Openclaw Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Openclaw Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Claude Code MCP server that lets you talk to your OpenClaw bot through Matrix.
Claude Code (your terminal)
└── MCP server (this package)
└── Matrix API
└── Your shared Matrix room
└── OpenClaw bot reads and repliesClaude Code gets two tools:
@yourclaude:matrix.org on Element)npm install -g openclaw-mcpOr clone and build:
git clone https://github.com/elkimek/openclaw-mcp.git
cd openclaw-mcp
npm install && npm run buildRun the setup script — it prompts for your credentials, verifies them, and writes the MCP config to ~/.claude/settings.json automatically:
openclaw-mcp-setupIf installed from source:
node dist/setup.jsYou'll need:
@zofka:matrix.org)The script validates your token and room access before writing the config.
After setup, restart Claude Code to activate the MCP server.
If you prefer to configure manually, add to ~/.claude/settings.json:
{
"mcpServers": {
"openclaw": {
"command": "openclaw-mcp",
"env": {
"OPENCLAW_MATRIX_TOKEN": "your-matrix-access-token",
"OPENCLAW_MATRIX_ROOM": "!roomid:matrix.org",
"OPENCLAW_BOT_USER_ID": "@yourbot:matrix.org"
}
}
}
}| Variable | Required | Description |
|---|---|---|
OPENCLAW_MATRIX_TOKEN | Yes | Matrix access token for the Claude Code account |
OPENCLAW_MATRIX_ROOM | Yes | Matrix room ID (e.g. !abc123:matrix.org) |
OPENCLAW_BOT_USER_ID | Yes | Your OpenClaw bot's Matrix user ID (e.g. @zofka:matrix.org) |
OPENCLAW_MATRIX_HOMESERVER | No | Matrix homeserver URL (default: https://matrix.org) |
Once configured, just talk naturally in Claude Code:
"Ask my OpenClaw bot what my vitamin D levels are" "Message Žofka about my latest lab results" "Read the last messages from my bot"
This MCP server uses the Matrix HTTP API directly without E2E encryption support. For encrypted rooms, use matrix-e2ee-bridge instead.
GPL-3.0
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.