MCP.Market

Clawhub MCP server

by AIWerk·io.github.AIWerk/mcp-server-clawhub·v0.1.4

ClawHub.ai skill catalog: search, browse, inspect, and download skills (token unlocks publish).

B75/100grade B
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

0 stars53 downloads/wk

Reviews

Write one

Nobody has reviewed Clawhub yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Clawhub tools (14, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • clawhub_deletewrite action

    Soft-delete a skill. Requires CLAWHUB_TOKEN. Required: slug, confirm (must be true). Reversible via clawhub_undelete.

  • clawhub_download

    Download a skill as a zip archive. Required: slug. Optional: version or tag (defaults to latest). Response includes base64-encoded zip bytes and size.

  • clawhub_get_file

    Fetch a single raw file from a skill package. Required: slug, path. Optional: version or tag (defaults to latest). Returns the file as text.

  • clawhub_get_moderation

    Get moderation details (verdict, reasonCodes, evidence) for a skill. Required: slug.

  • clawhub_get_scan

    Get the security scan result for a skill version. Required: slug. Optional: version or tag (defaults to latest).

  • clawhub_get_skill

    Get full details of a skill by slug (includes latestVersion, owner, moderation). Required: slug.

  • clawhub_get_version

    Get a specific version of a skill, including files and security snapshot. Required: slug, version.

  • clawhub_list_skills

    List skills in the catalog with cursor pagination. Optional: limit, cursor (from previous response.nextCursor), nonSuspiciousOnly.

  • clawhub_list_versions

    List all versions of a skill. Required: slug. Optional: limit, cursor.

  • clawhub_publishwrite action

    Publish a new skill version. Requires CLAWHUB_TOKEN. Required: slug, displayName, version, files (array of { path, content, encoding? }). Optional: changelog, tags, forkOf.

  • clawhub_resolve

    Resolve a version of a skill by content hash. Returns the matching version (if any) and the latest version for comparison. Required: slug, hash.

  • clawhub_search

    Search skills in the ClawHub.ai catalog. Required: q (search query). Optional: limit, highlightedOnly, nonSuspiciousOnly.

  • clawhub_undelete

    Restore a soft-deleted skill. Requires CLAWHUB_TOKEN. Required: slug.

  • clawhub_whoami

    Return the authenticated user (handle, displayName, image). Requires CLAWHUB_TOKEN.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan6 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 47 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Clawhub compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 3,472 Web search servers
Tools
14
the typical Web search server has 5
Tools that change things
14%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
53
more than 39% of 816 Web search servers with a package

What its tools let an agent do: 12 read · 2 change

Install Clawhub in Claude Code, Cursor or VS Code

Runs npx -y @aiwerk/mcp-server-clawhub on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server-clawhub -- npx -y @aiwerk/mcp-server-clawhub
Add to Cursor

What the publisher says

From the Clawhub repository's README, as published. We do not edit it. Read it on GitHub

@aiwerk/mcp-server-clawhub

MCP server for the ClawHub.ai skill catalog.

Browse, search, inspect, download, and (when authenticated) publish skills from the ClawHub registry through the Model Context Protocol.

Two modes

The server adapts to whether a token is configured:

The authenticated tools are simply not registered in anonymous mode — tools/list will not advertise them.

Install

Two ways to run this server — pick the one that fits.

Option 1 — Hosted (zero setup)

No local runtime — if you set a token, it's AES-256-GCM encrypted server-side via HashiCorp Vault.

  1. Sign up at aiwerkmcp.com.
  2. Install ClawHub from the catalog. Leave CLAWHUB_TOKEN empty for anonymous mode (10 read-only tools), or paste a token to unlock all 14.
  3. Point your MCP client (Claude.ai, Cursor, Hermes, …) at your hosted endpoint:
https://bridge.aiwerk.ch/u/<your-user-id>/mcp

with your Bearer token.

Option 2 — Self-hosted (npx)

Run directly — you manage the token:

npx -y @aiwerk/mcp-server-clawhub

Or in your MCP client config:

{
  "mcpServers": {
    "clawhub": {
      "command": "npx",
      "args": ["-y", "@aiwerk/mcp-server-clawhub"],
      "env": {
        "CLAWHUB_TOKEN": "optional - unlocks publish/delete/whoami"
      }
    }
  }
}

Tools

Read-only (anonymous + authenticated)

Discovery caveat: the live /skills endpoint applies a default server-side filter that may

return an empty items[] for ungated browsing. In practice, prefer clawhubsearch** — it's the

reliable entry point for finding skills by keyword. Use clawhublistskills with cursor pagination

only when you have a specific filter in mind (e.g. nonSuspiciousOnly=true). The highlightedOnly

flag is available on clawhubsearch but not on clawhublist_skills.

Wire shapes worth knowing

Some live API responses differ from the published OpenAPI spec. The types in src/types.ts follow the real wire shape:

not missing. For the always-present verdict, read .moderation from clawhubgetskill.

  • clawhublistskills → { items: [...], nextCursor } (not skills)
  • clawhublistversions → { items: [...], nextCursor } (not versions)
  • clawhubgetmoderation → { moderation: { verdict, ... } } (wrapped)
  • clawhub_whoami → { user: { handle, ... } } (wrapped)
  • clawhubgetmoderation returns 404 for skills with no moderation events — this means clean,

Authenticated only (CLAWHUB_TOKEN required)

Environment

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Clawhub: common questions

Is Clawhub MCP server safe?
Mostly: it is graded B (75/100). Read the Clawhub safety report
How do I install Clawhub?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Clawhub need an API key?
Yes. The registry entry asks for CLAWHUB_TOKEN.
Is Clawhub maintained?
The last commit was 84 days ago (2026-08-10). The latest release is v0.1.4.
What can I use instead of Clawhub?
Servers from other publishers that do the same job: Alza MCP server, Qaskills MCP server and ENCODE Toolkit MCP server.
How does Clawhub compare with other Web search MCP servers?
safety score 75/100 (higher than 45% of 3,472 Web search servers); tools 14 (the typical Web search server has 5); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Clawhub

Same job from other publishers: the closest match first, then the best rated.

  • Alza
    Unofficial MCP server for Alza.cz: catalog search plus token-guarded account and checkout.
    B
  • Qaskills
    Search, inspect, and install 400+ QA testing skills from qaskills.sh into any MCP client.
    A
  • ENCODE Toolkit
    20 MCP tools + 48 skills for ENCODE Project genomics — search, download, pipelines
    A
  • Arxiv
    Search arXiv papers, download full text, semantic search, citation graphs, and alerts via MCP.
    A
  • Claude Code Explorer MCP
    Explore the Claude Code CLI source — browse tools, commands, search code, and more.
    A

More from AIWerk →