← Back to Skills Marketplace
embodiedsystems-org

VAGUS MCP

by Embodied Systems · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
416
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install vagus-mcp
Description
Connect to the user's Android phone via the VAGUS MCP server. Read phone sensors (motion, location, environment), device state (battery, connectivity, screen...
Usage Guidance
This skill appears to do what it says (connect to an Android phone and read/act on sensors), but it handles very sensitive data and can perform actions on the device (SMS, notifications, clipboard, calendar). Before installing: 1) Verify the upstream repository and homepage (confirm https://withvagus.com and the GitHub repo are legitimate). 2) Inspect scripts/vagus-connect.js and any packages listed in package.json before running npm install to avoid supply-chain risks. 3) Only enable the VAGUS app permissions you trust (e.g., avoid enabling SMS/calendar if not required). 4) Be cautious about running the recommended always-on daemons — run them under supervision or in an environment where you control logs/storage. 5) Do not share pairing codes or session files with untrusted parties. If you cannot review the remote code or confirm the service, treat this as higher risk and avoid installing.
Capability Analysis
Type: OpenClaw Skill Name: vagus-mcp Version: 1.0.0 The skill bundle is classified as suspicious due to its broad access to highly sensitive phone data (location, notifications, clipboard) and powerful actions (sending SMS, writing to clipboard, opening URLs) as detailed in SKILL.md. While these capabilities are gated by user permissions in the VAGUS app, the agent's behavioral rules intended to safeguard privacy are vulnerable to prompt injection, allowing an attacker to bypass them. Furthermore, the DAEMON_GUIDE.md outlines an architecture for continuous, persistent background collection of sensitive sensor and inference data, which, if implemented by an agent, could lead to unauthorized surveillance without clear user consent.
Capability Assessment
Purpose & Capability
The name/description (phone connection, sensors, device actions) matches the instructions: pairing, reading sensor/notification/clipboard resources, and invoking phone actions (haptic, TTS, notify, sms, calendar). Required binary (node) is appropriate. No unrelated credentials or system-level access are requested.
Instruction Scope
The SKILL.md explicitly instructs the agent to read/write session files (~/.openclaw/vagus-session.json), run node scripts under the skill folder, subscribe to continuous sensor streams, and write focused JSONL captures to disk. These steps are consistent with the claimed purpose but involve reading highly sensitive data (location, notifications, clipboard) and performing potentially impactful actions (send SMS, create calendar events, open URLs). The instructions reference user-granted permissions in the mobile app — ensure the user knowingly enables these.
Install Mechanism
This is an instruction-only skill (no install spec). README suggests installing by running scripts/install.sh or git-cloning https://github.com/vagus-mcp/openclaw-skill and running npm install. That implies pulling third-party code and npm dependencies at install time — a plausible approach but a supply-chain risk unless the repository and packages are verified.
Credentials
No environment variables or unrelated credentials are requested. The skill does require network access (relay.withvagus.com referenced) and the VAGUS Android app to grant runtime permissions (location, notifications, clipboard, SMS, etc.), which are proportionate to its capabilities but sensitive.
Persistence & Privilege
The skill is not force-included (always:false). However, DAEMON_GUIDE recommends running long-lived baseline and focused daemons that subscribe continuously and write raw sensor files to disk; this persistent behavior increases the blast radius if abused. The skill itself doesn't request platform-level privileges beyond running Node and writing to user-space paths, but persistent background monitoring is functionally powerful.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install vagus-mcp
  3. After installation, invoke the skill by name or use /vagus-mcp
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Give your agent a nervous system — continuous sensory coupling to the physical world through the phone in your pocket. This doesn't need to be a docx — it's a description for a skill listing. Let me write this directly as markdown content. Here's the VAGUS Openclaw Skill description for ClawHub, Vicky. I've written a few variants depending on the tone you want to strike: Short tagline (for the one-liner): Give your agent a nervous system — continuous sensory coupling to the physical world through the phone in your pocket. Full description: Every other skill on ClawHub teaches your agent to do something new with data. VAGUS teaches it to perceive. VAGUS is the first MCP-compatible embodiment runtime on mobile. It transforms an Android phone into a sensory endpoint for your OpenClaw agent — not as a remote control, but as a body. Raw sensor data flows up (accelerometer, GPS, barometer, ambient light), an on-device inference layer adds meaning (activity recognition, attention availability, sleep likelihood, notification timing), and I/O tools let the agent act back into the physical world through haptics, speech, notifications, SMS, calendar events, and more. This isn't another API integration. It's a category shift. Your agent stops asking "what are you doing?" and starts knowing — because it feels your motion, infers you're outdoors, and can reach back through a tap on your wrist. Three layers working together: sense, infer, act. What this skill does: Connects your OpenClaw agent to VAGUS Core (Android app) via relay pairing. Once paired, the agent discovers available capabilities through standard MCP negotiation and gains access to: Sensors — motion (raw IMU), location, battery, connectivity, screen state, notifications, clipboard Inference — activity recognition, environment context (indoor/outdoor/vehicle), attention availability, indoor confidence, sleep likelihood, optimal notification timing I/O — haptic pulse and patterns, text-to-speech, push notifications, clipboard write, SMS, open URL, calendar events, agent identity Governance built in. Every capability has per-tool toggles, time-of-day windows, rate limits, approval prompts, and full access logs. One-tap kill switch on the device. The physical phone in your hand is always the final authority. Your agent can already send texts and create events through direct integrations — VAGUS makes it safer by putting a governed layer between intent and action. Setup in three minutes: Install the VAGUS APK → tap Pair → give your agent the 6-character code. No port forwarding, no network config. The relay handles connection. Your agent has a body. Why this matters beyond utility: Most of the AI stack is building better brains. VAGUS builds the missing body. When an agent is continuously coupled to a physical substrate — not querying it on demand, but living in its signal stream — something qualitatively different emerges. The agent doesn't just know facts about you. It participates in your situation. That's a fundamentally different relationship between intelligence and world, and it opens design spaces that pure language models can't reach. Open source. Self-hostable relay. Works with any MCP-compatible agent. withvagus.com · github.com/embodiedsystems-org/VAGUS-MCP
Metadata
Slug vagus-mcp
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is VAGUS MCP?

Connect to the user's Android phone via the VAGUS MCP server. Read phone sensors (motion, location, environment), device state (battery, connectivity, screen... It is an AI Agent Skill for Claude Code / OpenClaw, with 416 downloads so far.

How do I install VAGUS MCP?

Run "/install vagus-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is VAGUS MCP free?

Yes, VAGUS MCP is completely free (open-source). You can download, install and use it at no cost.

Which platforms does VAGUS MCP support?

VAGUS MCP is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created VAGUS MCP?

It is built and maintained by Embodied Systems (@embodiedsystems-org); the current version is v1.0.0.

💬 Comments