← Back to Skills Marketplace
florianbeer

Laravel Cloud

by Florian Beer · GitHub ↗ · v1.2.2
cross-platform ⚠ suspicious
946
Downloads
4
Stars
1
Active Installs
8
Versions
Install in OpenClaw
/install laravel-cloud
Description
Manage Laravel Cloud infrastructure via API — apps, environments, deployments, databases, caches, domains, scaling, commands, storage, and WebSockets.
README (SKILL.md)

Laravel Cloud API Skill

Wraps the entire Laravel Cloud REST API in a single bash script.

Setup

Option 1 — Environment variable (preferred):

export LARAVEL_CLOUD_API_TOKEN="your-token-here"

Option 2 — Credentials file:

mkdir -p ~/.openclaw/credentials/laravel-cloud
echo '{"token":"your-token-here"}' > ~/.openclaw/credentials/laravel-cloud/config.json

Generate your token at: cloud.laravel.com → Settings → API Tokens

Usage

laravel-cloud \x3Cresource> \x3Caction> [args...]

Quick Reference

Resource Actions
apps list, get, create, update, delete
envs list, get, create, update, delete, start, stop, metrics, logs, vars-add, vars-replace
commands list, get, run
deployments list, get, initiate
domains list, get, create, update, delete, verify
instances list, get, sizes, create, update, delete
bg-processes list, get, create, update, delete
databases clusters, cluster, cluster-create, cluster-update, cluster-delete, cluster-metrics, types, list, get, create, delete, snapshots, snapshot, snapshot-create, snapshot-delete, restore, dedicated
caches list, get, types, create, update, delete, metrics
buckets list, get, create, update, delete
bucket-keys list, get, create, update, delete
websockets list, get, create, update, delete, metrics
ws-apps list, get, create, update, delete, metrics
ips list
org get
regions list

Common Examples

# List all applications
laravel-cloud apps list

# Create an application (requires --repository)
laravel-cloud apps create --name "my-app" --region us-east-1 --repository owner/repo

# List environments for an app
laravel-cloud envs list \x3Capp-id>

# Create an environment
laravel-cloud envs create \x3Capp-id> --name "Production" --branch main

# Start / stop an environment
laravel-cloud envs start \x3Cenv-id>
laravel-cloud envs stop \x3Cenv-id>

# View environment metrics and logs
laravel-cloud envs metrics \x3Cenv-id> --period 24h
laravel-cloud envs logs \x3Cenv-id>

# Set environment variables
laravel-cloud envs vars-add \x3Cenv-id> --vars 'APP_KEY=base64:...,DB_HOST=localhost'
laravel-cloud envs vars-replace \x3Cenv-id> --vars 'KEY1=val1,KEY2=val2'

# Trigger a deployment
laravel-cloud deployments initiate \x3Cenv-id>

# Run an Artisan command
laravel-cloud commands run \x3Cenv-id> --command "php artisan migrate --force"

# Get organization and regions
laravel-cloud org get
laravel-cloud regions list

# Manage databases
# NOTE: Creating a cluster auto-creates a "main" database (schema).
# Use that default — don't create an extra one. Wire the "main" schema
# to your environment via: envs update \x3Cenv-id> --database-schema-id \x3Cmain-schema-id>
# To find the schema ID: databases cluster \x3Ccluster-id> (with ?include=schemas)
laravel-cloud databases clusters
# DB types: laravel_mysql_84, laravel_mysql_8, neon_serverless_postgres_16/17/18, aws_rds_mysql_8, aws_rds_postgres_18
laravel-cloud databases cluster-create --name my-db --type laravel_mysql_84 --region us-east-1 --size db-flex.m-1vcpu-512mb --storage 5

# Manage caches
laravel-cloud caches list
# Cache types: upstash_redis (sizes: 250mb, 1gb, ...) or laravel_valkey (sizes: valkey-pro.250mb, ...)
laravel-cloud caches create --name my-cache --type laravel_valkey --region us-east-1 --size valkey-pro.250mb

