openclaw-mcp
openclaw-mcp (Hardened Fork)
Hardened fork of freema/openclaw-mcp — Model Context Protocol server for OpenClaw AI assistant integration with Claude Code.
Security Hardening
Configurable model: Uses
OPENCLAW_MODELenv var (default:default) instead of hardcoded modelLocalhost-only by default: SSE host defaults to
127.0.0.1instead of0.0.0.0Rate limiting: Max 60 requests/min by default (configurable via
RATE_LIMIT_PER_MIN)Input validation: All tool inputs validated for type, length, and control characters
Path traversal protection: Memory tools reject
..in paths
Available Tools
Core Tools
Tool | Description |
| Send a message to OpenClaw and get a response |
| Get OpenClaw gateway status and health |
| Send a message asynchronously (returns task ID) |
| Check async task status |
| List all tasks |
| Cancel a running task |
Extended Tools (New)
Tool | Description |
| Send messages on Telegram or WhatsApp |
| Read a workspace memory file |
| Write to a workspace memory file |
| Send urgent alerts to Gabriel on Telegram |
| Spawn an OpenClaw sub-agent |
| Search the web via OpenClaw |
Configuration
Environment Variables
Variable | Default | Description |
|
| OpenClaw gateway URL |
| — | Bearer token for gateway auth |
|
| Model to use for chat completions |
|
| Max tool calls per minute |
|
| SSE server bind host |
|
| SSE server port |
Claude Code Configuration (.claude.json)
{
"mcpServers": {
"openclaw": {
"command": "node",
"args": ["path/to/openclaw-mcp/dist/index.js"],
"env": {
"OPENCLAW_URL": "http://127.0.0.1:18789",
"OPENCLAW_GATEWAY_TOKEN": "your-gateway-token-here",
"OPENCLAW_MODEL": "default"
}
}
}
}Install & Run
npm install
npm run build
npm start # stdio mode (default)
npm start -- -t sse # SSE modeDevelopment
npm run dev # watch mode
npm run typecheck # type checking
npm test # run tests
npm run check:all # lint + typecheck + test + buildLicense
MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/GabrielBertoli/openclaw-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server