← Back to Skills Marketplace
PracticePanther API MCP
by
Mike Quinlan
· GitHub ↗
· v1.0.0
· MIT-0
332
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install practicepanther-mcp
Description
MCP server for the PracticePanther legal practice management API. Exposes PracticePanther's REST API as read-only MCP tools.
Usage Guidance
Before installing or running this skill: 1) Verify the provenance of the practicepanther-mcp binary (inspect the npm package @mjquinlan2000/practicepanther-mcp source and maintainer). 2) Ask the publisher how PracticePanther API credentials are supplied and stored — do not assume they are unnecessary; you should never provide your PracticePanther API key unless you understand where it will be stored and used. 3) Treat NODE_MCP_SECRET_KEY as sensitive — confirm it is only used locally and not exfiltrated. 4) Prefer installing from trusted package registries and reviewing package code (or running in an isolated environment) before granting network access. 5) If the publisher cannot explain where PracticePanther credentials live or provide a verifiable source/homepage, consider this skill suspicious and avoid installing it.
Capability Analysis
Type: OpenClaw Skill
Name: practicepanther-mcp
Version: 1.0.0
The skill bundle provides metadata and documentation for an MCP server designed to interact with the PracticePanther legal practice management API. It contains no executable code, only requiring external binaries and an environment variable (NODE_MCP_SECRET_KEY) for operation. No malicious patterns, data exfiltration attempts, or prompt injection risks were identified in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
The skill claims to expose the PracticePanther REST API as read-only MCP tools, which reasonably implies the server will need PracticePanther API credentials. However, requires.env lists only NODE_MCP_SECRET_KEY (presumably an MCP auth secret) and no PracticePanther API key/token. It's unclear how the MCP server will authenticate to PracticePanther or where those credentials are supplied. That missing linkage is an unexplained inconsistency.
Instruction Scope
SKILL.md contains only concise usage instructions for mcporter (list/call) and a link to an npm package. It does not instruct the agent to read unrelated files, environment variables, or system paths, nor to transmit data to unexpected endpoints. The runtime instructions themselves stay within the declared MCP usage boundary.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That limits what was statically analyzable (scanner had nothing to inspect). The SKILL.md points to an npm package but does not provide an install step; the user must obtain the required 'practicepanther-mcp' binary themselves. That lack of provenance increases risk because the binary could come from an untrusted source.
Credentials
Only NODE_MCP_SECRET_KEY is declared as required. An MCP server secret is plausible, but a tool that proxies PracticePanther's API would normally require PracticePanther credentials (API key/token) or document where those are provided. The absence of declared PracticePanther credentials or config paths is disproportionate to the stated purpose and leaves unanswered how external API auth is handled.
Persistence & Privilege
The skill does not request always:true, does not claim to modify other skills or system settings, and declares no config paths. It appears to have normal, ephemeral privileges consistent with an optional MCP helper.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install practicepanther-mcp - After installation, invoke the skill by name or use
/practicepanther-mcp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the PracticePanther MCP server.
- Exposes PracticePanther's REST API as read-only MCP tools.
- Supports interaction via mcporter through stdio.
- Requires mcporter, practicepanther-mcp binaries, and NODE_MCP_SECRET_KEY environment variable.
- Package available on npm.
Metadata
Frequently Asked Questions
What is PracticePanther API MCP?
MCP server for the PracticePanther legal practice management API. Exposes PracticePanther's REST API as read-only MCP tools. It is an AI Agent Skill for Claude Code / OpenClaw, with 332 downloads so far.
How do I install PracticePanther API MCP?
Run "/install practicepanther-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is PracticePanther API MCP free?
Yes, PracticePanther API MCP is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does PracticePanther API MCP support?
PracticePanther API MCP is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created PracticePanther API MCP?
It is built and maintained by Mike Quinlan (@mjquinlan2000); the current version is v1.0.0.
More Skills