功能描述

AI agent infrastructure for deals, escrow, attestations, and autonomous agents. 39 tools across 9 engines.

使用说明 (SKILL.md)

deal.works

Name: Deal Works Mcp
Author: swgoettelman

AI agent infrastructure for trustworthy deal-making. Enables agents to create deals, manage escrow, deploy autonomous agents, and issue cryptographic attestations.

Quick Start

# Install the skill
openclaw skill add swgoettelman/deal-works

# Set your API key
export DEAL_WORKS_API_KEY=your_key_here

# The skill is now available to your agent

Get your API key at hq.works/settings/api.

Capabilities

9 Engines, 39 Tools

Engine	Tools	Purpose
Deal	7	Deal lifecycle: create, sign, approve, search, timeline
Fund	6	Wallets, transfers, escrow, cashout, agent funding
Bourse	5	Marketplace for templates, skills, integrations
Cadre	6	Deploy and manage autonomous agents
Oath	5	Cryptographic attestations (completed on-chain)
Parler	4	Dispute resolution and governance
Academy	3	Learning platform for deal-making
HQ	2	Dashboard metrics and system health
Clause	1	Contract clause rendering

7 Resources

dealworks://profile - User profile and trust tier
dealworks://wallet - Wallet balances
dealworks://deals - Active deals
dealworks://agents - Deployed agents
dealworks://templates - Available templates
dealworks://disputes - Open disputes
dealworks://dashboard - Key metrics

5 Pre-built Prompts

escrow-deal - Create escrow-protected deal workflow
deploy-agent - Deploy agent from skill
file-dispute - File dispute with evidence
publish-template - Publish template to Bourse
portfolio-review - Review deal portfolio

Common Workflows

Create an Escrow Deal

User: Create a $5000 escrow deal with [email protected] for website development

Agent: I'll use deal_create to create the deal, then fund_escrow to lock the funds,
       and oath_attest to prepare completion verification.

Deploy a Monitoring Agent

User: Deploy an agent to monitor my active deals and alert on SLA violations

Agent: I'll use bourse_search to find monitoring skills, cadre_deploy to launch
       the agent, and fund_agent_fund to allocate operational budget.

File a Dispute

User: The contractor didn't deliver. File a dispute for deal xyz123.

Agent: I'll use deal_get to review the deal, then parler_dispute_file with
       the evidence. The dispute enters the resolution queue.

Tool Reference

Deal Engine

Tool	Description
`deal_list`	List deals with optional status filter
`deal_create`	Create a new deal with terms and counterparty
`deal_get`	Get detailed deal information
`deal_action`	Perform action: SIGN, APPROVE, REJECT, CANCEL, COMPLETE, ARCHIVE
`deal_search`	Search deals by text query
`deal_timeline`	Get activity timeline for a deal
`deal_attachments`	List deal attachments

Fund Engine

Tool	Description
`fund_balance`	Get wallet balance (available, locked, pending)
`fund_transfer`	Transfer funds between wallets
`fund_transactions`	List transaction history
`fund_escrow`	Lock funds in escrow for a deal
`fund_cashout`	Cash out to external wallet on Base
`fund_agent_fund`	Fund an agent's operational wallet

Bourse Engine

Tool	Description
`bourse_search`	Search marketplace for templates/skills
`bourse_get`	Get listing details and reviews
`bourse_fork`	Fork a listing to customize
`bourse_publish`	Publish to marketplace
`bourse_earnings`	View earnings from published listings

Cadre Engine

Tool	Description
`cadre_list`	List deployed agents
`cadre_deploy`	Deploy a new agent from skill
`cadre_command`	Send command: START, STOP, RESTART, SCALE
`cadre_health`	Get agent health status
`cadre_delegations`	List permission delegations
`cadre_sla_violations`	List SLA violations

Oath Engine

Tool	Description
`oath_attest`	Create attestation for deal milestone
`oath_verify`	Verify attestation authenticity
`oath_vault_upload`	Upload document hashes to vault
`oath_vault_seal`	Seal vault with Merkle root on-chain
`oath_trust_tier`	Get user/org trust tier

Parler Engine

Tool	Description
`parler_dispute_file`	File a dispute with evidence
`parler_dispute_list`	List disputes by status/role
`parler_proposals`	List resolution proposals
`parler_vote`	Vote on proposal

Academy Engine

Tool	Description
`academy_courses`	Browse available courses
`academy_enroll`	Enroll in a course
`academy_tip`	Tip a course creator

HQ Engine

Tool	Description
`hq_dashboard`	Get dashboard metrics
`hq_health`	Check system health

