← 返回 Skills 市场
364
总下载
0
收藏
2
当前安装
2
版本数
在 OpenClaw 中安装
/install thegraph-token-mcp-skill
功能描述
Use The Graph Token API MCP through UXC for token metadata, wallet balances, transfers, holders, pools, and market data with help-first inspection and Token...
安全使用建议
This skill appears to do what it claims (query The Graph Token MCP) and only needs network access and a Token API JWT. However, the package metadata does not declare the required THEGRAPH_TOKEN_API_JWT environment secret even though SKILL.md instructs you to create and store it. Before installing or using the skill: 1) Confirm the registry metadata is corrected to list THEGRAPH_TOKEN_API_JWT (or otherwise document how credentials are provided). 2) Only store the JWT in a dedicated secret (do not reuse other Graph keys). 3) Verify you trust token-api.mcp.thegraph.com and the 'uxc' tooling on your system; the skill will run uxc commands that use the bound credential. 4) Inspect any runtime execution in your environment (uxc link/auth commands) and avoid pasting secrets into public logs. If you need higher assurance, ask the maintainer to explicitly declare required environment variables and provide an explanation for any other credentials or tooling the skill expects.
功能分析
Type: OpenClaw Skill
Name: thegraph-token-mcp-skill
Version: 1.0.1
The skill bundle provides a legitimate interface for interacting with The Graph Token API using the Model Context Protocol (MCP) via the `uxc` utility. It includes standard documentation for authentication setup, endpoint binding, and API operation discovery, with a validation script (`scripts/validate.sh`) that ensures documentation completeness without performing any harmful actions.
能力评估
Purpose & Capability
The name/description and instructions align: this skill is for The Graph Token MCP via the 'uxc' tooling and requires a Token API JWT for authenticated calls. However, the registry metadata claims no required env vars/credentials while the runtime docs explicitly instruct storing a THEGRAPH_TOKEN_API_JWT secret — this mismatch is unexpected.
Instruction Scope
SKILL.md confines actions to probing and calling https://token-api.mcp.thegraph.com/ via uxc/thegraph-token-mcp-cli, inspecting operation help, and using a dedicated bearer token. It does not instruct reading unrelated system files, other credentials, or exfiltrating data to non-Graph endpoints.
Install Mechanism
There is no install spec (instruction-only), so nothing arbitrary is downloaded or written to disk by an installer. A validate.sh script is included for authorship checks (it requires ripgrep 'rg' if run) but that script is a repository validation helper, not an installer.
Credentials
The runtime instructions require a dedicated API TOKEN (JWT) stored as THEGRAPH_TOKEN_API_JWT and bound via uxc auth commands. The registry lists no required env vars or primary credential, which is inconsistent — the skill does request a sensitive secret in practice and that should be declared explicitly and justified.
Persistence & Privilege
The skill does not request always:true or other elevated persistent privileges. It recommends creating uxc auth bindings and a CLI link, which is appropriate for its stated function and limited to its own binding/credential.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install thegraph-token-mcp-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/thegraph-token-mcp-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
**Auth handling and documentation improvements for The Graph Token MCP Skill**
- Clarified the required use of a specific Token API JWT (not a subgraph API key) for authentication.
- Updated setup instructions to reflect proper credential separation and explicit JWT bearer token workflow.
- Added warnings against reusing credentials from other The Graph skills.
- Expanded guardrails and troubleshooting steps for correct auth binding and token usage.
- Improved language in capability and prerequisite descriptions for accuracy.
v1.0.0
thegraph-token-mcp-skill 1.0.0 – Initial release
- Enables access to The Graph Token API MCP for token metadata, wallet balances, transfers, holders, pools, and market data via UXC.
- Integrates standard authentication by reusing the existing The Graph credential and provides instructions for token API binding.
- Details help-first inspection steps, operation schema checks, and recommends safe usage and automation patterns.
- Outlines capability map and tested endpoints for verification.
- Emphasizes reading operation help before queries and includes troubleshooting guardrails.
元数据
常见问题
Thegraph Token Mcp Skill 是什么？
Use The Graph Token API MCP through UXC for token metadata, wallet balances, transfers, holders, pools, and market data with help-first inspection and Token... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 364 次。
如何安装 Thegraph Token Mcp Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install thegraph-token-mcp-skill」即可一键安装，无需额外配置。
Thegraph Token Mcp Skill 是免费的吗？
是的，Thegraph Token Mcp Skill 完全免费（开源免费），可自由下载、安装和使用。
Thegraph Token Mcp Skill 支持哪些平台？
Thegraph Token Mcp Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Thegraph Token Mcp Skill？
由 jolestar（@jolestar）开发并维护，当前版本 v1.0.1。
推荐 Skills