io.github.smurfy92/openclaw-control-mcp
NPM · OPENCLAW-CONTROL-MCP
MCP server bridging Claude Code to the OpenClaw gateway management plane via JSON-RPC.
Available components
Last scanned (10 hours ago)
Scores higher than 91% of npm servers
Category AI and Machine Learning
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to smurfy92/openclaw-control-mcp). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 29 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability71
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 19869 tokens (~138/item across 143 items; 143 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage93
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 80% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 19 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "openclaw_device_pair_remove" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 143 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 0
- Stability: 0.97 → pass security
- 2 Nov 26 0
- Stability: pass → 0.97 functional
- 27 Oct 26 0
- Stability: 0.97 → pass security
- 26 Oct 26 0
- Stability: pass → 0.97 functional
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 20 Oct 26 0
- Stability: 0.97 → pass security
- 19 Oct 26 0
- Stability: pass → 0.97 functional
- 17 Oct 26 +2
- Stability: 0.87 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/openclaw-control-mcp@0.8.3
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | smurfy92/openclaw-control-mcp |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/smurfy92/openclaw-control-mcp/.github/workflows/publish.yml@refs/tags/v0.8.3 |
| Rekor log index | 3112137474 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:b69f201cbb6356015950366360ed8e5ff577ba333f757dc8d78e0d0ceaabeb2363bc78c015a3f1e4841fbc0a08702be1623c872e8da1fdea587b98280 |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 95 packages
| Packages resolved | 95 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
openclaw_exec_approval_list ~117
List pending and recent exec approvals (commands the agent wants to run that need a human OK). Wraps `exec.approval.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| limit | integer | – | – |
| status | string | – | – |
No output schema declared.
No examples provided.
openclaw_exec_approval_request ~97
Submit a new exec approval request (programmatic; normally agents do this themselves). Wraps `exec.approval.request`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_exec_approval_resolve ~141
Resolve (approve / reject) a pending exec approval. Wraps `exec.approval.resolve`. Mutates — the agent will proceed (or not) based on this decision.
| Name | Type | Req | Description |
|---|---|---|---|
| approved | boolean | – | – |
| decision | string | – | – |
| id | string | yes | Exec approval request id |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| reason | string | – | – |
No output schema declared.
No examples provided.
openclaw_exec_approval_waitDecision ~123
Block until an exec approval gets a decision (or timeout). Wraps `exec.approval.waitDecision`. Long-running — bounded by the request timeout.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Exec approval request id |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| timeoutMs | integer | – | – |
No output schema declared.
No examples provided.
openclaw_exec_approvals_get ~99
Get the global exec approvals policy (auto-allow rules, defaults). Wraps `exec.approvals.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_exec_approvals_node_get ~106
Get the per-node exec approvals policy override. Wraps `exec.approvals.node.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_exec_approvals_node_set ~107
Set the exec approvals policy for a specific node. Wraps `exec.approvals.node.set`. Destructive.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_exec_approvals_set ~100
Set / replace the global exec approvals policy. Wraps `exec.approvals.set`. Destructive — overwrites the existing policy.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_gateway_identity_get ~96
Get the gateway's own identity (id, version, owner, region). Wraps `gateway.identity.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_health ~117
Combined health probe — server-side `health` JSON-RPC plus client-side metadata (MCP version, device pairing state, gateway URL, last successful call). Read-only. Use this for a one-shot 'is everything OK?' check.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_introspect ~163
Inspect the OpenClaw gateway capabilities. Triggers a connect (if not already), returns the server version, this device's role/scopes, the full list of JSON-RPC `methods` and `events` the gateway publishes, and a coverage report comparing those methods to the typed wrappers this MCP exposes. Use to discover what methods you can call via `openclaw_call` and to spot endpoints that still need a typed wrapper after a gateway upgrade.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_last_heartbeat ~94
Get the last heartbeat info (latest tick processed by the gateway). Wraps `last-heartbeat`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_logs_tail ~301
Tail recent gateway logs. Wraps `logs.tail`. Read-only. The gateway only forwards `limit` to the wire; `sinceMs`, `level`, and `component` are applied client-side AFTER fetch (verified live: the gateway rejects them with `unexpected property` against 2026.4.12+). For wide tails, raise `limit` and the client filters on the way back. Use this for debug — e.g. tracing why a cron job failed, why a session aborted, or what an agent emitted.