# Object storage
laravel-cloud buckets list
laravel-cloud buckets create --name my-bucket --region us-east-1

# WebSocket clusters
laravel-cloud websockets list
laravel-cloud ws-apps list \x3Cws-cluster-id>

# Per-resource help
laravel-cloud help
laravel-cloud envs help
laravel-cloud databases help

Dependencies

  • curl — HTTP requests
  • jq — JSON parsing and pretty-printing
Usage Guidance
This skill appears to do exactly what it says: it's a bash CLI wrapper that calls the Laravel Cloud REST API. Before installing, be aware that the provided API token grants full API access to your Laravel Cloud account (ability to change env vars, trigger deployments, run commands, create/delete resources). Only supply a token with the minimum required scope, store it securely, and consider rotating/revoking the token after use. Verify you trust the skill author/source (the package comes with a script file — review it locally). Note: the script will attempt to resolve op:// 1Password references if the 'op' CLI is present, but 'op' is not required; this is optional convenience, not malicious. If you need stricter controls, create a limited-scope API token in Laravel Cloud rather than using an account-wide token.
Capability Analysis
Type: OpenClaw Skill Name: laravel-cloud Version: 1.2.2 The skill bundle is classified as suspicious due to widespread shell injection vulnerabilities in `scripts/laravel-cloud.sh`. User-supplied arguments, such as resource IDs and flag values (e.g., for `--period`, `--vars`, or resource IDs in API paths), are directly interpolated into shell commands without proper sanitization or quoting. This allows an attacker controlling the input to the `laravel-cloud` script to execute arbitrary commands on the system running the OpenClaw agent. There is no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or backdoor installation, but the critical vulnerabilities pose a significant risk.
Capability Assessment
Purpose & Capability
Name/description describe a Laravel Cloud API wrapper and the skill only requires curl, jq, and a Laravel Cloud API token. The provided bash script implements API calls to cloud.laravel.com and exposes the resources/actions listed in the README — this is coherent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to use an API token or a credentials file located under ~/.openclaw/credentials/laravel-cloud/config.json; the script reads exactly that path and the LARAVEL_CLOUD_API_TOKEN env var. The script only constructs HTTP requests to the Laravel Cloud API. Note: the skill includes actions that run remote commands (e.g., 'commands run' to execute artisan on an environment) and can change environment variables/deployments — this is expected for an infra management tool but is powerful on the target infrastructure.
Install Mechanism
There is no install spec; the skill is instruction + a local bash script. No downloads from remote URLs or package installers are used. This minimal approach reduces install-time risk.
Credentials
Only LARAVEL_CLOUD_API_TOKEN is required (and an optional local credentials file). No unrelated credentials, system-wide config paths, or other secrets are requested. The script optionally supports resolving op:// 1Password references if the 'op' binary is present, but it does not require 'op' to be installed.
Persistence & Privilege
always:false (default) and the skill does not request persistent system-wide privileges or modify other skills' configs. It only reads/stores credentials in its own declared credentials path.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install laravel-cloud
  3. After installation, invoke the skill by name or use /laravel-cloud
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.2
Fix DB defaults (scheduled snapshots, retention), bucket key permissions, deployment staleness check (diffInMinutes > 75)
v1.2.1
Fix SKILL.md examples, accurate DB/cache types
v1.2.0
Fix: DB cluster-create defaults for scheduled-snapshots/retention-days. Fix: bucket-keys use permission field instead of can_read/can_write. Updated examples with correct types/sizes. Note: DB clusters auto-create a main schema.
v1.1.0
Fix: database cluster-create now passes config (size, storage, public, snapshots, retention). Fix: envs update supports database/cache/websocket attachment. Fix: caches create defaults auto_upgrade=true, is_public=false. Fix: instances update supports scaling thresholds. Fix: envs logs defaults to last 15 min with --from/--to params.
v1.0.3
Fix: include CLI script in package
v1.0.2
Add skill.json manifest — script now included in package, credentials properly declared
v1.0.1
Fix metadata: declare required bins, env vars, credentials, and included script to pass security scan
v1.0.0
Initial release: 414-line bash CLI covering all 19 Laravel Cloud API resource categories
Metadata
Slug laravel-cloud
Version 1.2.2
License
All-time Installs 1
Active Installs 1
Total Versions 8
Frequently Asked Questions

What is Laravel Cloud?

Manage Laravel Cloud infrastructure via API — apps, environments, deployments, databases, caches, domains, scaling, commands, storage, and WebSockets. It is an AI Agent Skill for Claude Code / OpenClaw, with 946 downloads so far.

How do I install Laravel Cloud?

Run "/install laravel-cloud" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Laravel Cloud free?

Yes, Laravel Cloud is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Laravel Cloud support?

Laravel Cloud is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Laravel Cloud?

It is built and maintained by Florian Beer (@florianbeer); the current version is v1.2.2.

💬 Comments