openclaw-mcp

🦞 MCP server for OpenClaw - secure bridge between Claude.ai and your self-hosted OpenClaw assistant with OAuth2 authentication

→ freema/openclaw-mcp · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

github_topic Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 2 critical, 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 2 credentials: MCP_CLIENT_SECRET, OPENCLAW_GATEWAY_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies2 critical2 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@2.0.0GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

criticalvitest@2.0.0GHSA-9crc-q9x8-hgqq

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

high@modelcontextprotocol/sdk@1.0.0GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.0.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

lowtsup@8.0.0GHSA-3mv9-4h5g-vhg3

tsup DOM Clobbering vulnerability

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUTH_ENABLED— true MCP_CLIENT_ID=openclaw MCP_CLIENT_SECRET=your-secret \

configCORS_ORIGINS

configHOST

configMCP_CLIENT_ID— Then in Claude.ai add a custom MCP connector pointing to https://your-domain.com/mcp with =openclaw and your MCP_CLIENT_SECRET.

🔐 secretMCP_CLIENT_SECRET— ${MCP_CLIENT_SECRET}

configMCP_DANGEROUSLY_ALLOW_DCR

configMCP_DANGEROUSLY_ALLOW_DCR_PUBLIC

configMCP_ISSUER_URL— ${MCP_ISSUER_URL:-}

configMCP_REDIRECT_URIS

configOAUTH_ENABLED

🔐 secretOPENCLAW_GATEWAY_TOKEN— ${OPENCLAW_GATEWAY_TOKEN}

configOPENCLAW_INSTANCES

configOPENCLAW_MODEL— "": "openclaw",

configOPENCLAW_TIMEOUT_MS— "": "300000"

configOPENCLAW_URL— "": "http://127.0.0.1:18789",

configPORT

configTRUST_PROXY— 1 (or --trust-proxy 1) — otherwise express-rate-limit rejects the proxy's X-Forwarded-For header and /token crashes with ERR_ERL_UNEXPECTED_X_FORWARDED_FOR.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/freema-openclaw-mcp-17v70p)](https://m8ven.ai/mcp/freema-openclaw-mcp-17v70p)

commit: fc3dbb1c1b129111982b3e409cbf39e7f2db1105

code hash: 5244089d569e133ec942789c11bca28859f83a8339a12410e7f8298782cf80ca

verified: 6/14/2026, 10:35:40 AM

view raw JSON →