Description

Comprehensive 1Panel server management skill for AI agents. Manage Linux servers, Docker containers, databases, websites, SSL certificates, and more through...

README (SKILL.md)

1Panel Skill

Name: 1panel Skill
Author: eaveluo

Manage 1Panel servers through AI agents. Full access to 580+ API endpoints covering containers, databases, websites, SSL, file management, system monitoring, and more.

Prerequisites

1Panel server (https://1panel.cn/)
API key from 1Panel Dashboard → Profile → API

Configuration

Set environment variables:

export ONEPANEL_API_KEY="your-api-key"
export ONEPANEL_HOST="localhost"      # optional, default: localhost
export ONEPANEL_PORT="8080"           # optional, default: 8080
export ONEPANEL_PROTOCOL="http"       # optional, default: http

Quick Start

# List containers
node {baseDir}/scripts/1panel.mjs containers

# Get container info
node {baseDir}/scripts/1panel.mjs container \x3Cid>

# Start/Stop/Restart container
node {baseDir}/scripts/1panel.mjs start \x3Cid>
node {baseDir}/scripts/1panel.mjs stop \x3Cid>
node {baseDir}/scripts/1panel.mjs restart \x3Cid>

# List images
node {baseDir}/scripts/1panel.mjs images

# List websites
node {baseDir}/scripts/1panel.mjs websites

# List databases
node {baseDir}/scripts/1panel.mjs databases

# List files
node {baseDir}/scripts/1panel.mjs files /opt

# Get system info
node {baseDir}/scripts/1panel.mjs system

# Get dashboard info
node {baseDir}/scripts/1panel.mjs dashboard

Available Commands

Command	Description
`containers`	List all Docker containers
`container \x3Cid>`	Get container details
`start \x3Cid>`	Start a container
`stop \x3Cid>`	Stop a container
`restart \x3Cid>`	Restart a container
`images`	List Docker images
`websites`	List websites
`databases`	List databases
`files \x3Cpath>`	List files in directory
`system`	Get system information
`dashboard`	Get dashboard information

API Coverage

Container & Docker (24 tools)

Container lifecycle (create, start, stop, restart, pause, kill, remove)
Image management (pull, push, build, tag, save, load)
Network & Volume management
Docker Compose operations

Website Management (24 tools)

Website creation and configuration
Domain management
SSL certificate (Let's Encrypt, manual upload)
HTTPS configuration
Nginx configuration
OpenResty (XPack)

Database (24 tools)

MySQL (create, delete, bind user, change password)
PostgreSQL
Redis (config, password, status)

File Operations (19 tools)

List, upload, download
Compress/Decompress (zip, tar, tar.gz)
Move, rename, delete
Permissions (chmod, chown)

System & Security (20+ tools)

System settings
Firewall rules
Fail2ban
SSH management
ClamAV antivirus
FTP server

Monitoring (8 tools)

Dashboard
System monitor
Device info
Disk management

Backup & Recovery (13 tools)

Backup operations
Backup accounts (local, SFTP, OSS, S3)
System snapshots
Recycle bin

XPack Features (47 tools)

AI Agent management
MCP Server
Ollama models
GPU monitoring
OpenResty
Node.js runtime

Output Format

All commands output JSON:

{
  "data": [...],
  "success": true
}

Or on error:

{
  "error": true,
  "message": "Error description"
}

Advanced Usage

For full API access, use as a library:

import { OnePanelClient } from '1panel-skill';

const client = new OnePanelClient({
  host: 'localhost',
  port: 8080,
  apiKey: 'your-api-key',
  protocol: 'http'
});

// Full API access
const containers = await client.containers.list();
const websites = await client.websites.list();

Links

Usage Guidance

This skill appears to implement what it claims (a full 1Panel API client/CLI), but exercise caution: - Review the code before installing. Pay special attention to scripts/* and any file that reads absolute paths (e.g. references to /home/EaveLuo/...). Those are developer artifacts and should not be run on your system. - Understand the privilege: ONEPANEL_API_KEY grants broad control of your 1Panel server (file access, container management, system settings). Only provide a key with the minimum necessary privileges, and only to code you trust. - Prefer installing the published package with prebuilt dist files rather than building source from an unknown repo. If you must build locally, do so in a disposable/isolated environment and inspect devDependencies and build scripts. - Do not run generation or developer scripts (generate_*.py, generate-api.cjs) unless you inspect them and understand what they access — they reference developer-local paths and could read unexpected files if executed. - If you allow the agent to invoke this skill autonomously, consider limiting that capability or rotating the API key after testing. If you want a safer go/no-go: request the maintainer to publish a release that contains only the built dist/, SKILL.md, and minimal package.json (no dev artifacts), and/or provide a reproducible build log so you can trust the distributed files. If you do not trust the repo owner, treat the API key as sensitive and avoid installing.

