Mcp Server Clawhub — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server Clawhub (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for the ClawHub.ai skill catalog.
Browse, search, inspect, download, and (when authenticated) publish skills from the ClawHub registry through the Model Context Protocol.
The server adapts to whether a token is configured:
| Mode | Trigger | Available tools |
|---|---|---|
| anonymous | CLAWHUB_TOKEN unset | 10 read-only tools (search, list, get, scan, moderation, file, resolve, download) |
| authenticated | CLAWHUB_TOKEN set | All 14 tools (adds whoami, publish, delete, undelete) |
The authenticated tools are simply not registered in anonymous mode — tools/list will not advertise them.
Two ways to run this server — pick the one that fits.
No local runtime — if you set a token, it's AES-256-GCM encrypted server-side via HashiCorp Vault.
CLAWHUB_TOKEN empty for anonymous mode (10 read-only tools), or paste a token to unlock all 14. https://bridge.aiwerk.ch/u/<your-user-id>/mcpwith your Bearer token.
Run directly — you manage the token:
npx -y @aiwerk/mcp-server-clawhubOr in your MCP client config:
{
"mcpServers": {
"clawhub": {
"command": "npx",
"args": ["-y", "@aiwerk/mcp-server-clawhub"],
"env": {
"CLAWHUB_TOKEN": "optional - unlocks publish/delete/whoami"
}
}
}
}| Tool | Description |
|---|---|
clawhub_search | Search skills by query string — primary discovery path |
clawhub_list_skills | List skills with cursor pagination (see caveat below) |
clawhub_get_skill | Full details for a skill slug |
clawhub_list_versions | List all versions of a skill |
clawhub_get_version | Get a specific version (files + security snapshot) |
clawhub_get_scan | Security scan result for a version |
clawhub_get_moderation | Moderation verdict and evidence (response wraps under moderation) |
clawhub_get_file | Fetch a single raw file from a skill |
clawhub_resolve | Resolve version by content hash |
clawhub_download | Download skill zip (base64 encoded) |
Discovery caveat: the live/skillsendpoint applies a default server-side filter that may return an emptyitems[]for ungated browsing. In practice, prefer `clawhub_search` — it's the reliable entry point for finding skills by keyword. Useclawhub_list_skillswith cursor pagination only when you have a specific filter in mind (e.g.nonSuspiciousOnly=true). ThehighlightedOnlyflag is available onclawhub_searchbut not onclawhub_list_skills.
Some live API responses differ from the published OpenAPI spec. The types in src/types.ts follow the real wire shape:
clawhub_list_skills → { items: [...], nextCursor } (not skills)clawhub_list_versions → { items: [...], nextCursor } (not versions)clawhub_get_moderation → { moderation: { verdict, ... } } (wrapped)clawhub_whoami → { user: { handle, ... } } (wrapped)clawhub_get_moderation returns 404 for skills with no moderation events — this means clean,not missing. For the always-present verdict, read .moderation from clawhub_get_skill.
| Tool | Description |
|---|---|
clawhub_whoami | Current user (handle, displayName, image) |
clawhub_publish | Publish a new skill version |
clawhub_delete | Soft-delete a skill (reversible) |
clawhub_undelete | Restore a soft-deleted skill |
| Variable | Required | Purpose |
|---|---|---|
CLAWHUB_TOKEN | no | Bearer token issued by clawhub.ai. Unlocks auth-only tools and raises rate limits (120/min → 600/min for reads). |
CLAWHUB_BASE_URL | no | Override the API base URL. Defaults to https://clawhub.ai/api/v1. |
npm install
npm run build
npm testPart of the [AIWerk MCP platform](https://aiwerkmcp.com) — curated, signed MCP recipes served either as npm packages for self-hosting or through our multi-tenant hosted bridge (bridge.aiwerk.ch).
Other AIWerk MCP servers:
Browse the full catalog (20+ recipes including GitHub, Linear, Notion, Stripe, …) at aiwerkmcp.com.
MIT © AIWerk
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.