Mmcp.market

clawops MCP server

by dfridkin·io.github.dfridkin/clawops·v2.0.2

Deploy and manage self-hosted OpenClaw instances across clouds

B74/100grade B
What users say
No reviews yet
Be the first
Safety scan
B74/100

full report

Adoption
Growing

5 stars180 downloads/wk

Reviews

Write one

Nobody has reviewed clawops yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

clawops tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high
  • Code scan90 source files scanned13/25
  • Live reliabilityno gateway calls yet and no remote to proben/a
  • Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/harden-72JMRT4E.js: …c) { const { stdout, code } = await exec(`test -f ${SENTINEL} && echo yes || echo no`); …
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreCBscore 74: Shell command built from a string (injection risk)
  • 2026-09-19downgradeBCscore 66: Shell command built from a string (injection risk); Network call to a raw IP address

Install directly

Runs npx -y @clawops/cli on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add clawops -- npx -y @clawops/cli
Add to Cursor

clawops: common questions

Is clawops MCP server safe?
Mostly: it is graded B (74/100). Read the clawops safety report
How do I install clawops?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does clawops need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is clawops maintained?
The last commit was in the last day (2026-09-19). The latest release is v2.0.2.
What can I use instead of clawops?
Servers from other publishers that do the same job: AppCrane MCP server, Mockzilla MCP server and Flux Cloud MCP server. Compare all clawops alternatives.

Alternatives to clawops

Same job from other publishers: the closest match first, then the best rated.

All clawops alternatives →
  • AppCrane
    Deploy and manage apps on your own AppCrane instance, the self-hosted PaaS for AI-built apps.
    B
  • Mockzilla
    Mock OpenAPI specs locally, or log in to deploy hosted mocks on mockzilla.org from your MCP client.
    C
  • Flux Cloud
    Deploy, pay for and manage apps on Flux Cloud, the decentralized cloud. Prices in USD.
    A
  • The Deployer
    Check if a repo will deploy, plan a deploy to your own cloud, and see status, logs and redeploys.
    A
  • Tiniest Cloud
    Deploy web apps with sign-in, per-user storage, realtime and AI built in.
    A

More from dfridkin