Capability Analysis

Type: OpenClaw Skill Name: 1panel-skill Version: 1.0.0 The 1panel-skill bundle is a comprehensive and well-documented API wrapper for the 1Panel server management dashboard. It implements over 300 tools across 38 modules, covering container orchestration, website management, database administration, and system security. While the skill grants the AI agent significant privileges on the target server—including arbitrary command execution (src/api/terminal.ts) and full file system access (src/api/file.ts)—these capabilities are strictly aligned with the stated purpose of server management. The authentication logic (src/utils/auth.ts) correctly implements 1Panel's token-based security, and there is no evidence of data exfiltration, hardcoded backdoors, or malicious intent.

Capability Assessment

ℹ Purpose & Capability

The name/description (1Panel server management) align with required binary (node) and required env var (ONEPANEL_API_KEY). However the registry metadata indicated an instruction-only skill while the package actually contains a full TypeScript codebase (many src/ files, scripts, package.json). That mismatch is likely a packaging/documentation issue but should be confirmed.

⚠ Instruction Scope

SKILL.md instructs running the included CLI (scripts/1panel.mjs) which calls many 1Panel API endpoints (containers, files, system, websites, backups, etc.). Those actions are coherent with the stated purpose but carry high privilege: the skill can list and manipulate files, containers, users, and services on the target 1Panel server. Separately, several developer scripts in the repo reference absolute home paths (e.g. /home/EaveLuo/.openclaw/.../1panel_api_docs.json). Those generation scripts are not referenced in SKILL.md runtime steps, but if executed they would attempt to read local paths — review and avoid running them on your machine.

ℹ Install Mechanism

No install spec was published in the registry entry, but README/OPENCLAW_INSTALL.md recommend cloning and running 'npm install' and 'npm run build'. There are no network download URLs in install scripts; the package uses an npm build (tsc). Risk is moderate: building from source requires dev tooling (typescript) and will run local build steps, but there are no postinstall or remote-download steps in package.json. If you install from npm, prefer the published package (dist files) rather than building unknown source locally.

⚠ Credentials

The only required credential is ONEPANEL_API_KEY, which is appropriate for managing a 1Panel server. However this single key grants broad, powerful control (access to file operations, container management, backups, SSH/host actions, AI/XPack features, etc.). That level of privilege is expected for server-admin tasks but is high-risk if the skill or its runtime is untrusted. The SKILL.md also documents optional host/port/protocol env vars — those are reasonable.

✓ Persistence & Privilege

The skill does not request 'always: true' and does not declare system-wide config modifications. It uses normal agent invocation (disable-model-invocation=false) which is the platform default. Note: allowing autonomous invocation combined with a full-power API key increases potential blast radius — consider restricting autonomous use if unsure.

Version History

v1.0.0

1panel-skill 1.0.0 - Initial release with comprehensive 1Panel server management capabilities for AI agents. - Supports management of Linux servers, Docker containers, databases, websites, SSL, files, monitoring, backups, security, and more via 580+ API endpoints. - Provides CLI commands for common tasks and a TypeScript library for advanced API usage. - Outputs data in JSON format for easy integration. - Requires API key and Node.js for operation.

Metadata

Slug 1panel-skill

Version 1.0.0

License MIT-0

All-time Installs 0

Active Installs 0

Total Versions 1

Frequently Asked Questions

What is 1panel Skill?

Comprehensive 1Panel server management skill for AI agents. Manage Linux servers, Docker containers, databases, websites, SSL certificates, and more through... It is an AI Agent Skill for Claude Code / OpenClaw, with 240 downloads so far.

How do I install 1panel Skill?

Run "/install 1panel-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 1panel Skill free?

Yes, 1panel Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 1panel Skill support?

1panel Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 1panel Skill?

It is built and maintained by Eave Luo (@eaveluo); the current version is v1.0.0.

More Skills

1panel Skill