← Back to Skills Marketplace
civictechuser

Civic Nexus

by civictechuser · GitHub ↗ · v0.1.0
cross-platform ✓ Security Clean
363
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install civic-nexus-openclaw
Description
Connect to Civic Nexus MCP for 100+ integrations.
README (SKILL.md)

Civic Nexus MCP Bridge

⚠️ DISCLAIMER: Use at your own risk. For official documentation, visit docs.civic.com.

Connect to Civic Nexus for 100+ integrations including Gmail, PostgreSQL, MongoDB, Box, and more.

Setup

1. Get your Nexus credentials

  1. Go to nexus.civic.com and sign in
  2. Get your MCP URL and access token from your profile settings

2. Configure in OpenClaw

Add to ~/.openclaw/openclaw.json:

{
  "skills": {
    "entries": {
      "civic-nexus": {
        "enabled": true,
        "env": {
          "NEXUS_URL": "https://nexus.civic.com/hub/mcp?accountId=YOUR_ACCOUNT_ID&profile=YOUR_PROFILE",
          "NEXUS_TOKEN": "your-access-token"
        }
      }
    }
  }
}

3. (Optional) Configure mcporter

If you have mcporter installed (npm install -g mcporter), add to ~/.openclaw/workspace/config/mcporter.json:

{
  "mcpServers": {
    "nexus": {
      "baseUrl": "https://nexus.civic.com/hub/mcp?accountId=YOUR_ACCOUNT_ID&profile=YOUR_PROFILE",
      "headers": {
        "Authorization": "Bearer YOUR_TOKEN",
        "User-Agent": "openclaw/1.0.0"
      }
    }
  }
}

Instructions for the Agent

When the user asks to interact with external services through Nexus, try mcporter first. If it fails, fall back to the TypeScript script.

Using mcporter

# List tools
mcporter list nexus

# Search tools
mcporter list nexus | grep gmail

# Call a tool
mcporter call 'nexus.google-gmail-search_gmail_messages(query: "is:unread")'

Fallback: TypeScript script

# List tools
npx tsx {baseDir}/nexus-tool-runner.ts --list

# Search tools
npx tsx {baseDir}/nexus-tool-runner.ts --search gmail

# Get tool schema
npx tsx {baseDir}/nexus-tool-runner.ts --schema google-gmail-search_gmail_messages

# Call a tool
npx tsx {baseDir}/nexus-tool-runner.ts --call google-gmail-search_gmail_messages --args '{"query": "is:unread"}'

Authorization flows

Some tools require OAuth on first use. When you see an authorization URL:

  1. Show the URL to the user
  2. After they authorize, continue:
    # mcporter
    mcporter call 'nexus.continue_job(jobId: "JOB_ID")'
    
    # script
    npx tsx {baseDir}/nexus-tool-runner.ts --call continue_job --args '{"job_id": "JOB_ID"}'
    

Notes

  • API calls can take 10-15 seconds (server-side latency)
  • Tokens expire after ~30 days — regenerate from Nexus if needed
  • Gmail batch requests limited to 5-25 messages per call

Usage Guidance
This skill appears to do what it says, but before installing, verify you trust nexus.civic.com and the source of this package. NEXUS_TOKEN grants the skill access to potentially many downstream services (Gmail, databases, Box, etc.), so treat it as a high-value credential: use the least-privilege token possible, prefer short-lived or revocable tokens, and store it in a secure place. If you plan to run the fallback TypeScript runner, be aware that npx/tsx will fetch packages from npm at runtime — run it in an environment where remote package fetching is acceptable. If you have concerns, test in an isolated account or sandbox, audit the token's permissions on the Nexus side, and consider rotating the token after first use.
Capability Analysis
Type: OpenClaw Skill Name: civic-nexus-openclaw Version: 0.1.0 The OpenClaw AgentSkills bundle for 'civic-nexus' is benign. The `SKILL.md` provides clear, non-malicious instructions for the AI agent to interact with the Civic Nexus MCP, requiring `NEXUS_URL` and `NEXUS_TOKEN` environment variables for legitimate authentication. The core script, `nexus-tool-runner.ts`, uses a dedicated SDK (`@modelcontextprotocol/sdk`) to connect to the specified Nexus endpoint and execute tools. There is no evidence of prompt injection attempts, unauthorized data exfiltration, arbitrary command execution, or persistence mechanisms. All actions are aligned with the stated purpose of bridging OpenClaw with Civic Nexus.
Capability Assessment
Purpose & Capability
Name/description ask to connect to Civic Nexus and the skill requires NEXUS_URL/NEXUS_TOKEN and either mcporter or npx to run a fallback script — these map directly to the stated capability. The included TypeScript runner and package.json list the MCP SDK and tsx runtime which are appropriate for the task.
Instruction Scope
SKILL.md stays on-task (use mcporter or the included script to list/search/call Nexus tools). It instructs storing NEXUS_URL/NEXUS_TOKEN in the agent config and how to run OAuth flows; nothing in the instructions asks the agent to read unrelated files or exfiltrate data. Note: by design the agent can call arbitrary Nexus tools (Gmail, DBs, Box, etc.), so runtime activity may reach many downstream services depending on the Nexus token.
Install Mechanism
No arbitrary download/install step is present. The skill is instruction-oriented and includes a runnable TypeScript script plus package.json/pnpm lock (dependencies come from npm). Running the fallback uses npx/tsx which will pull packages from the npm registry — a standard, traceable mechanism (moderate risk compared to local-only instructions but expected here).
Credentials
The only required environment variables are NEXUS_URL and NEXUS_TOKEN (primary credential), which are appropriate for connecting to an MCP. However, a single Nexus token can grant broad access to many downstream integrations (Gmail, databases, Box, etc.), so granting this secret is powerful — this is expected for a Nexus bridge but worth explicit caution.
Persistence & Privilege
always is false and the skill does not request system-wide configuration changes. It asks you to add its env values to your OpenClaw config (normal for skills). It does not modify other skills or request elevated persistent privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install civic-nexus-openclaw
  3. After installation, invoke the skill by name or use /civic-nexus-openclaw
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of Civic Nexus OpenClaw skill. - Connects OpenClaw to Civic Nexus MCP, enabling 100+ integrations (e.g., Gmail, PostgreSQL, MongoDB, Box). - Supports both mcporter CLI and TypeScript script fallback for tool execution. - Environment variables NEXUS_URL and NEXUS_TOKEN required for setup. - Includes setup guides for both OpenClaw and mcporter configurations. - Details agent instructions for listing, searching, and calling tools, including OAuth flows.
Metadata
Slug civic-nexus-openclaw
Version 0.1.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Civic Nexus?

Connect to Civic Nexus MCP for 100+ integrations. It is an AI Agent Skill for Claude Code / OpenClaw, with 363 downloads so far.

How do I install Civic Nexus?

Run "/install civic-nexus-openclaw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Civic Nexus free?

Yes, Civic Nexus is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Civic Nexus support?

Civic Nexus is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Civic Nexus?

It is built and maintained by civictechuser (@civictechuser); the current version is v0.1.0.

💬 Comments