| Name | Type | Req | Description |
|---|---|---|---|
| component | string | – | Client-side filter: keep entries whose message text contains this substring (case-insensitive). Useful for narrowing to a subsystem (e.g. 'discord', 'cron', 'gateway/ws'). |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| level | string | – | Client-side filter on `_meta.logLevelName` (case-insensitive). Common values: 'INFO', 'WARN', 'ERROR'. |
| limit | integer | – | Forwarded to the gateway. Number of lines to fetch before client-side filtering. |
| sinceMs | integer | – | Client-side filter: keep entries with `_meta.date` >= sinceMs (epoch ms). |
No output schema declared.
No examples provided.
openclaw_message_action ~127
Trigger a message-level action (e.g. retry, mark-as-handled, attach to a session). Wraps `message.action`. Mutates gateway state.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Action name |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| messageId | string | – | – |
| sessionId | string | – | – |
No output schema declared.
No examples provided.
openclaw_models_list ~102
List models available to the gateway (Anthropic, OpenAI, etc.) with their IDs and any provider metadata. Wraps `models.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_canvas_capability_refresh ~100
Refresh the canvas capability map for nodes (re-registers what each canvas node can do). Wraps `node.canvas.capability.refresh`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_describe ~104
Describe a specific node — capabilities, host, version, last heartbeat. Wraps `node.describe`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_node_event ~105
Emit an event toward a node (or the gateway-side node bus). Wraps `node.event`.
| Name | Type | Req | Description |
|---|---|---|---|
| event | string | yes | – |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | – | – |
No output schema declared.
No examples provided.
openclaw_node_invoke ~141
Invoke a method on a specific node (RPC routed through the gateway). Wraps `node.invoke`. Mutates depending on the target method.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| method | string | yes | – |
| nodeId | string | yes | – |
| params | – | – | JSON-RPC params — opaque passthrough to the target node method. Shape depends on the method being invoked. |
No output schema declared.
No examples provided.
openclaw_node_invoke_result ~100
Fetch the result of a previously-issued node invocation. Wraps `node.invoke.result`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| invocationId | string | yes | – |
No output schema declared.
No examples provided.
openclaw_node_list ~95
List nodes registered with this gateway (worker / canvas / sub-gateway nodes). Wraps `node.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pair_approve ~105
Approve a pending node pairing request. Wraps `node.pair.approve`. Mutates — node gains gateway access.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| requestId | string | yes | – |
No output schema declared.
No examples provided.
openclaw_node_pair_list ~91
List node pairing requests (pending and resolved). Wraps `node.pair.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pair_reject ~95
Reject a pending node pairing request. Wraps `node.pair.reject`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| requestId | string | yes | – |
No output schema declared.
No examples provided.
openclaw_node_pair_request ~86
Request pairing for a new node. Wraps `node.pair.request`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pair_verify ~85
Verify a node pairing handshake. Wraps `node.pair.verify`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_node_pending_ack ~107
Acknowledge / commit completion of a pending work item. Wraps `node.pending.ack`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| itemId | string | – | – |
| nodeId | string | yes | – |
No output schema declared.
No examples provided.
openclaw_node_pending_drain ~110
Drain (clear) all pending work items for a node. Wraps `node.pending.drain`. Destructive — discards queued work.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_node_pending_enqueue ~99
Enqueue a new work item for a node. Wraps `node.pending.enqueue`. Mutates.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | – |
No output schema declared.
No examples provided.
openclaw_node_pending_pull ~112
Pull pending work items destined for a node (queue drain). Wraps `node.pending.pull`. Read-and-mutate (work items leave the pending queue).
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| nodeId | string | yes | Node id |
No output schema declared.
No examples provided.
openclaw_node_rename ~112
Rename a node (display name / id). Wraps `node.rename`. Mutates.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| name | string | – | – |
| newName | string | – | – |
| nodeId | string | yes | – |
No output schema declared.
