Back to MCP Trust Indexm8ven
74
/ 100
2 days ago
glama

openclaw-control-mcp

Operate the OpenClaw gateway's full management surface from any MCP client — list and trigger crons, inspect sessions, configure agents and channels, manage skills and secrets, pair devices, and more via 134 typed tools.

→ smurfy92/openclaw-control-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: OPENCLAW_DEVICE_PRIVATE_KEY, OPENCLAW_DEVICE_TOKEN, OPENCLAW_GATEWAY_PASSWORD, OPENCLAW_GATEWAY_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.0.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highws@8.18.3GHSA-96hv-2xvq-fx4p

ws: Memory exhaustion DoS from tiny fragments and data chunks

lowws@8.18.3GHSA-58qx-3vcg-4xpx

ws: Uninitialized memory disclosure

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configOPENCLAW_CLAW_HOME— OPENCLAW_CONTROL_HOME optional Override the directory used to persist store.json (defaults to ${XDG_CONFIG_HOME:-~/.config}/openclaw-control-mcp/). The legacy is still read as a fallback.
configOPENCLAW_CONTROL_HOME— optional Override the directory used to persist store.json (defaults to ${XDG_CONFIG_HOME:-~/.config}/openclaw-control-mcp/). The legacy OPENCLAW_CLAW_HOME is still read as a fallback.
configOPENCLAW_DEBUG— optional Set to 1 to log every WS frame to stderr
🔐 secretOPENCLAW_DEVICE_PRIVATE_KEY
configOPENCLAW_DEVICE_ROLE
configOPENCLAW_DEVICE_SCOPES
🔐 secretOPENCLAW_DEVICE_TOKEN
🔐 secretOPENCLAW_GATEWAY_PASSWORD— optional Extra password (some gateway configs require it)
🔐 secretOPENCLAW_GATEWAY_TOKEN— "": "<your-token>",
configOPENCLAW_GATEWAY_URL— "": "wss://your-gateway.example.com",
configOPENCLAW_HTTP— optional Set to 1 to expose the MCP over Streamable HTTP at /mcp instead of stdio. Equivalent to passing --http.
configOPENCLAW_MOCK— Set =1 (or pass --mock) to swap the WebSocket client for an in-memory mock. Useful for:
configOPENCLAW_TIMEOUT_MS— "": "30000"
configOPENCLAW_USE_KEYCHAIN
configXDG_CONFIG_HOME— OPENCLAW_CONTROL_HOME optional Override the directory used to persist store.json (defaults to ${:-~/.config}/openclaw-control-mcp/). The legacy OPENCLAW_CLAW_HOME is still read as a fallback.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/smurfy92-openclaw-control-mcp-ipq1vq)](https://m8ven.ai/mcp/smurfy92-openclaw-control-mcp-ipq1vq)
commit: 57a87aa913f50b21ae2d13d9880a2f6d7af7b44b
code hash: cdb4d5daef281a2006454a7ba74b4c58d221e2dd4092eb5736dd7d554d992c1c
verified: 7/29/2026, 9:31:45 AM
view raw JSON →