io.github.romainsantoli-web/mcp-openclaw

138-tool MCP server for AI agent firms: security, A2A, Hebbian memory, fleet mgmt

9 tools GitHub

No known CVEs

No license

Maintained

Last commit 173d ago

Works with most clients

Transport: stdio, sse, http

9 tools · ~279 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.romainsantoli-web/mcp-openclaw is an MCP server that 138-tool MCP server for AI agent firms: security, A2A, Hebbian memory, fleet mgmt. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 63/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-romainsantoli-web-mcp-openclaw": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-romainsantoli-web-mcp-openclaw)](https://mcppedia.org/s/io-github-romainsantoli-web-mcp-openclaw)

Read me

What io.github.romainsantoli-web/mcp-openclaw does

Python MCP server (port 8012) that bridges VS Code Copilot agents to the > Firm Gateway ecosystem. > Companion to setup-vs-agent-firm.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

63/100across 5 weighted dimensions

How we score →

0255075100

−37

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (9)

Click any tool to inspect its schema.

~279 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.romainsantoli-web/mcp-openclaw safe to use?: io.github.romainsantoli-web/mcp-openclaw has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access.
How do I install io.github.romainsantoli-web/mcp-openclaw?: io.github.romainsantoli-web/mcp-openclaw can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can io.github.romainsantoli-web/mcp-openclaw do?: io.github.romainsantoli-web/mcp-openclaw provides 9 tools: ping, inputSchema, config_helpers, Auth, fleet_session_inject_env and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.romainsantoli-web/mcp-openclaw?: io.github.romainsantoli-web/mcp-openclaw is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.romainsantoli-web/mcp-openclaw actively maintained?: io.github.romainsantoli-web/mcp-openclaw is less actively maintained — last commit was 173 days ago.

Similar servers

Others in ai-ml / security

View all →

Dsh MCP Client97

MCP client bridge: connects to MCP servers and registers their tools on ctx.tools

190.4k 4

Gpt Researcher97

An autonomous agent that conducts deep research on any data using any LLM providers

29.1k 5

io.github.mims-harvard/tooluniverse96

1000+ scientific tools for AI scientists: life science, reserach, literature, and more.

1.7k 4

Antigravity Workspace Template96

Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.

1.3k 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.romainsantoli-web/mcp-openclaw and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Tools (138)

Module	Tool	Description	Gaps
vs_bridge	`vs_context_push`	Push VS Code context → Firm session	—
vs_bridge	`vs_context_pull`	Pull Firm session state → VS Code	—
vs_bridge	`vs_session_link`	Associate workspace path ↔ session ID	—
vs_bridge	`vs_session_status`	Bridge health check	—
gateway_fleet	`firm_gateway_fleet_status`	Parallel health-check all instances	—
gateway_fleet	`firm_gateway_fleet_add`	Register a Gateway instance	—
gateway_fleet	`firm_gateway_fleet_remove`	Remove a Gateway instance	—
gateway_fleet	`firm_gateway_fleet_broadcast`	Broadcast to all instances	—
gateway_fleet	`firm_gateway_fleet_sync`	Sync config+skills to all instances	—
gateway_fleet	`firm_gateway_fleet_list`	List instances	—
delivery_export	`firm_export_github_pr`	Create draft PR on GitHub	—
delivery_export	`firm_export_jira_ticket`	Create Jira ticket (ADF)	—
delivery_export	`firm_export_linear_issue`	Create Linear issue (GraphQL)	—
delivery_export	`firm_export_slack_digest`	Post Slack digest (Block Kit)	—
delivery_export	`firm_export_document`	Write local Markdown deliverable	—
delivery_export	`firm_export_auto`	Auto-route by `delivery_format`	—
security_audit	`firm_security_scan`	Scan files for SQL injection + XSS patterns	C1
security_audit	`firm_sandbox_audit`	Detect `sandbox.mode: off` → CRITICAL	C2
security_audit	`firm_session_config_check`	Detect ephemeral SESSION_SECRET in .env/compose	C3
security_audit	`firm_rate_limit_check`	Detect Funnel without rate limiter → CRITICAL	H8
acp_bridge	`acp_session_persist`	Persist ACP session to `~/.firm/acp_sessions.json`	C4
acp_bridge	`acp_session_restore`	Restore persisted ACP session by run_id	C4
acp_bridge	`acp_session_list_active`	List ACP sessions active in last N hours	C4
acp_bridge	`fleet_session_inject_env`	Inject env vars to spawned sessions (allowlist)	H3
acp_bridge	`fleet_cron_schedule`	Schedule cron with sandbox enforcement	H4
acp_bridge	`firm_workspace_lock`	Advisory file lock with owner tracking (`fcntl`)	H5
acp_bridge	`firm_acpx_version_check`	ACPX plugin version pin (≥0.1.15) + streaming mode check	3.1
reliability_probe	`firm_gateway_probe`	WS probe with backoff — detects close 1006, returns `launchctl`	H6/H7
reliability_probe	`firm_doc_sync_check`	Detect version drift in docs vs package.json	M5
reliability_probe	`firm_channel_audit`	Detect zombie channel SDK deps (LINE, Baileys…)	M1
reliability_probe	`firm_adr_generate`	Generate MADR + commit path for architecture decisions	M6
gateway_hardening	`firm_gateway_auth_check`	Verify Gateway auth config — CRITICAL if Funnel without password	H2
gateway_hardening	`firm_credentials_check`	Check Baileys/channel credential integrity and freshness	M3
gateway_hardening	`firm_webhook_sig_check`	Verify HMAC signing secrets for all inbound webhook channels	M4
gateway_hardening	`firm_log_config_check`	Detect debug/trace logging and missing redactPatterns	M7
gateway_hardening	`firm_workspace_integrity_check`	Validate ~/.firm/workspace (AGENTS.md, SOUL.md, staleness)	M8
runtime_audit	`firm_node_version_check`	Verify Node.js ≥ 22.12.0 (CVE-2025-59466, CVE-2026-21636)	C5
runtime_audit	`firm_secrets_workflow_check`	Detect hardcoded secrets in config.json (migrate to `firm secrets`)	C6
runtime_audit	`firm_http_headers_chec