Clause Engine

Tool	Description
`clause_render`	Render contract clause template

Security

All mutations use idempotency keys (safe to retry)
API keys scoped per engine
Rate limited: 100 requests/minute
Circuit breaker per engine (5 failures = 30s cooldown)
Only calls *.works domains + approved external APIs

Links

deal.works - Main platform
Documentation - Full API docs
npm package
GitHub

安全使用建议

This skill appears coherent and implements what it advertises, but take these precautions before installing: - Verify the npm package publisher and the package name (@swgoettelman/deal-works-mcp) on the registry and confirm the linked GitHub repository matches the publisher. - Confirm the deal.works / hq.works domains and documentation are legitimate and match the package's homepage/repo. - Limit the DEAL_WORKS_API_KEY you provide (use least privilege / engine-scoped key if possible) because the code treats API keys as granting full scopes and the skill can perform fund/escrow/agent operations. - Review the package release history and maintainers; avoid installing unsigned or unfamiliar packages globally if you don't trust the author. - Note minor inconsistencies in README/SKILL.md (package name variations like @goettelman vs @swgoettelman) — likely typos but worth verifying the correct package to avoid typosquatting. If you can verify the publisher and repo, the skill is coherent and consistent with its stated purpose.

功能分析

Type: OpenClaw Skill Name: deal-works-mcp Version: 0.1.0 The OpenClaw AgentSkills skill bundle for 'deal-works-mcp' appears benign. The code (dist/index.js, src/*) consistently makes API calls only to explicitly defined `*.works` domains, aligning with the security claims in SKILL.md and README.md. Input validation is robustly implemented using `zod` schemas for all tool arguments, mitigating common injection vulnerabilities. The SKILL.md and src/prompts.ts files contain instructions for the AI agent that are clearly aligned with the stated purpose of managing deals, escrow, and agents, without any evidence of prompt injection attempts to exfiltrate data, establish persistence, or perform unauthorized actions. While financial transaction tools like `fund_cashout` exist, they are part of the skill's stated purpose and are not used maliciously within the skill's own logic.

能力评估

✓ Purpose & Capability

Name/description match the code and SKILL.md: the package exposes 9 engines / 39 tools for deals, escrow, agents, attestations and uses only node and an API key. Required binaries and the single env var (DEAL_WORKS_API_KEY) are appropriate for an HTTP client to an external SaaS.

✓ Instruction Scope

SKILL.md instructs installing the npm package and setting DEAL_WORKS_API_KEY. The runtime code calls only the declared *.works service endpoints via HTTP and does not read unrelated files or additional environment variables. Tool handlers perform expected API requests for listed functionality.

ℹ Install Mechanism

Install is via an npm package (@swgoettelman/deal-works-mcp) which is expected for an MCP server. This is moderate risk compared to instruction-only skills (npm packages run code locally). Verify the package publisher and registry before installing. No remote arbitrary downloads or extract-from-URL patterns were detected.

✓ Credentials

Only DEAL_WORKS_API_KEY is required and declared as the primary credential. The code explicitly uses process.env.DEAL_WORKS_API_KEY for Authorization. The API key is treated as granting broad scopes (auth.ts notes 'API key has all scopes'), which is consistent with the service but is sensitive—it is proportional but powerful.

✓ Persistence & Privilege

Skill is not always-enabled, does not request system config paths, and installs its own binary only. It does not modify other skills or system-wide configs in the provided code. Autonomous invocation is allowed (default) but not combined with other red flags.

版本历史

v0.1.0

Initial release of deal-works-mcp (v0.1.0): - Provides AI agent infrastructure for deals, escrow, attestations, and autonomous agents. - Features 39 tools across 9 engines, covering deal lifecycle, wallets, marketplace, agent deployment, attestations, dispute resolution, learning, dashboard, and contract clauses. - Includes detailed quick start, resource access, and workflow examples in documentation. - Security includes API key scoping, rate limiting, idempotency, and circuit breaker protections. - Available via npm and integrates with Openclaw platform.

元数据

Slug deal-works-mcp

版本 0.1.0

许可证 —

累计安装 1

当前安装数 1

历史版本数 1

常见问题

Deal Works Mcp 是什么？

AI agent infrastructure for deals, escrow, attestations, and autonomous agents. 39 tools across 9 engines. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 395 次。

如何安装 Deal Works Mcp？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install deal-works-mcp」即可一键安装，无需额外配置。

Deal Works Mcp 是免费的吗？

是的，Deal Works Mcp 完全免费（开源免费），可自由下载、安装和使用。

Deal Works Mcp 支持哪些平台？

Deal Works Mcp 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Deal Works Mcp？

由 swgoettelman（@swgoettelman）开发并维护，当前版本 v0.1.0。

Deal Works Mcp