Mcp Marketplace

Install, configure, and manage MCP servers. Search 50+ verified servers plus npm and Smithery registries. Auto-generate configs for OpenClaw, Claude Desktop,...

This skill appears to do what it says: discover, build config entries, and help install MCP servers. Important things to consider before installing or running it: - The skill will run local Python scripts that read and write config files (project .mcp.json, Claude/Cursor config locations) and store install state under your home directory; back up any existing configs first. - To actually install servers it will execute install commands (npx, uvx, pip, docker, etc.) which download and run third‑party packages. Only approve installs for packages you trust; unverified npm/Smithery packages carry the usual supply‑chain risks. - The skill does not collect tokens in chat and uses ${VAR} placeholders, but it will require you to set sensitive env vars (GITHUB_TOKEN, SLACK_BOT_TOKEN, DB connection strings, etc.) locally. Never paste secrets into chat; use environment variables or a secrets manager. - If you want extra assurance, inspect the unreviewed scripts referenced during install (notably install_server.py and secrets_helper.py) before running them, or run installs in an isolated environment/container. - If anything in the scripts looks unexpected to you (network endpoints, telemetry, or unexpected writes outside the described config locations), stop and ask for clarification.

Type: OpenClaw Skill Name: mcp-marketplace Version: 3.0.0 The mcp-marketplace skill bundle is a legitimate and well-architected tool for discovering, installing, and managing Model Context Protocol (MCP) servers. It includes a comprehensive suite of Python scripts (e.g., search_registries.py, health_check.py, build_config.py) that interact with official registries like npm and Smithery, and it follows excellent security practices by explicitly instructing the AI agent never to handle raw secrets, instead favoring environment variables and local secrets managers (via secrets_helper.py). While the bundle performs high-risk actions such as installing packages and executing server processes for health checks, these behaviors are transparently documented in SKILL.md and are essential to its stated purpose as a marketplace manager.