Module

Tool

Description

Gaps

vs_bridge

vs_context_push

Push VS Code context → Firm session

—

vs_bridge

vs_context_pull

Pull Firm session state → VS Code

—

vs_bridge

vs_session_link

Associate workspace path ↔ session ID

—

vs_bridge

vs_session_status

Bridge health check

—

gateway_fleet

firm_gateway_fleet_status

Parallel health-check all instances

—

gateway_fleet

firm_gateway_fleet_add

—

gateway_fleet

firm_gateway_fleet_remove

Remove a Gateway instance

—

gateway_fleet

firm_gateway_fleet_broadcast

Broadcast to all instances

—

gateway_fleet

firm_gateway_fleet_sync

Sync config+skills to all instances

—

gateway_fleet

firm_gateway_fleet_list

List instances

—

delivery_export

firm_export_github_pr

Create draft PR on GitHub

—

delivery_export

firm_export_jira_ticket

Create Jira ticket (ADF)

—

delivery_export

firm_export_linear_issue

Create Linear issue (GraphQL)

—

delivery_export

firm_export_slack_digest

Post Slack digest (Block Kit)

—

delivery_export

firm_export_document

Write local Markdown deliverable

—

delivery_export

firm_export_auto

Auto-route by delivery_format

—

security_audit

firm_security_scan

Scan files for SQL injection + XSS patterns

security_audit

firm_sandbox_audit

Detect sandbox.mode: off → CRITICAL

security_audit

firm_session_config_check

Detect ephemeral SESSION_SECRET in .env/compose

security_audit

firm_rate_limit_check

Detect Funnel without rate limiter → CRITICAL

acp_bridge

acp_session_persist

Persist ACP session to ~/.firm/acp_sessions.json

acp_bridge

acp_session_restore

Restore persisted ACP session by run_id

acp_bridge

acp_session_list_active

List ACP sessions active in last N hours

acp_bridge

fleet_session_inject_env

Inject env vars to spawned sessions (allowlist)

acp_bridge

fleet_cron_schedule

Schedule cron with sandbox enforcement

acp_bridge

firm_workspace_lock

Advisory file lock with owner tracking (fcntl)

acp_bridge

firm_acpx_version_check

ACPX plugin version pin (≥0.1.15) + streaming mode check

3.1

reliability_probe

firm_gateway_probe

WS probe with backoff — detects close 1006, returns launchctl

H6/H7

reliability_probe

firm_doc_sync_check

Detect version drift in docs vs package.json

reliability_probe

firm_channel_audit

Detect zombie channel SDK deps (LINE, Baileys…)

reliability_probe

firm_adr_generate

Generate MADR + commit path for architecture decisions

gateway_hardening

firm_gateway_auth_check

Verify Gateway auth config — CRITICAL if Funnel without password

gateway_hardening

firm_credentials_check

Check Baileys/channel credential integrity and freshness

gateway_hardening

firm_webhook_sig_check

Verify HMAC signing secrets for all inbound webhook channels

gateway_hardening

firm_log_config_check

Detect debug/trace logging and missing redactPatterns

gateway_hardening

firm_workspace_integrity_check

Validate ~/.firm/workspace (AGENTS.md, SOUL.md, staleness)

runtime_audit

firm_node_version_check

Verify Node.js ≥ 22.12.0 (CVE-2025-59466, CVE-2026-21636)

runtime_audit

firm_secrets_workflow_check

Detect hardcoded secrets in config.json (migrate to firm secrets)

runtime_audit

`firm_http_headers_chec

Frequently Asked Questions

Is io.github.romainsantoli-web/mcp-openclaw safe to use?

io.github.romainsantoli-web/mcp-openclaw has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access.

