← Back to Skills Marketplace
lunarpulse

mcp-adapter

by lunarpulse · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
6155
Downloads
5
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mcp-adapter
Description
Use Model Context Protocol servers to access external tools and data sources. Enable AI agents to discover and execute tools from configured MCP servers (legal databases, APIs, database connectors, weather services, etc.).
Usage Guidance
Install only for MCP servers you trust and understand. Prefer HTTPS endpoints, avoid exposing production databases or administrative tools through generic query/action interfaces, use read-only or least-privilege service accounts, restrict which agents can access the mcp tool, and require explicit confirmation for writes, deletes, messages, purchases, or other consequential actions. Update the flagged dependencies before production deployment.
Capability Analysis
Type: OpenClaw Skill Name: mcp-adapter Version: 0.1.0 The skill bundle is classified as suspicious due to the declared `stdio` transport capability within the `config/openclaw.plugin.json` schema. This schema explicitly includes properties like `command`, `args`, and `env` for the `stdio` transport, which would allow for arbitrary command execution on the host system. While the current JavaScript implementation in `src/index.js` only supports the `http` transport, the declaration of this high-risk capability in the plugin's configuration schema makes the bundle inherently risky, even if not actively exploited by the current code. The `SKILL.md` and other documentation files are benign and do not contain prompt injection attempts.
Capability Assessment
⚠ Credentials
Network access to configured MCP endpoints is purpose-aligned, but the implementation accepts arbitrary configured URLs, allows plaintext HTTP, automatically connects at service startup, and sends tool arguments/results without destination or HTTPS enforcement.
✓ Install Mechanism
Installation is ordinary for an OpenClaw extension: clone or link the plugin, run npm install, and restart the gateway. package.json declares dependencies and no lifecycle scripts were found.
⚠ Instruction Scope
The skill tells agents to list remote tools, inspect their schemas, and chain calls, but it does not clearly separate remote MCP tool descriptions/results as untrusted content or require confirmation before sensitive or mutating tool calls.
ℹ Persistence & Privilege
The plugin persists as an installed OpenClaw extension and maintains in-memory MCP client/session state while running. No cron job, backdoor, persistent memory write, destructive action, or local credential-file harvesting was found.
⚠ Purpose & Capability
The purpose is coherent: it exposes a unified mcp tool for listing and calling tools on configured MCP servers. The concern is breadth: any agent with the mcp tool can invoke any discovered remote tool, including examples like generic database queries, and the plugin itself does not enforce per-server or per-tool least privilege.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install mcp-adapter
  3. After installation, invoke the skill by name or use /mcp-adapter
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
- Initial release as "mcp-integration" for accessing external data and tool APIs via the Model Context Protocol. - Provides unified `mcp` tool with `list` and `call` actions for tool discovery and execution. - Includes detailed usage guide covering tool discovery, parameter validation, tool execution, response parsing, error handling, and multi-step workflows. - Added real-world examples, error handling patterns, and reference links for setup and troubleshooting. - Designed to enable AI agents to integrate external services such as legal databases, APIs, and weather data through MCP servers.
Metadata
Slug mcp-adapter
Version 0.1.0
License —
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is mcp-adapter?

Use Model Context Protocol servers to access external tools and data sources. Enable AI agents to discover and execute tools from configured MCP servers (legal databases, APIs, database connectors, weather services, etc.). It is an AI Agent Skill for Claude Code / OpenClaw, with 6155 downloads so far.

How do I install mcp-adapter?

Run "/install mcp-adapter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is mcp-adapter free?

Yes, mcp-adapter is completely free (open-source). You can download, install and use it at no cost.

Which platforms does mcp-adapter support?

mcp-adapter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created mcp-adapter?

It is built and maintained by lunarpulse (@lunarpulse); the current version is v0.1.0.

💬 Comments