← 返回 Skills 市场
tkejr

MakeX

作者 Tanmay Kejriwal · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
589
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install makex
功能描述
Integrate and execute actions from third-party services via MakeX using OpenClaw API with organization-level authentication and unified endpoints.
使用说明 (SKILL.md)

OpenClaw Integrations API

OpenClaw is a skill-based integration system that allows apps built on MakeX to discover and execute actions from third-party services (Gmail, Slack, GitHub, etc.) via Composio.

Authentication

All endpoints require the X-Org-Token header containing an organization service token. This token is validated against the organization database. User session cookies are not used — these endpoints are designed for server-to-server communication.

X-Org-Token: \x3Corg-service-token>

Don't have an org token?

  1. Go to https://www.makex.app/ and sign up for an account.
  2. Navigate to Settings in your dashboard.
  3. Copy your API key from the settings page — this is your X-Org-Token.

Base URL

POST /api/openclaw/integrations/\x3Cendpoint>

All endpoints support CORS via a preflight OPTIONS handler.

Endpoints

1. Search Actions

POST /api/openclaw/integrations/search-actions

Discover available actions/tools across one or more integrations.

Request Body:

{
  "integrations": ["gmail", "slack", "github"],
  "toolkit": "gmail",
  "search": "send"
}
  • integrations (required): Array of integration slugs to search across.
  • toolkit (optional): If provided, overrides integrations and searches only this toolkit.
  • search (optional): Filter actions by keyword.

Response (200):

{
  "total": 12,
  "actions": {
    "gmail": [
      { "slug": "GMAIL_SEND_EMAIL", "name": "Send Email" },
      { "slug": "GMAIL_CREATE_DRAFT", "name": "Create Draft" }
    ],
    "slack": [
      { "slug": "SLACK_SEND_MESSAGE", "name": "Send Message" }
    ]
  }
}

2. Connected Account

POST /api/openclaw/integrations/connected-account

Check if a specific integration is connected for the organization and retrieve account details.

Request Body:

{
  "integration": "gmail"
}
  • integration (required): The integration slug to check.

Response (200):

{
  "accountId": "conn_abc123",
  "userId": "org_xyz",
  "integration": "gmail",
  "status": "ACTIVE"
}

Response (404) — not connected:

{
  "error": "No active connected account found for integration gmail",
  "availableIntegrations": ["slack", "github"]
}

3. Action Details

POST /api/openclaw/integrations/action-details

Get the full specification of a specific action, including its input and output parameters.

Request Body:

{
  "action_slug": "GMAIL_SEND_EMAIL"
}
  • action_slug (required): The slug of the action to retrieve.

Response (200):

{
  "name": "Send Email",
  "slug": "GMAIL_SEND_EMAIL",
  "description": "Send an email via Gmail",
  "inputParameters": {
    "to": { "type": "string", "description": "Recipient email", "required": true },
    "subject": { "type": "string", "description": "Email subject" },
    "body": { "type": "string", "description": "Email body" }
  },
  "outputParameters": {
    "messageId": { "type": "string" },
    "threadId": { "type": "string" }
  }
}

4. Run Action

POST /api/openclaw/integrations/run-action

Execute a specific action on a connected account.

Request Body:

{
  "toolName": "GMAIL_SEND_EMAIL",
  "accountId": "conn_abc123",
  "arguments": {
    "to": "[email protected]",
    "subject": "Hello",
    "body": "Hi there"
  }
}
  • toolName (required): The action slug to execute.
  • accountId (required): The connected account ID (from the connected-account endpoint).
  • arguments (optional): Structured key-value arguments for the action.
  • text (optional): Natural language text input (used if arguments is not provided).
  • version (optional): API version override.
  • custom_auth_params (optional): Custom authentication parameters.
  • custom_connection_data (optional): Custom connection data.
  • allow_tracing (optional): Enable tracing for the execution.

Response (200): The raw Composio execution response (varies by action).


5. Output Structure

POST /api/openclaw/integrations/output-structure

Execute an action and return its output structure. Useful for determining the shape of an action's response.

Request Body:

{
  "action_slug": "GMAIL_SEND_EMAIL",
  "accountId": "conn_abc123",
  "arguments": {
    "to": "[email protected]",
    "subject": "Test",
    "body": "Test body"
  }
}
  • action_slug (required): The action slug to execute.
  • accountId (required): The connected account ID.
  • arguments (optional): Arguments to pass to the action.