No examples provided.
openclaw_plugin_approval_list ~110
List pending and recent plugin approval requests (a skill / plugin asking for permission to do X). Wraps `plugin.approval.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| status | string | – | – |
No output schema declared.
No examples provided.
openclaw_plugin_approval_request ~90
Submit a plugin approval request (programmatic). Wraps `plugin.approval.request`.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_plugin_approval_resolve ~120
Resolve a pending plugin approval (approve / reject). Wraps `plugin.approval.resolve`. Mutates.
| Name | Type | Req | Description |
|---|---|---|---|
| approved | boolean | – | – |
| decision | string | – | – |
| id | string | yes | Plugin approval request id |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_plugin_approval_waitDecision ~114
Block until a plugin approval gets a decision. Wraps `plugin.approval.waitDecision`. Long-running.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Plugin approval request id |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| timeoutMs | integer | – | – |
No output schema declared.
No examples provided.
openclaw_secrets_reload ~107
Reload the gateway's secret store from disk. Wraps `secrets.reload`. Use after editing the secrets file out-of-band so the gateway picks up new values without a restart.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_secrets_resolve ~188
Resolve a command-scoped secret. Wraps `secrets.resolve`. Wire format (verified live against gateway 2026.4.12+): `{ commandName: string }` — the gateway secrets subsystem is COMMAND-scoped, not arbitrary key/value. SENSITIVE — returns secret material; only use for debugging missing/wrong-values issues. For arbitrary API keys consumed by skills, use `openclaw_secrets_set` (which writes to the config tree, not the command-scoped secret store).
| Name | Type | Req | Description |
|---|---|---|---|
| commandName | string | yes | Command name whose secret to resolve. |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_secrets_set ~285
Store an arbitrary secret (API key, third-party token, etc.) in the gateway's config tree where skills can consume it. Internally calls `config.patch` with a `mergePath` so the value lands at `config.<scope>.<name>`. Default scope is `secrets` (creates `config.secrets.<name>`); override with `scope` for skill-scoped secrets like `tools.linkedin-outreach.proxycurlApiKey`. Note: this writes to the CONFIG tree, not the gateway's `secrets.resolve` command-scoped store (which has no public write API). After this call, restart-free — the next agent run sees the updated config.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| name | string | yes | Secret name (e.g. 'PROXYCURL_API_KEY', 'OPENAI_API_KEY'). |
| scope | string | – | Dotted config path to nest under. Default 'secrets' creates config.secrets.<name>. Use e.g. 'tools.linkedin-outreach' for skill-scoped secrets. |
| value | string | yes | Secret value. |
No output schema declared.
No examples provided.
openclaw_send ~194
Channel-routed `send` — pushes a message via the gateway's delivery layer. Wire format (verified live against gateway 2026.4.12+): requires `to` (channel-specific recipient) + `idempotencyKey` (auto-generated if omitted). Prefer the typed `openclaw_chat_send` or `openclaw_sessions_send` when you want session context.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotencyKey | string | – | Unique key to dedupe retries. Auto-generated UUID if omitted. |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| to | string | yes | Channel-specific recipient (e.g. Telegram chat id, Discord channel id, email address). |
No output schema declared.
No examples provided.
openclaw_sessions_abort ~173
Abort the in-flight agent turn for a session (cancels the current LLM call / tool loop). Wraps `sessions.abort`. Destructive — interrupts running work.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_compact ~168
Trigger a compaction of a session's history (creates a new compaction snapshot, keeps the session live). Wraps `sessions.compact`.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_branch ~160
Create a NEW session that starts from a previous compaction snapshot of an existing session. Wraps `sessions.compaction.branch`. Use this when you want to explore an alternative continuation without losing the current session state.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Compaction snapshot id to branch from. |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| sessionId | string | – | Source session id, when the snapshot id is ambiguous. |
| title | string | – | Title for the new branched session. |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_get ~143
Fetch a specific compaction snapshot by id. Wraps `sessions.compaction.get`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Compaction snapshot id (NOT the session id — get this from openclaw_sessions_compaction_list). |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| sessionId | string | – | Optional session id, helps disambiguate when the snapshot id is shared across sessions. |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_list ~159
List compaction snapshots for a session. Wraps `sessions.compaction.list`. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_compaction_restore ~143
Restore a session to a previous compaction snapshot. Wraps `sessions.compaction.restore`. Destructive — overwrites current session state with the snapshot. The current state is lost unless you branched first.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Compaction snapshot id. |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| sessionId | string | – | Optional session id; required when the snapshot id is ambiguous. |
No output schema declared.
