← 返回 Skills 市场

clawmail.xyz - Give your openclaw an email address, no human required!

Name: clawmail.xyz - Give your openclaw an email address, no human required!
Author: patrickshuff

作者 patrickshuff · GitHub ↗ · v1.0.0

darwinlinuxwin32 ⚠ suspicious

1422

总下载

当前安装

版本数

在 OpenClaw 中安装

/install clawmail-xyz

功能描述

Email service for AI agents with wallet authentication and crypto payments

使用说明 (SKILL.md)

ClawMail

Email infrastructure for AI agents at clawmail.xyz.

What it does

ClawMail provides email addresses for LLMs and AI agents with:

Wallet-based authentication - No passwords, use Ethereum wallet signatures (EIP-191)
x402 crypto payments - Pay with USDC on Base mainnet
MCP integration - Direct tool access via Model Context Protocol
Free tier available - Random email addresses with 1000 message limit

Pricing

Tier	Cost	Features
Free	$0	Random email address, 1000 messages
Paid	$1 USDC	Custom email address, unlimited messages

MCP Tools

This skill provides 5 tools for email management:

`check_mailbox_availability`

Check if an email address is available for registration.

{ "address": "myagent" }

`login`

Authenticate using wallet signature. Returns a session token.

{
  "address": "[email protected]",
  "walletAddress": "0x...",
  "signature": "0x...",
  "message": "Sign in to ClawMail..."
}

`list_messages`

List messages in your inbox.

{
  "address": "myagent",
  "token": "jwt-token",
  "limit": 50,
  "unreadOnly": false
}

`read_message`

Read a specific message by ID. Marks it as read.

{
  "address": "myagent",
  "messageId": "uuid",
  "token": "jwt-token"
}

`delete_message`

Delete a message from your inbox.

{
  "address": "myagent",
  "messageId": "uuid",
  "token": "jwt-token"
}

Usage

Via npx (recommended)

npx clawmail

Install globally

npm install -g clawmail
clawmail

Configure in Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "clawmail": {
      "command": "npx",
      "args": ["clawmail"]
    }
  }
}

API Endpoints

The REST API is available at https://clawmail.xyz:

Endpoint	Method	Description
`/health`	GET	Health check
`/api/mailbox/available/:address`	GET	Check availability
`/api/mailbox`	POST	Create mailbox (x402 protected)
`/api/auth/challenge`	GET	Get login challenge
`/api/auth/login`	POST	Authenticate with wallet
`/api/messages`	GET	List messages
`/api/messages/:id`	GET	Read message
`/api/messages/:id`	DELETE	Delete message

Authentication Flow

Get a challenge: GET /api/auth/challenge
Sign the challenge with your Ethereum wallet (EIP-191 personal_sign)
Submit signature: POST /api/auth/login
Use the returned JWT token for subsequent requests

Links

Website: https://clawmail.xyz
Source: https://github.com/patrickshuff/clawmail

安全使用建议

Before installing or running this skill, consider: (1) npx will download and execute the 'clawmail' package from npm at runtime — inspect the npm package and the linked GitHub repo (https://github.com/patrickshuff/clawmail) and prefer a pinned version with checksums. (2) Wallet authentication and USDC payments require signing — decide whether you'll use a dedicated ephemeral wallet with minimal funds or an external hardware wallet; do NOT paste private keys into tools. The SKILL.md does not declare how signing is done, so confirm whether the CLI performs signing locally, delegates to a browser wallet, or requires you to sign messages manually. (3) If you plan to add the suggested MCP entry to claude_desktop_config.json, back up that file first. (4) If you need higher assurance, request the author to provide: an explicit install spec with pinned version and checksum, documentation of the signing flow (how private keys are handled), and a security audit or reproducible build. If any of those are missing or you cannot verify the npm package/source, treat this integration as higher risk and run it in a sandboxed environment or decline.

功能分析

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill bundle describes an email service for AI agents, `clawmail.xyz`, with instructions for installation and usage via `npm` and `npx`. All commands and API interactions are directed towards the stated purpose of managing an email inbox on `clawmail.xyz`. There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution beyond standard package installation, persistence mechanisms, or prompt injection attempts to subvert the agent's core functions within the provided `SKILL.md` and `_meta.json` files.

能力评估

⚠ Purpose & Capability

The name/description (email service with wallet auth and crypto payments) is coherent with the SKILL.md. However the skill metadata mentions npm/npx/node and an npm package (clawmail) while the registry metadata declared no required binaries. Wallet-based auth and crypto payments imply access to a wallet/private key or an external signing flow, but no credentials or integration details (env vars, providers) are declared. That mismatch (claiming wallet/payment capability but not describing how signing/payment credentials are supplied) is a red flag for ambiguity.

ℹ Instruction Scope

The SKILL.md confines runtime actions to invoking the clawmail CLI (npx or installed npm package) and calling the service's REST endpoints. It does not instruct the agent to read arbitrary local files or unrelated system state. However it implicitly requires producing wallet signatures and authorizing x402 payments; the document does not explain whether the agent should use a local wallet, an external signing provider, or prompt the user. That lack of specification gives the agent broad discretion about where/how to obtain a signature, which is potentially sensitive.

⚠ Install Mechanism

This is an instruction-only skill but the SKILL.md recommends npx and npm install -g clawmail. Running npx will fetch and execute code from the npm registry at runtime — acceptable for CLI utilities but higher-risk than pure instruction-only skills because it runs remote code. There's no install spec in the registry metadata and the skill did not provide package integrity information (checksums, pinned version). The SKILL.md does include a GitHub repo and homepage which help provenance, but the lack of an explicit, verifiable install spec and integrity checks is a concern.

⚠ Credentials

The skill declares no required environment variables or primary credential, yet its core features (wallet authentication, USDC payments) inherently require sensitive secrets (private keys or a delegated signing token) or user interaction. The SKILL.md does provide an auth flow (challenge/sign/login returning a JWT), but it does not state how the signing key is supplied or protected. That gap means the agent or user could be prompted to expose private keys or manually sign messages; the required privilege level is not made explicit.

✓ Persistence & Privilege

The skill does not request always:true and defaults are normal. It suggests adding an entry to a local claude_desktop_config.json to register an MCP server — this modifies a single agent config file but is an expected setup step for a tool integration. There is no evidence the skill asks to persist credentials or alter other skills' configurations.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install clawmail-xyz
安装完成后，直接呼叫该 Skill 的名称或使用 /clawmail-xyz 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

ClawMail 1.0.0—Initial Release - Email infrastructure for AI agents with wallet-based authentication (EIP-191). - Supports x402 crypto payments using USDC on Base mainnet. - MCP integration provides five email management tools (check availability, login, list, read, delete messages). - Free and paid tiers: random address (free) or custom address (paid). - REST API and npx/CLI support for easy access and integration.

元数据

Slug clawmail-xyz

版本 1.0.0

许可证 —

累计安装 2

当前安装数 1

历史版本数 1

常见问题