How do I install io.github.romainsantoli-web/mcp-openclaw?

io.github.romainsantoli-web/mcp-openclaw can be installed by cloning its GitHub repository and following the setup instructions in the README.

What can io.github.romainsantoli-web/mcp-openclaw do?

io.github.romainsantoli-web/mcp-openclaw provides 9 tools: ping, inputSchema, config_helpers, Auth, fleet_session_inject_env and 4 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.romainsantoli-web/mcp-openclaw?

io.github.romainsantoli-web/mcp-openclaw is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.romainsantoli-web/mcp-openclaw actively maintained?

io.github.romainsantoli-web/mcp-openclaw is less actively maintained — last commit was 173 days ago.

Tools (138)

Module	Tool	Description	Gaps
vs_bridge	`vs_context_push`	Push VS Code context → Firm session	—
vs_bridge	`vs_context_pull`	Pull Firm session state → VS Code	—
vs_bridge	`vs_session_link`	Associate workspace path ↔ session ID	—
vs_bridge	`vs_session_status`	Bridge health check	—
gateway_fleet	`firm_gateway_fleet_status`	Parallel health-check all instances	—
gateway_fleet	`firm_gateway_fleet_add`	Register a Gateway instance	—
gateway_fleet	`firm_gateway_fleet_remove`	Remove a Gateway instance	—
gateway_fleet	`firm_gateway_fleet_broadcast`	Broadcast to all instances	—
gateway_fleet	`firm_gateway_fleet_sync`	Sync config+skills to all instances	—
gateway_fleet	`firm_gateway_fleet_list`	List instances	—
delivery_export	`firm_export_github_pr`	Create draft PR on GitHub	—
delivery_export	`firm_export_jira_ticket`	Create Jira ticket (ADF)	—
delivery_export	`firm_export_linear_issue`	Create Linear issue (GraphQL)	—
delivery_export	`firm_export_slack_digest`	Post Slack digest (Block Kit)	—
delivery_export	`firm_export_document`	Write local Markdown deliverable	—
delivery_export	`firm_export_auto`	Auto-route by `delivery_format`	—
security_audit	`firm_security_scan`	Scan files for SQL injection + XSS patterns	C1
security_audit	`firm_sandbox_audit`	Detect `sandbox.mode: off` → CRITICAL	C2
security_audit	`firm_session_config_check`	Detect ephemeral SESSION_SECRET in .env/compose	C3
security_audit	`firm_rate_limit_check`	Detect Funnel without rate limiter → CRITICAL	H8
acp_bridge	`acp_session_persist`	Persist ACP session to `~/.firm/acp_sessions.json`	C4
acp_bridge	`acp_session_restore`	Restore persisted ACP session by run_id	C4
acp_bridge	`acp_session_list_active`	List ACP sessions active in last N hours	C4
acp_bridge	`fleet_session_inject_env`	Inject env vars to spawned sessions (allowlist)	H3
acp_bridge	`fleet_cron_schedule`	Schedule cron with sandbox enforcement	H4
acp_bridge	`firm_workspace_lock`	Advisory file lock with owner tracking (`fcntl`)	H5
acp_bridge	`firm_acpx_version_check`	ACPX plugin version pin (≥0.1.15) + streaming mode check	3.1
reliability_probe	`firm_gateway_probe`	WS probe with backoff — detects close 1006, returns `launchctl`	H6/H7
reliability_probe	`firm_doc_sync_check`	Detect version drift in docs vs package.json	M5
reliability_probe	`firm_channel_audit`	Detect zombie channel SDK deps (LINE, Baileys…)	M1
reliability_probe	`firm_adr_generate`	Generate MADR + commit path for architecture decisions	M6
gateway_hardening	`firm_gateway_auth_check`	Verify Gateway auth config — CRITICAL if Funnel without password	H2
gateway_hardening	`firm_credentials_check`	Check Baileys/channel credential integrity and freshness	M3
gateway_hardening	`firm_webhook_sig_check`	Verify HMAC signing secrets for all inbound webhook channels	M4
gateway_hardening	`firm_log_config_check`	Detect debug/trace logging and missing redactPatterns	M7
gateway_hardening	`firm_workspace_integrity_check`	Validate ~/.firm/workspace (AGENTS.md, SOUL.md, staleness)	M8
runtime_audit	`firm_node_version_check`	Verify Node.js ≥ 22.12.0 (CVE-2025-59466, CVE-2026-21636)	C5
runtime_audit	`firm_secrets_workflow_check`	Detect hardcoded secrets in config.json (migrate to `firm secrets`)	C6
runtime_audit	`firm_http_headers_chec

