Clawhub MCP server
ClawHub.ai skill catalog: search, browse, inspect, and download skills (token unlocks publish).
0 stars53 downloads/wk
Reviews
Write oneNobody has reviewed Clawhub yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Clawhub tools (14, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
clawhub_deletewrite actionSoft-delete a skill. Requires CLAWHUB_TOKEN. Required: slug, confirm (must be true). Reversible via clawhub_undelete.
clawhub_downloadDownload a skill as a zip archive. Required: slug. Optional: version or tag (defaults to latest). Response includes base64-encoded zip bytes and size.
clawhub_get_fileFetch a single raw file from a skill package. Required: slug, path. Optional: version or tag (defaults to latest). Returns the file as text.
clawhub_get_moderationGet moderation details (verdict, reasonCodes, evidence) for a skill. Required: slug.
clawhub_get_scanGet the security scan result for a skill version. Required: slug. Optional: version or tag (defaults to latest).
clawhub_get_skillGet full details of a skill by slug (includes latestVersion, owner, moderation). Required: slug.
clawhub_get_versionGet a specific version of a skill, including files and security snapshot. Required: slug, version.
clawhub_list_skillsList skills in the catalog with cursor pagination. Optional: limit, cursor (from previous response.nextCursor), nonSuspiciousOnly.
clawhub_list_versionsList all versions of a skill. Required: slug. Optional: limit, cursor.
clawhub_publishwrite actionPublish a new skill version. Requires CLAWHUB_TOKEN. Required: slug, displayName, version, files (array of { path, content, encoding? }). Optional: changelog, tags, forkOf.
clawhub_resolveResolve a version of a skill by content hash. Returns the matching version (if any) and the latest version for comparison. Required: slug, hash.
clawhub_searchSearch skills in the ClawHub.ai catalog. Required: q (search query). Optional: limit, highlightedOnly, nonSuspiciousOnly.
clawhub_undeleteRestore a soft-deleted skill. Requires CLAWHUB_TOKEN. Required: slug.
clawhub_whoamiReturn the authenticated user (handle, displayName, image). Requires CLAWHUB_TOKEN.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 47 days ago12/15
- Maintainer identityregistry namespace matches repository owner6/10
How Clawhub compares
Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 3,472 Web search servers
- Tools
- 14
- the typical Web search server has 5
- Tools that change things
- 14%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 53
- more than 39% of 816 Web search servers with a package
What its tools let an agent do: 12 read · 2 change
Install Clawhub in Claude Code, Cursor or VS Code
Runs npx -y @aiwerk/mcp-server-clawhub on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-server-clawhub -- npx -y @aiwerk/mcp-server-clawhub
What the publisher says
From the Clawhub repository's README, as published. We do not edit it. Read it on GitHub
@aiwerk/mcp-server-clawhub
MCP server for the ClawHub.ai skill catalog.
Browse, search, inspect, download, and (when authenticated) publish skills from the ClawHub registry through the Model Context Protocol.
Two modes
The server adapts to whether a token is configured:
The authenticated tools are simply not registered in anonymous mode — tools/list will not advertise them.
Install
Two ways to run this server — pick the one that fits.
Option 1 — Hosted (zero setup)
No local runtime — if you set a token, it's AES-256-GCM encrypted server-side via HashiCorp Vault.
- Sign up at aiwerkmcp.com.
- Install ClawHub from the catalog. Leave CLAWHUB_TOKEN empty for anonymous mode (10 read-only tools), or paste a token to unlock all 14.
- Point your MCP client (Claude.ai, Cursor, Hermes, …) at your hosted endpoint:
https://bridge.aiwerk.ch/u/<your-user-id>/mcpwith your Bearer token.
Option 2 — Self-hosted (npx)
Run directly — you manage the token:
npx -y @aiwerk/mcp-server-clawhubOr in your MCP client config:
{
"mcpServers": {
"clawhub": {
"command": "npx",
"args": ["-y", "@aiwerk/mcp-server-clawhub"],
"env": {
"CLAWHUB_TOKEN": "optional - unlocks publish/delete/whoami"
}
}
}
}Tools
Read-only (anonymous + authenticated)
Discovery caveat: the live /skills endpoint applies a default server-side filter that may
return an empty items[] for ungated browsing. In practice, prefer clawhubsearch** — it's the
reliable entry point for finding skills by keyword. Use clawhublistskills with cursor pagination
only when you have a specific filter in mind (e.g. nonSuspiciousOnly=true). The highlightedOnly
flag is available on clawhubsearch but not on clawhublist_skills.
Wire shapes worth knowing
Some live API responses differ from the published OpenAPI spec. The types in src/types.ts follow the real wire shape:
not missing. For the always-present verdict, read .moderation from clawhubgetskill.
- clawhublistskills → { items: [...], nextCursor } (not skills)
- clawhublistversions → { items: [...], nextCursor } (not versions)
- clawhubgetmoderation → { moderation: { verdict, ... } } (wrapped)
- clawhub_whoami → { user: { handle, ... } } (wrapped)
- clawhubgetmoderation returns 404 for skills with no moderation events — this means clean,
Authenticated only (CLAWHUB_TOKEN required)
Environment
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Clawhub: common questions
- Is Clawhub MCP server safe?
- Mostly: it is graded B (75/100). Read the Clawhub safety report
- How do I install Clawhub?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Clawhub need an API key?
- Yes. The registry entry asks for
CLAWHUB_TOKEN. - Is Clawhub maintained?
- The last commit was 84 days ago (2026-08-10). The latest release is v0.1.4.
- What can I use instead of Clawhub?
- Servers from other publishers that do the same job: Alza MCP server, Qaskills MCP server and ENCODE Toolkit MCP server.
- How does Clawhub compare with other Web search MCP servers?
- safety score 75/100 (higher than 45% of 3,472 Web search servers); tools 14 (the typical Web search server has 5); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Clawhub
Same job from other publishers: the closest match first, then the best rated.
- AlzaUnofficial MCP server for Alza.cz: catalog search plus token-guarded account and checkout.not reviewedEstablishedB
- QaskillsSearch, inspect, and install 400+ QA testing skills from qaskills.sh into any MCP client.not reviewedEstablishedA
- ENCODE Toolkit20 MCP tools + 48 skills for ENCODE Project genomics — search, download, pipelinesnot reviewedGrowingA
- ArxivSearch arXiv papers, download full text, semantic search, citation graphs, and alerts via MCP.not reviewedWidely usedA
- Claude Code Explorer MCPExplore the Claude Code CLI source — browse tools, commands, search code, and more.not reviewedEstablishedA