Response (200):

{
  "successful": true,
  "data": { ... }
}

Error Responses

All endpoints return errors in a consistent format:

{ "error": "Description of what went wrong" }
Status Meaning
400 Missing required parameters
401 Missing or invalid X-Org-Token
404 Resource not found (e.g., no connected account)
500 Server error or missing COMPOSIO_API_KEY

Typical Workflow

  1. Search actions to discover what's available for connected integrations.
  2. Get connected account to retrieve the accountId for a specific integration.
  3. Get action details to understand input/output parameters for a chosen action.
  4. Run action to execute the action with the required arguments.
安全使用建议
This skill's documentation appears to be what it claims (a MakeX/OpenClaw wrapper to discover and run Composio actions), but it expects an organization service token (X-Org-Token) and — in several endpoints — a COMPOSIO_API_KEY environment variable that the registry did not declare. Before installing or enabling this skill: - Confirm where and how you'll supply X-Org-Token and COMPOSIO_API_KEY. Prefer short-lived or least-privilege tokens and avoid supplying full org admin keys if possible. - Ask the skill author (or the platform) to declare COMPOSIO_API_KEY in the skill metadata so permission review is explicit. - Verify the skill's source/homepage and who operates the Composio backend (the SKILL.md references backend.composio.dev) — do not trust unknown/undeclared endpoints. - If you must test, use a non-production org and test tokens to limit blast radius. - Consider disabling autonomous invocation for the skill if you do not want it to call endpoints without explicit user triggers. Because of the undeclared sensitive environment dependency and lack of source/homepage, treat the skill as suspicious until the credential-handling and provenance questions are answered.
功能分析
Type: OpenClaw Skill Name: makex Version: 1.0.0 The skill bundle describes an API for integrating with third-party services via Composio, allowing actions like searching tools, checking connected accounts, getting action details, and running actions. All files are documentation, detailing API endpoints and their expected behavior. There is no evidence of intentional malicious activity such as data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the AI agent. The `run-action` endpoint provides powerful capabilities, but this aligns with the stated purpose of an integration skill, and the documentation does not instruct the agent to misuse it. Authentication relies on an `X-Org-Token` provided by the user, which is standard API practice.
能力评估
Purpose & Capability
The skill's name and description (MakeX / OpenClaw integrations) match the runtime instructions: it documents discovery and execution of third-party actions via Composio. However, the SKILL.md repeatedly references a required COMPOSIO_API_KEY environment variable for execution endpoints while the skill registry lists no required env vars or primary credential. That undeclared but required secret is a notable inconsistency.
Instruction Scope
The SKILL.md instructs the agent to call internal endpoints that require an X-Org-Token header and (for execution) a COMPOSIO_API_KEY env var. The instructions do not request reading arbitrary local files or other unrelated secrets, but they assume the runtime has access to a sensitive COMPOSIO_API_KEY that is not declared in the skill metadata. This mismatch means the agent or integrator must supply a sensitive credential out-of-band, which increases risk and decreases transparency.
Install Mechanism
This is instruction-only (no install spec, no code). That lowers the on-disk execution risk because nothing is downloaded or installed by the skill itself.
Credentials
Functionally, COMPOSIO_API_KEY and an X-Org-Token are proportionate to the described service (server-to-server calls into Composio/MakeX). The problem is the skill registry declares no required environment variables or primary credential while the instructions require them. Users should be aware they'd need to provide organization-level tokens (X-Org-Token) and possibly store/provide COMPOSIO_API_KEY to enable run-action/output-structure endpoints — both are sensitive and should be least-privilege and audited.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It's user-invocable and allows autonomous invocation by default (normal for skills). There is no install step that modifies other skills or system-wide settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install makex
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /makex 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
OpenClaw Integrations API initial release: - Introduces secure, token-based endpoints for server-to-server integration management. - Supports action search, action detail retrieval, connected account status, action execution, and output structure preview. - Provides consistent error handling and CORS support. - Comprehensive documentation and example requests/responses included.
元数据
Slug makex
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

MakeX 是什么?

Integrate and execute actions from third-party services via MakeX using OpenClaw API with organization-level authentication and unified endpoints. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 589 次。

如何安装 MakeX?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install makex」即可一键安装,无需额外配置。

MakeX 是免费的吗?

是的,MakeX 完全免费(开源免费),可自由下载、安装和使用。

MakeX 支持哪些平台?

MakeX 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 MakeX?

由 Tanmay Kejriwal(@tkejr)开发并维护,当前版本 v1.0.0。

💬 留言讨论