← Back to Skills Marketplace
mcp-adapter
by
lunarpulse
· GitHub ↗
· v0.1.0
6020
Downloads
4
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mcp-adapter
Description
Use Model Context Protocol servers to access external tools and data sources. Enable AI agents to discover and execute tools from configured MCP servers (legal databases, APIs, database connectors, weather services, etc.).
Usage Guidance
Install only if you trust the MCP endpoints you configure and can keep them least-privileged. Avoid production databases, secrets, or account-mutating tools until the package updates the MCP SDK to a patched version, documents the trust boundary clearly, and either implements stdio safely with explicit consent or removes the stdio schema.
Capability Analysis
Type: OpenClaw Skill
Name: mcp-adapter
Version: 0.1.0
The skill bundle is classified as suspicious due to the declared `stdio` transport capability within the `config/openclaw.plugin.json` schema. This schema explicitly includes properties like `command`, `args`, and `env` for the `stdio` transport, which would allow for arbitrary command execution on the host system. While the current JavaScript implementation in `src/index.js` only supports the `http` transport, the declaration of this high-risk capability in the plugin's configuration schema makes the bundle inherently risky, even if not actively exploited by the current code. The `SKILL.md` and other documentation files are benign and do not contain prompt injection attempts.
Capability Assessment
Purpose & Capability
The MCP-adapter purpose matches its main capability of listing and invoking tools on configured MCP servers, but that capability can transmit user arguments to external services and trigger remote side effects with little documented scoping.
Instruction Scope
The docs and API describe a generic mcp interface and database-style examples without clear trust-boundary, least-privilege, consent, or production-data warnings.
Install Mechanism
package.json reportedly pins @modelcontextprotocol/sdk 1.25.3; the upstream advisory marks versions >=1.10.0 through <=1.25.3 affected and 1.26.0 patched. ([github.com](https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-345p-7cg4-v4c7)) The plugin config schema also declares stdio command/args/env support even though the current implementation is described as HTTP-only.
Credentials
Networked MCP access is proportionate to an adapter, but arbitrary connected-server tool invocation and a stdio schema are broader than the stated HTTP-only runtime unless the installer and user get clearer allowlisting and execution controls.
Persistence & Privilege
I found no artifact-backed evidence of persistence, background workers, credential-store mutation, or automatic destructive behavior; the main privilege concern is delegated execution/data access through configured MCP tools.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mcp-adapter - After installation, invoke the skill by name or use
/mcp-adapter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
- Initial release as "mcp-integration" for accessing external data and tool APIs via the Model Context Protocol.
- Provides unified `mcp` tool with `list` and `call` actions for tool discovery and execution.
- Includes detailed usage guide covering tool discovery, parameter validation, tool execution, response parsing, error handling, and multi-step workflows.
- Added real-world examples, error handling patterns, and reference links for setup and troubleshooting.
- Designed to enable AI agents to integrate external services such as legal databases, APIs, and weather data through MCP servers.
Metadata
Frequently Asked Questions
What is mcp-adapter?
Use Model Context Protocol servers to access external tools and data sources. Enable AI agents to discover and execute tools from configured MCP servers (legal databases, APIs, database connectors, weather services, etc.). It is an AI Agent Skill for Claude Code / OpenClaw, with 6020 downloads so far.
How do I install mcp-adapter?
Run "/install mcp-adapter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is mcp-adapter free?
Yes, mcp-adapter is completely free (open-source). You can download, install and use it at no cost.
Which platforms does mcp-adapter support?
mcp-adapter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created mcp-adapter?
It is built and maintained by lunarpulse (@lunarpulse); the current version is v0.1.0.
More Skills