← Back to Skills Marketplace
274
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install thegraph-mcp-skill
Description
Use The Graph Subgraph MCP through UXC via native SSE with a fixed linked command for subgraph discovery, schema retrieval, deployment selection, and GraphQL...
Usage Guidance
This skill appears to implement The Graph MCP workflow via uxc and is not trying to access unrelated systems, but there are important inconsistencies you should address before installing:
- The SKILL.md requires the 'uxc' binary and THEGRAPH_API_KEY (used via 'uxc auth credential set ... --secret-env THEGRAPH_API_KEY'), yet the registry metadata lists no required env vars or binaries. Confirm you will provide THEGRAPH_API_KEY and have uxc installed before use.
- The skill will create a fixed linked command name (thegraph-mcp-cli) and an auth binding in your uxc config; verify that creating such a link and storing the API key in uxc's credential store is acceptable for your environment and won't conflict with existing binaries.
- Because the source/homepage is unknown, prefer testing in a limited environment first and avoid using a high-privilege or long-lived API key; rotate the key afterwards if possible.
- Ask the maintainer to correct the package metadata to declare required binaries (uxc) and required env vars (THEGRAPH_API_KEY) and to document any side effects of running the validate script (it expects 'rg' / ripgrep for validation).
Capability Analysis
Type: OpenClaw Skill
Name: thegraph-mcp-skill
Version: 1.0.0
The skill is a legitimate integration for The Graph's MCP server, providing instructions for subgraph discovery and GraphQL querying via the 'uxc' utility. It follows security best practices by using environment variables for API keys (THEGRAPH_API_KEY) and includes a validation script (scripts/validate.sh) to ensure proper configuration and documentation standards. The workflow described in SKILL.md and usage-patterns.md focuses on discovery and schema inspection before execution, with no signs of malicious intent or unauthorized data access.
Capability Assessment
Purpose & Capability
Name/description describe The Graph MCP via uxc and the SKILL.md consistently documents using uxc + The Graph Gateway API key. However the registry metadata declares no required env vars or required binaries while the runtime docs explicitly require 'uxc' and THEGRAPH_API_KEY. This mismatch is an incoherence in the skill bundle (likely an omission) that the maintainer should fix.
Instruction Scope
SKILL.md stays within the stated purpose: it instructs discovery, schema inspection, and limited GraphQL queries against https://subgraphs.mcp.thegraph.com/sse using uxc/thegraph-mcp-cli. It does instruct adding an auth binding and registering an API key via 'uxc auth credential set ... --secret-env THEGRAPH_API_KEY', which is expected for authenticated calls. It does not instruct reading unrelated system files or exfiltrating data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with no install spec and no downloads. That limits disk-write/remote-install risk. The included validate.sh is a development/CI helper (requires ripgrep) but is not an install routine; it only enforces documentation patterns.
Credentials
The runtime docs require THEGRAPH_API_KEY (and network access to the Graph MCP endpoint) but the skill metadata does not declare any required environment variables. The only secret the skill needs is the Graph API key, which is proportionate for the described functionality — but the metadata omission is misleading and could cause accidental misconfiguration or secret exposure if users aren't warned.
Persistence & Privilege
The skill does not request persistent platform-wide privileges (always:false). It instructs the agent to create a uxc auth binding and a link (thegraph-mcp-cli), which is a local configuration change inside uxc and is coherent with the skill's purpose. Autonomous model invocation is allowed by default but not combined with other high-risk indicators.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install thegraph-mcp-skill - After installation, invoke the skill by name or use
/thegraph-mcp-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
thegraph-mcp-skill 1.0.0: Initial release.
- Provides The Graph Subgraph MCP integration via UXC, using the native SSE endpoint.
- Supports subgraph discovery, schema retrieval, deployment selection, and GraphQL query execution.
- Enforces help-first inspection and explicit Bearer auth setup with The Graph Gateway API key.
- Includes robust guardrails: stable JSON envelope parsing, credential and command setup, schema-first workflow, and fallback options.
- Documents a full tested scenario querying Uniswap subgraphs with verified query shape.
Metadata
Frequently Asked Questions
What is Thegraph Mcp Skill?
Use The Graph Subgraph MCP through UXC via native SSE with a fixed linked command for subgraph discovery, schema retrieval, deployment selection, and GraphQL... It is an AI Agent Skill for Claude Code / OpenClaw, with 274 downloads so far.
How do I install Thegraph Mcp Skill?
Run "/install thegraph-mcp-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Thegraph Mcp Skill free?
Yes, Thegraph Mcp Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Thegraph Mcp Skill support?
Thegraph Mcp Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Thegraph Mcp Skill?
It is built and maintained by jolestar (@jolestar); the current version is v1.0.0.
More Skills