent tenant system: per-agent app connections, isolated OAuth tokens, new agent panel UI, 6 new RPCs, full RPC reference
v1.0.0
- Initial release of pipedream-connect skill. - Enables connection to 2,000+ APIs using managed OAuth via Pipedream. - Full UI integration with Clawdbot Gateway dashboard for credential management, app connections, and tool configuration. - Automatic token refresh script and cron job setup included. - Adds backend RPC endpoints and UI components for managing apps and credentials. - Provides reference implementations and troubleshooting guidance.
Metadata
Slug pipedream-connect
Version 1.6.0
License MIT-0
All-time Installs 2
Active Installs 2
Total Versions 8
Frequently Asked Questions

What is Pipedream Connect?

Connect OpenClaw agents to thousands of apps via Pipedream Connect with per-agent OAuth isolation, first-class MCP tool exposure, live connected-account disc... It is an AI Agent Skill for Claude Code / OpenClaw, with 1065 downloads so far.

How do I install Pipedream Connect?

Run "/install pipedream-connect" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Pipedream Connect free?

Yes, Pipedream Connect is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Pipedream Connect support?

Pipedream Connect is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Pipedream Connect?

It is built and maintained by maverick-software (@maverick-software); the current version is v1.6.0.

💬 Comments