Skip to main content
Glama
Sidarau

clawpanel-mcp

by Sidarau
OverviewSchemaRelated ServersScoreDiscussions
Python
Remote

clawpanel-mcp

Your ClawPanel workspace, as an MCP server. Clients connect from ChatGPT (deep-research compatible), Claude, or any MCP client over OAuth 2.1 — and see only their own workspace: knowledge base, memory, agents, and activity.

This is the client-facing sibling of zme-mcp and the alpha ring of ClawPanel's public API surface.

Tools

Tool

What it does

Scope

search / fetch

ChatGPT-compatible pair over the tenant KB — {results: [{id, title, url}]}, fetch(id) → full text

kb

memory_search

Semantic search over workspace memory

memory

remember

Add a memory item (note, decision, fact)

memory

agents

The workspace's agents (name, model, gateway)

brain

workspace_status

Agents + recent workflow runs + tool activity

brain

chat_history

Recent workspace chat messages

brain

Every tool is tenant-scoped by the OAuth token. The client never passes a tenant id; the server resolves it from the authenticated profile and filters every query server-side.

Related MCP server: production-grade-mcp-agentic-system

How auth works (alpha)

Full OAuth 2.1: DCR, PKCE, authorization codes, refresh, revocation.

  1. ChatGPT/Claude discovers metadata, registers itself (DCR), opens /authorize.

  2. The client signs in with their ClawPanel email + passphrase.

  3. The server resolves email → profiles row → tenant_id and issues a token whose scopes come from server-side profile config — never from the request.

  4. Scopes mirror the mcp_tokens vocabulary: brain, memory, kb, drive.

Rings: alpha (passphrases in env, in-memory sessions) → beta (Supabase auth sessions, persistent grants) → prod (per-profile labels, RLS-enforced direct connections). Token contract is frozen from alpha.

Configuration

Variable

Purpose

CLAWPANEL_DB_URL

Supabase project URL (defaults to the clawpanel_db project)

CLAWPANEL_DB_KEY

service-role JWT. Server-only — it bypasses RLS, so tenant isolation is enforced in code on every query. Auto-resolves from NoxKey zeuglab/clawpanel/CLAWPANEL_DB_SERVICE_ROLE_JWT on macOS.

CLAWPANEL_OAUTH_PROFILES

JSON: {"client@co.com": {"secret": "…", "scopes": ["brain","memory","kb"]}}

CLAWPANEL_BASE_URL

Public URL (for OAuth metadata/redirects)

CLAWPANEL_RING

alpha (default) / beta / prod

NVIDIA_API_KEY

Optional — enables vector arm of hybrid KB search and semantic memory search

Run

uvicorn-grade Docker deploy: see Dockerfile + fly.toml → flyctl deploy
# local:
CLAWPANEL_OAUTH_PROFILES='{...}' clawpanel-mcp --http --port 8080
# → POST /mcp · GET /healthz · OAuth at /.well-known/*

Connect from ChatGPT

Settings → Security and login → Developer mode → on, then chatgpt.com/plugins → + → https://clawpanel-mcp.fly.dev/mcp → sign in with your ClawPanel email + passphrase. Works in deep research (search/fetch make your KB citable).

Verification

scripts/verify_clawpanel.py runs the full OAuth dance for two tenants and asserts tenant isolation (each sees only their own agents/chat, cross-tenant fetch returns nothing), scope gating, and every tool against live data.

This server cannot be installed

F
license - not found
-
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • @1claw/mcp by 1clawAI

    @1claw/mcpofficial

    1clawAI
    A
    license
    A
    quality
    B
    maintenance
    MCP server for secure, just-in-time secret retrieval from 1claw vault and malicious content inspection, enabling AI agents to access secrets and security analysis.
    1
    666
    2
    MIT

  • enterprise-auth-mcp-server

    AiAgentKarl
    A
    license
    A
    quality
    D
    maintenance
    MCP server for enterprise authentication and authorization — JWT validation, OIDC token inspection, OAuth 2.0 introspection, and role-based access control for AI agents.
    8
    MIT

  • identity-aware-mcp-server

    pravin-khandke
    F
    license
    -
    quality
    C
    maintenance
    A production-ready MCP server that authenticates agents via OAuth 2.1 Bearer tokens, validates JWTs with JWKS, enforces tool-level scopes and roles, and logs the full delegation chain.

View all related MCP servers

Related MCP Connectors

  • argo-mcp

    MCP server for Argo RPG Platform — connects AI assistants to campaign data via OAuth2

  • microservices.sh

    MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.

  • cortex-gateway

    Self-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Sidarau/clawpanel-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server