Registry

modelcontextprotocol/github-mcp

Provides GitHub repository access, issues, PRs, and code search capabilities through the Model Context Protocol

modelcontextprotocol/postgres-mcp

Provides PostgreSQL database access for queries, schema inspection, and data operations

community/authentication-best-practices

Enforce secure authentication patterns: password hashing, session management, MFA support, and token handling

community/authorization-access-control

Enforce proper authorization checks, role-based access control, and principle of least privilege

community/command-injection-prevention

Prevent OS command injection and code injection by avoiding shell execution with user input

community/consistent-naming

Enforce consistent naming conventions across the codebase for variables, functions, classes, and files

community/cryptography-best-practices

Use cryptography correctly: strong algorithms, proper key management, and secure random number generation

community/general-code-review

A lightweight checklist for consistent code reviews: readability, tests, and security

community/input-validation

Always validate and sanitize user input at system boundaries to prevent injection attacks

community/no-n-plus-one

Detect and prevent N+1 query patterns in database access code

community/no-secrets-in-code

Prevent hardcoded secrets, API keys, tokens, and passwords from being committed to the codebase

community/secure-api-design

Design APIs securely with rate limiting, proper CORS, request validation, and protection against common API attacks

community/secure-dependencies

Manage third-party dependencies securely: pin versions, audit for vulnerabilities, and minimize attack surface

community/secure-error-handling

Handle errors securely without leaking stack traces, internal paths, or system information to users

community/secure-file-handling

Handle file uploads, downloads, and path operations securely to prevent path traversal and malicious uploads

community/secure-logging

Log security events properly without leaking sensitive data like passwords, tokens, or PII

community/sql-injection-prevention

Prevent SQL injection by enforcing parameterized queries and banning string concatenation in database operations

community/xss-prevention

Prevent cross-site scripting by enforcing output encoding, CSP headers, and safe DOM manipulation

openclaw/1password

Access 1Password vault items and secrets

openclaw/apple-notes

Manage Apple Notes — create, search, list, and organize notes

openclaw/apple-reminders

Manage Apple Reminders — create, complete, and list reminders

openclaw/bear-notes

Manage Bear notes — create, search, tag, and organize

openclaw/blogwatcher

Monitor blogs and RSS feeds for new content

openclaw/bluebubbles

Send and receive iMessages via BlueBubbles server

openclaw/blucli

Control Bluetooth devices from the command line

openclaw/camsnap

Capture photos and screenshots from camera

openclaw/canvas

Create visual diagrams and drawings

openclaw/clawhub

Browse and install OpenClaw skills from the hub

openclaw/coding-agent

Autonomous coding agent for complex development tasks

openclaw/discord

Send and manage Discord messages and channels

openclaw/eightctl

Control Eight Sleep smart mattress

openclaw/gemini

Interact with Google Gemini AI models

openclaw/gifgrep

Search and find GIFs

openclaw/github

Interact with GitHub repositories, PRs, and workflows

openclaw/gh-issues

Manage GitHub issues — create, list, comment, close

openclaw/goplaces

Search and navigate places using maps

openclaw/gog

Search and browse GOG.com game library

openclaw/healthcheck

Monitor service health and uptime

openclaw/himalaya

CLI email client — read, send, and manage emails

openclaw/imsg

Send and read iMessages on macOS

openclaw/mcporter

Port and convert MCP servers

openclaw/model-usage

Track and display AI model token usage

openclaw/nano-banana-pro

Run local AI inference on Banana Pro hardware

openclaw/nano-pdf

Process and analyze PDF documents with AI

openclaw/node-connect

Connect to and manage Node.js processes

openclaw/notion

Interact with Notion pages, databases, and workspaces

openclaw/obsidian

Manage Obsidian vault — create, search, and link notes

openclaw/openai-image-gen

Generate images using OpenAI DALL-E API

openclaw/openai-whisper-api

Transcribe audio using OpenAI Whisper API

openclaw/openai-whisper

Transcribe audio using local OpenAI Whisper model

openclaw/openhue

Control Philips Hue smart lights

openclaw/oracle

Query and interact with Oracle databases

openclaw/ordercli

Track packages and delivery orders

openclaw/peekaboo

Screen capture and screenshot utility

openclaw/sag

Search and grep across multiple sources

openclaw/session-logs

View and manage AI session logs

openclaw/sherpa-onnx-tts

Text-to-speech using Sherpa ONNX models

openclaw/skill-creator

Create new OpenClaw skills with proper structure

openclaw/slack

Send and manage Slack messages, channels, and threads

openclaw/songsee

Identify songs playing nearby using audio recognition

openclaw/sonoscli

Control Sonos speakers — play, pause, volume

openclaw/spotify-player

Control Spotify playback — play, pause, search, queue

openclaw/summarize

Summarize text, articles, and documents

openclaw/things-mac

Manage Things 3 tasks on macOS — create, complete, organize

openclaw/tmux

Manage tmux sessions, windows, and panes

openclaw/trello

Manage Trello boards, lists, and cards

openclaw/video-frames

Extract frames from video files

openclaw/voice-call

Make voice calls and manage call sessions

openclaw/weather

Get weather forecasts and current conditions

openclaw/wacli

WhatsApp messaging from the command line

openclaw/xurl

Extract and manage URLs from text

anthropics/api-endpoint-scaffolder

Scaffolds REST API endpoints with route handler, validation, error handling, and tests. Detects framework automatically.

community/capability-permission-auditor

Audits registry entries for least-privilege tool permissions, risky commands, secret exposure, and publish-blocking capability risks.

anthropics/git-commit-reviewer

Reviews staged git changes and provides feedback on code quality, potential bugs, and security issues before committing

blader/humanizer

Remove signs of AI-generated writing from text, making it sound natural and human-written

community/mcp-security-reviewer

Reviews MCP server registry entries for command safety, env secret handling, transport choices, tool scope, and data exfiltration risk.

anthropics/react-component-generator

Generates production-ready React components with TypeScript, Tailwind CSS, accessibility, and test scaffolding

community/secure-code-review

Security-focused code review that checks for injection, auth flaws, crypto misuse, data exposure, and insecure patterns

community/security-audit

Comprehensive security audit of a codebase covering OWASP Top 10, secrets exposure, dependency vulnerabilities, and configuration issues

community/threat-model

Generate STRIDE-based threat models from codebase analysis, identifying assets, trust boundaries, threats, and mitigations

community/auto-test-runner

Automatically runs relevant tests when files are modified, with intelligent test detection

community/lint-on-save

Automatically runs ESLint on saved files to catch issues immediately

community/pre-commit-check

Runs TypeScript type checking before each commit to catch type errors early

community/secure-development

Complete secure development preset bundling OWASP-aligned security rules, agents, and audit/review skills for any language