No examples provided.
openclaw_sessions_create ~150
Create a new agent session. Wraps `sessions.create`. The default agent id is typically 'main'. Pass an optional `title` to set the human-readable label shown in the Control panel.
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | – | Agent id (e.g. 'main'). Defaults to the gateway's default agent if omitted. |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| title | string | – | Human-readable title shown in the Control panel. |
No output schema declared.
No examples provided.
openclaw_sessions_delete ~156
Delete a session permanently. Wraps `sessions.delete`. Destructive — confirm before calling.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_list ~285
List active OpenClaw agentic sessions. Wraps `sessions.list`. Each session has both a `sessionId` (UUID) and a `key` (composite, e.g. 'agent:main:main', 'agent:main:cron:<id>', 'agent:main:telegram:group:<chat-id>', 'agent:main:subagent:<uuid>'). Use to find a session before preview/patch/abort/compact/reset. The `status` filter is applied client-side after fetch (verified live: the gateway itself rejects a `status` param with `unexpected property 'status'` against 2026.4.12+).
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | – | Filter by agent id (e.g. 'main') — forwarded to the gateway. |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
| limit | integer | – | – |
| offset | integer | – | – |
| status | string | – | Client-side filter on session.status. Observed values: 'running', 'done', 'error', 'aborted', 'timeout'. Applied after fetch — does not reduce wire traffic. |
No output schema declared.
No examples provided.
openclaw_sessions_messages_subscribe ~174
Subscribe to streaming session messages (session.message events). Wraps `sessions.messages.subscribe`. Note: MCP stdio cannot stream events to Claude Code — server-side subscription only.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
openclaw_sessions_messages_unsubscribe ~154
Unsubscribe from session message stream. Wraps `sessions.messages.unsubscribe`.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Session id. Most session.* methods accept the `sessionId` (UUID); a few accept the composite `key` (e.g. 'agent:main:cron:<id>'). When unsure, try the UUID first; if rejected with NOT_FOUND, retry wi… |
| instance | string | – | Optional OpenClaw instance to route this call to (e.g. 'default', 'work'). Falls back to the active default instance, or the OPENCLAW_GATEWAY_URL/TOKEN env vars when set. List configured instances wi… |
No output schema declared.
No examples provided.
How do I install the io.github.smurfy92/openclaw-control-mcp server?
io.github.smurfy92/openclaw-control-mcp runs locally as an npm package, launched with npx -y openclaw-control-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · openclaw-control-mcp
claude mcp add smurfy92-openclaw-control-mcp -- npx -y openclaw-control-mcp
What is the io.github.smurfy92/openclaw-control-mcp server?
io.github.smurfy92/openclaw-control-mcp is listed in the public MCP registry as io.github.smurfy92/openclaw-control-mcp. MCP server bridging Claude Code to the OpenClaw gateway management plane via JSON-RPC. This page covers its npm package (openclaw-control-mcp).
Is the io.github.smurfy92/openclaw-control-mcp server safe to use?
io.github.smurfy92/openclaw-control-mcp scores 87 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.smurfy92/openclaw-control-mcp server expose?
io.github.smurfy92/openclaw-control-mcp exposes 143 tools: openclaw_setup, openclaw_setup_show, openclaw_setup_list, openclaw_setup_select_default, openclaw_setup_clear, and 138 more. Their descriptions and schemas cost roughly 19,869 tokens of context every time the server is loaded.
Is the io.github.smurfy92/openclaw-control-mcp server still maintained?
io.github.smurfy92/openclaw-control-mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.smurfy92/openclaw-control-mcp server under?
io.github.smurfy92/openclaw-control-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.