← 返回 Skills 市场
274
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install thegraph-mcp-skill
功能描述
Use The Graph Subgraph MCP through UXC via native SSE with a fixed linked command for subgraph discovery, schema retrieval, deployment selection, and GraphQL...
安全使用建议
This skill appears to implement The Graph MCP workflow via uxc and is not trying to access unrelated systems, but there are important inconsistencies you should address before installing:
- The SKILL.md requires the 'uxc' binary and THEGRAPH_API_KEY (used via 'uxc auth credential set ... --secret-env THEGRAPH_API_KEY'), yet the registry metadata lists no required env vars or binaries. Confirm you will provide THEGRAPH_API_KEY and have uxc installed before use.
- The skill will create a fixed linked command name (thegraph-mcp-cli) and an auth binding in your uxc config; verify that creating such a link and storing the API key in uxc's credential store is acceptable for your environment and won't conflict with existing binaries.
- Because the source/homepage is unknown, prefer testing in a limited environment first and avoid using a high-privilege or long-lived API key; rotate the key afterwards if possible.
- Ask the maintainer to correct the package metadata to declare required binaries (uxc) and required env vars (THEGRAPH_API_KEY) and to document any side effects of running the validate script (it expects 'rg' / ripgrep for validation).
功能分析
Type: OpenClaw Skill
Name: thegraph-mcp-skill
Version: 1.0.0
The skill is a legitimate integration for The Graph's MCP server, providing instructions for subgraph discovery and GraphQL querying via the 'uxc' utility. It follows security best practices by using environment variables for API keys (THEGRAPH_API_KEY) and includes a validation script (scripts/validate.sh) to ensure proper configuration and documentation standards. The workflow described in SKILL.md and usage-patterns.md focuses on discovery and schema inspection before execution, with no signs of malicious intent or unauthorized data access.
能力评估
Purpose & Capability
Name/description describe The Graph MCP via uxc and the SKILL.md consistently documents using uxc + The Graph Gateway API key. However the registry metadata declares no required env vars or required binaries while the runtime docs explicitly require 'uxc' and THEGRAPH_API_KEY. This mismatch is an incoherence in the skill bundle (likely an omission) that the maintainer should fix.
Instruction Scope
SKILL.md stays within the stated purpose: it instructs discovery, schema inspection, and limited GraphQL queries against https://subgraphs.mcp.thegraph.com/sse using uxc/thegraph-mcp-cli. It does instruct adding an auth binding and registering an API key via 'uxc auth credential set ... --secret-env THEGRAPH_API_KEY', which is expected for authenticated calls. It does not instruct reading unrelated system files or exfiltrating data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with no install spec and no downloads. That limits disk-write/remote-install risk. The included validate.sh is a development/CI helper (requires ripgrep) but is not an install routine; it only enforces documentation patterns.
Credentials
The runtime docs require THEGRAPH_API_KEY (and network access to the Graph MCP endpoint) but the skill metadata does not declare any required environment variables. The only secret the skill needs is the Graph API key, which is proportionate for the described functionality — but the metadata omission is misleading and could cause accidental misconfiguration or secret exposure if users aren't warned.
Persistence & Privilege
The skill does not request persistent platform-wide privileges (always:false). It instructs the agent to create a uxc auth binding and a link (thegraph-mcp-cli), which is a local configuration change inside uxc and is coherent with the skill's purpose. Autonomous model invocation is allowed by default but not combined with other high-risk indicators.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install thegraph-mcp-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/thegraph-mcp-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
thegraph-mcp-skill 1.0.0: Initial release.
- Provides The Graph Subgraph MCP integration via UXC, using the native SSE endpoint.
- Supports subgraph discovery, schema retrieval, deployment selection, and GraphQL query execution.
- Enforces help-first inspection and explicit Bearer auth setup with The Graph Gateway API key.
- Includes robust guardrails: stable JSON envelope parsing, credential and command setup, schema-first workflow, and fallback options.
- Documents a full tested scenario querying Uniswap subgraphs with verified query shape.
元数据
常见问题
Thegraph Mcp Skill 是什么？
Use The Graph Subgraph MCP through UXC via native SSE with a fixed linked command for subgraph discovery, schema retrieval, deployment selection, and GraphQL... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 274 次。
如何安装 Thegraph Mcp Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install thegraph-mcp-skill」即可一键安装，无需额外配置。
Thegraph Mcp Skill 是免费的吗？
是的，Thegraph Mcp Skill 完全免费（开源免费），可自由下载、安装和使用。
Thegraph Mcp Skill 支持哪些平台？
Thegraph Mcp Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Thegraph Mcp Skill？
由 jolestar（@jolestar）开发并维护，当前版本 v1.0.0。
推荐 Skills