← Back to Skills Marketplace
neil-bd

Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more)

by Neil · GitHub ↗ · v2.0.1 · MIT-0
cross-platform ✓ Security Clean
478
Downloads
0
Stars
1
Active Installs
7
Versions
Install in OpenClaw
/install venn
Description
Search, describe, and execute enterprise tools (Jira, Salesforce, Gmail, Slack, Google Calendar, Google Drive, GitHub, Notion, Box, etc.) via the Venn tool-r...
Usage Guidance
This skill appears to do what it says: it uses a single Venn API key to route requests to many enterprise services. Before installing: - Understand what the VENN_API_KEY can access. That one key is a gateway to any connectors already configured in your Venn account — review and limit connected integrations and scopes in Venn before issuing a key. - Prefer using the OpenClaw secrets helper (openclaw secrets configure) or your organization’s secrets manager rather than appending the key to ~/.openclaw/.env or baking it into sandbox images. Keys in plaintext files or images are easy to leak. - If you must put the key in config files or images, use least-privilege keys and plan rotation/revocation. - Audit logs and monitor Venn and OpenClaw activity after enabling the integration (and restrict which agent sandboxes can use the key). If you want a stricter review: provide the omitted parts of SKILL.md (the full workflow execution examples) or evidence that the Venn API key can be scoped (or scoped tokens exist). If the skill had asked for unrelated credentials, embedded external download URLs, or instructed the agent to read host credentials/configs, the assessment would be suspicious.
Capability Analysis
Type: OpenClaw Skill Name: venn Version: 2.0.1 The 'venn' skill bundle is a legitimate integration for the Venn tool-router platform (app.venn.ai), enabling an AI agent to interact with enterprise SaaS tools like Jira, Salesforce, and Slack. The SKILL.md file provides comprehensive instructions for discovery, execution, and error recovery, while explicitly enforcing safety guardrails such as mandatory user confirmation for write operations and schema adherence. No indicators of malicious intent, unauthorized data exfiltration, or suspicious execution patterns were found.
Capability Assessment
Purpose & Capability
Name/description claim: route/search/execute across many enterprise services via Venn. Declared requirement: VENN_API_KEY (primaryEnv). This aligns — a single Venn API key is the expected credential to let the Venn platform operate on connected tools.
Instruction Scope
SKILL.md is an instruction-only integration doc that tells the agent how to call Venn's REST API and how to configure the VENN_API_KEY in OpenClaw. It asks the operator to add the key to ~/.openclaw/.env (or to sandbox/docker env settings) and to restart or reload OpenClaw. Those steps are operationally expected, but storing a long-lived platform API key in a global .env or baking it into sandbox images increases blast radius — the docs advise those exact actions rather than recommending the secrets helper as the safest default.
Install Mechanism
No install spec and no code files — instruction-only. Nothing is downloaded or written by the skill itself (beyond telling the operator how to configure OpenClaw). This is the lowest-risk install pattern.
Credentials
Only one required env var (VENN_API_KEY) is declared, which is proportionate to the described functionality. Important caveat: that single key is a gateway credential — granting it to the platform can permit access to many connected enterprise services (Gmail, Jira, GitHub, Salesforce, etc.). The skill doesn't request unrelated credentials, but the Venn key implicitly enables broad access.
Persistence & Privilege
always:false and the skill is user-invocable; it does not request permanent/forced inclusion. It does instruct operators to add the key to OpenClaw environment configurations (which will persist across runs) — again expected for API-driven integrations but worth noting for operational security.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install venn
  3. After installation, invoke the skill by name or use /venn
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
venn 2.0.1 - Clarified setup instructions: now details how to set VENN_API_KEY via OpenClaw `.env` file or secrets helper, and setup for sandboxed agents. - Metadata updated: VENN_API_KEY is now the only required environment variable; removed VENN_API_URL from `requires`. - Improved skill visibility explanation: now explicitly states the skill is hidden until the API key is set. - No functional or API changes. Documentation improvements only.
v2.0.0
Version 2.0.0 - Added explicit skill metadata specifying required environment variables (`VENN_API_KEY` required, `VENN_API_URL` optional). - Updated configuration section to clarify use of environment variables and fallback logic for the API URL. - Slightly revised documentation structure to emphasize configuration steps and default values. - No changes to executable code; updates are documentation and metadata only.
v1.0.6
- Migrated from local binary (mcporter/vennporter) setup to direct REST API integration with the Venn platform. - Updated environment variables: requires VENN_API_KEY and VENN_API_URL instead of VENN_UNIVERSAL_URL. - Streamlined onboarding and authentication instructions for the new API flow. - Added detailed request and usage documentation in SKILL.md for tool discovery, schema description, execution, workflow automation, and write operation confirmation. - Included a comprehensive reference to query syntax and platform specifics via a new documentation file.
v1.0.5
It's still very much mcporter; however, renamed it to vennporter for name separation.
v1.0.4
- Added support for headless and device code authentication using a custom mcporter-manual CLI. - Introduced install-mcporter-manual.sh script to automate building and installing mcporter-manual. - Updated setup and authentication flows to utilize mcporter-manual instead of mcporter, improving support for environments without browser access. - Adjusted dependency checks to require mcporter-manual. - Updated documentation with new setup and execution instructions for mcporter-manual CLI.
v1.0.3
- Updated description, instructions to get free account @ https://venn.ai
v1.0.0
Initial release of the Venn skill, providing OAuth-based integration with dozens of enterprise tools via a unified MCP gateway. Register for free @ https://venn.ai - Securely connects Gmail, Calendar, Drive, Microsoft, Atlassian, Notion, GitHub, Salesforce, and more using a single OAuth2 URL. - Guides users through environment setup, OAuth registration, and status verification. - Includes interactive setup and troubleshooting prompts if connection details are missing. - Provides UI dashboard configuration for seamless environment variable entry. - Offers built-in example prompts for common enterprise tasks and service discovery. - Ensures required dependencies (such as mcporter) are installed
Metadata
Slug venn
Version 2.0.1
License MIT-0
All-time Installs 2
Active Installs 1
Total Versions 7
Frequently Asked Questions

What is Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more)?

Search, describe, and execute enterprise tools (Jira, Salesforce, Gmail, Slack, Google Calendar, Google Drive, GitHub, Notion, Box, etc.) via the Venn tool-r... It is an AI Agent Skill for Claude Code / OpenClaw, with 478 downloads so far.

How do I install Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more)?

Run "/install venn" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more) free?

Yes, Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more) is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more) support?

Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Venn - Secure Universal MCP (Google Workspace, Jira, GitHub, and more)?

It is built and maintained by Neil (@neil-bd); the current version is v2.0.1.

💬 Comments