Module

Tool

Description

Gaps

vs_bridge

vs_context_push

Push VS Code context → Firm session

—

vs_bridge

vs_context_pull

Pull Firm session state → VS Code

—

vs_bridge

vs_session_link

Associate workspace path ↔ session ID

—

vs_bridge

vs_session_status

Bridge health check

—

gateway_fleet

firm_gateway_fleet_status

Parallel health-check all instances

—

gateway_fleet

firm_gateway_fleet_add

—

gateway_fleet

firm_gateway_fleet_remove

Remove a Gateway instance

—

gateway_fleet

firm_gateway_fleet_broadcast

Broadcast to all instances

—

gateway_fleet

firm_gateway_fleet_sync

Sync config+skills to all instances

—

gateway_fleet

firm_gateway_fleet_list

List instances

—

delivery_export

firm_export_github_pr

Create draft PR on GitHub

—

delivery_export

firm_export_jira_ticket

Create Jira ticket (ADF)

—

delivery_export

firm_export_linear_issue

Create Linear issue (GraphQL)

—

delivery_export

firm_export_slack_digest

Post Slack digest (Block Kit)

—

delivery_export

firm_export_document

Write local Markdown deliverable

—

delivery_export

firm_export_auto

Auto-route by delivery_format

—

security_audit

firm_security_scan

Scan files for SQL injection + XSS patterns

security_audit

firm_sandbox_audit

Detect sandbox.mode: off → CRITICAL

security_audit

firm_session_config_check

Detect ephemeral SESSION_SECRET in .env/compose

security_audit

firm_rate_limit_check

Detect Funnel without rate limiter → CRITICAL

acp_bridge

acp_session_persist

Persist ACP session to ~/.firm/acp_sessions.json

acp_bridge

acp_session_restore

Restore persisted ACP session by run_id

acp_bridge

acp_session_list_active

List ACP sessions active in last N hours

acp_bridge

fleet_session_inject_env

Inject env vars to spawned sessions (allowlist)

acp_bridge

fleet_cron_schedule

Schedule cron with sandbox enforcement

acp_bridge

firm_workspace_lock

Advisory file lock with owner tracking (fcntl)

acp_bridge

firm_acpx_version_check

ACPX plugin version pin (≥0.1.15) + streaming mode check

3.1

reliability_probe

firm_gateway_probe

WS probe with backoff — detects close 1006, returns launchctl

H6/H7

reliability_probe

firm_doc_sync_check

Detect version drift in docs vs package.json

reliability_probe

firm_channel_audit

Detect zombie channel SDK deps (LINE, Baileys…)

reliability_probe

firm_adr_generate

Generate MADR + commit path for architecture decisions

gateway_hardening

firm_gateway_auth_check

Verify Gateway auth config — CRITICAL if Funnel without password

gateway_hardening

firm_credentials_check

Check Baileys/channel credential integrity and freshness

gateway_hardening

firm_webhook_sig_check

Verify HMAC signing secrets for all inbound webhook channels

gateway_hardening

firm_log_config_check

Detect debug/trace logging and missing redactPatterns

gateway_hardening

firm_workspace_integrity_check

Validate ~/.firm/workspace (AGENTS.md, SOUL.md, staleness)

runtime_audit

firm_node_version_check

Verify Node.js ≥ 22.12.0 (CVE-2025-59466, CVE-2026-21636)

runtime_audit

firm_secrets_workflow_check

Detect hardcoded secrets in config.json (migrate to firm secrets)

runtime_audit

`firm_http_headers_chec

io.github.romainsantoli-web/mcp-openclaw

Install in your client

What io.github.romainsantoli-web/mcp-openclaw does

Test This Server

Why this score

63/100across 5 weighted dimensions

Security

Tools (9)

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.github.romainsantoli-web/mcp-openclaw

Install in your client

What io.github.romainsantoli-web/mcp-openclaw does

Test This Server

firm-mcp-server

Tools (138)

Why this score

63/100across 5 weighted dimensions

Security

Tools (9)

Reviews

Frequently Asked Questions

Similar servers

Discussion

firm-mcp-server

Tools (138)