← Back to Skills Marketplace
Google Stitch MCP
by
ArielleTolome
· GitHub ↗
· v1.0.0
· MIT-0
247
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install stitch
Description
Manage Stitch UI design projects and screens remotely, including creating projects, listing and retrieving screens, and generating or editing UI screens via...
Usage Guidance
The skill's instructions clearly use a Stitch API key (STITCH_API_KEY) to call https://stitch.googleapis.com/mcp, but the package metadata did not declare that credential — this mismatch is suspicious. Before installing: verify the publisher/source (is this really an official Google skill?), confirm you obtained the API key from the official Stitch site, and avoid supplying a broad or production API key. Prefer a scoped or test key, restrict allowed origins/referrers if possible, and avoid putting sensitive PII in generation prompts or responses. If you can't verify the publisher or why the metadata omits the required env var, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: stitch
Version: 1.0.0
The skill bundle provides documentation and instructions for an AI agent to interact with 'Stitch', a Google UI design tool, via a remote MCP server. It includes standard API tool definitions (e.g., list_projects, generate_screen_from_text) and authentication procedures using an API key. All network requests are directed to legitimate Google domains (stitch.googleapis.com), and no malicious code, data exfiltration, or prompt injection attacks were identified in SKILL.md or the provided examples.
Capability Assessment
Purpose & Capability
The SKILL.md describes a Google Stitch MCP toolset (project/screen management and AI generation) and the documented HTTP endpoints and methods are consistent with that purpose. The described functionality (create/list/get projects/screens, generate/edit screens) aligns with the skill name and description.
Instruction Scope
Instructions are limited to calling a remote MCP HTTP endpoint (https://stitch.googleapis.com/mcp) and handling responses. The runtime guidance does not ask the agent to read unrelated local files or secrets, or to call unexpected endpoints. It does, however, instruct the user/agent to set and send an API key via the STITCH_API_KEY env var — which is not declared in the skill metadata (scope mismatch).
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so there is no local installation or third-party download risk.
Credentials
The SKILL.md explicitly recommends and shows use of an API key (STITCH_API_KEY) passed in X-Goog-Api-Key, but the skill's registry metadata lists no required environment variables or primary credential. That omission is an inconsistency: the skill expects a long-lived API key but does not declare it. The API key is proportionate to the described functionality, but the metadata mismatch raises a transparency and trust concern.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always:false). It is user-invocable and allows autonomous invocation by default, which is normal; there is no evidence it modifies other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install stitch - After installation, invoke the skill by name or use
/stitch - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release — 8 MCP tools for project/screen management and AI design generation via Google Stitch
Metadata
Frequently Asked Questions
What is Google Stitch MCP?
Manage Stitch UI design projects and screens remotely, including creating projects, listing and retrieving screens, and generating or editing UI screens via... It is an AI Agent Skill for Claude Code / OpenClaw, with 247 downloads so far.
How do I install Google Stitch MCP?
Run "/install stitch" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Google Stitch MCP free?
Yes, Google Stitch MCP is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Google Stitch MCP support?
Google Stitch MCP is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Google Stitch MCP?
It is built and maintained by ArielleTolome (@arielletolome); the current version is v1.0.0.
More Skills