← 返回 Skills 市场
danielfoch

KVcore MCP CLI

作者 danielfoch · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
764
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install kvcore-mcp-cli
功能描述
Perform KVcore CRM actions via MCP/CLI, including managing contacts, tags, notes, calls, emails, texts, campaigns, and raw API access with optional Twilio ca...
使用说明 (SKILL.md)

KVcore MCP/CLI Skill

Use this skill for KVcore CRM operations from chat interfaces.

Environment

Required:

  • KVCORE_API_TOKEN

Optional:

  • KVCORE_BASE_URL (default https://api.kvcore.com)
  • KVCORE_TIMEOUT_MS
  • TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN, TWILIO_FROM_NUMBER

MCP Server

Start with:

npm run dev:kvcore-mcp

Primary tools:

  • kvcore_contact_search, kvcore_contact_get, kvcore_contact_create, kvcore_contact_update
  • kvcore_contact_tag_add, kvcore_contact_tag_remove
  • kvcore_note_add
  • kvcore_call_log, kvcore_call_schedule
  • kvcore_email_send, kvcore_text_send
  • kvcore_user_tasks, kvcore_user_calls
  • kvcore_campaigns_refresh
  • kvcore_request (raw endpoint access)
  • twilio_call_create (fallback outbound call)

CLI

Build:

npm run build

Examples:

node packages/kvcore-cli/dist/index.js contact search --query "john smith" --pretty
node packages/kvcore-cli/dist/index.js email:send --contact-id 123 --subject "Quick update" --body "Following up" --pretty
node packages/kvcore-cli/dist/index.js text:send --contact-id 123 --body "Can we connect today?" --pretty
node packages/kvcore-cli/dist/index.js call:schedule --json '{"contact_id":123,"user_id":456,"scheduled_at":"2026-02-15 10:00:00"}' --pretty
node packages/kvcore-cli/dist/index.js call:twilio --to "+14165550001" --twiml "\x3CResponse>\x3CSay>Hello\x3C/Say>\x3C/Response>" --pretty

Scope Notes

KVcore Public API v2 supports contacts, notes, call logging, send email/text, schedule call, user task/call listing, and campaign refresh.

For endpoints not wrapped yet, use kvcore_request or CLI raw.

安全使用建议
This skill's instructions expect a local npm-based CLI and list required environment variables (KVCORE_API_TOKEN, optional Twilio creds), but the published bundle contains no code or install instructions and the registry metadata doesn't declare those env vars. Before installing or providing credentials, ask the publisher for the source repository or a homepage, request clear install steps (or a vetted package), and inspect the npm scripts and code you would be running. Do not provide KVCORE_API_TOKEN or Twilio credentials until you can verify the code and confirm where network requests will be sent. If you must test, run in an isolated environment (ephemeral VM/container) and limit credentials (use test accounts or tokens with minimal scope).
功能分析
Type: OpenClaw Skill Name: kvcore-mcp-cli Version: 0.1.0 The skill is classified as suspicious due to several high-risk capabilities described in `SKILL.md`. It explicitly offers 'raw endpoint access' via `kvcore_request`, allowing the AI agent to make arbitrary API calls to the KVcore system. Furthermore, it allows specifying a custom `KVCORE_BASE_URL`, which could redirect sensitive API interactions to an attacker-controlled server. The `twilio_call_create` function also permits arbitrary TwiML, enabling potential social engineering or phishing calls. These features, while potentially intended for flexibility, introduce significant prompt injection vulnerabilities, allowing an attacker to coerce the AI agent into performing unauthorized data exfiltration, modifications, or other harmful actions against the KVcore API or via Twilio.
能力评估
⚠ Purpose & Capability
The SKILL.md describes a CLI/‘MCP server’ and lists concrete binaries/commands (npm run dev:kvcore-mcp, node packages/kvcore-cli/dist/index.js) plus required env vars (KVCORE_API_TOKEN, optional Twilio creds). However, the registry metadata declares no required env vars and the skill bundle contains no code files. A user would reasonably expect either the CLI code or an install spec; their absence is inconsistent with the stated purpose.
⚠ Instruction Scope
Instructions tell the agent to run npm scripts and node executables under packages/..., and to use KVCORE_API_TOKEN and optional Twilio credentials. Those commands reference local project files that are not included in the skill. The instructions also permit raw endpoint access (kvcore_request) and fallback Twilio calls — behavior that will transmit data to external services. The SKILL.md asks the agent to access environment variables not declared in the registry metadata, which is a scope/information mismatch.
ℹ Install Mechanism
There is no install spec (instruction-only), which minimizes direct install risk. However, the runtime instructions require running npm build/dev commands implying a local repository or installed package; because no code or install steps are provided, an agent running those commands could either fail or execute arbitrary local npm scripts if present. The missing code/install details are a practical and transparency concern.
ℹ Credentials
Requiring KVCORE_API_TOKEN and optional Twilio credentials is proportionate to the CRM and outbound-call functionality described. That said, the registry metadata lists no required env vars while SKILL.md does — an inconsistency. Also note that Twilio auth tokens and the KVCORE API token are sensitive: if supplied they enable external API operations (sending texts/emails/placing calls).
✓ Persistence & Privilege
The skill does not request persistent installation or always:true. It is user-invocable and may be invoked autonomously by the agent (platform default), which is expected. There is no evidence the skill modifies other skills or system-wide settings.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install kvcore-mcp-cli
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /kvcore-mcp-cli 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial publish of KVcore MCP + CLI skill
元数据
Slug kvcore-mcp-cli
版本 0.1.0
许可证 —
累计安装 0
当前安装数 0
历史版本数 1
常见问题

KVcore MCP CLI 是什么？

Perform KVcore CRM actions via MCP/CLI, including managing contacts, tags, notes, calls, emails, texts, campaigns, and raw API access with optional Twilio ca... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 764 次。

如何安装 KVcore MCP CLI？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install kvcore-mcp-cli」即可一键安装，无需额外配置。

KVcore MCP CLI 是免费的吗？

是的，KVcore MCP CLI 完全免费（开源免费），可自由下载、安装和使用。

KVcore MCP CLI 支持哪些平台？

KVcore MCP CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 KVcore MCP CLI？

由 danielfoch（@danielfoch）开发并维护，当前版本 v0.1.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论