MCP OpenClaw Extensions
A 138-tool Python MCP server built for multi-agent operations across the Firm Gateway ecosystem. Bridges VS Code Copilot agents to distributed gateway fleets with parallel health checks, broadcast config sync, and session state management. Security tooling scans for SQL injection patterns, detects sandbox bypasses, and audits webhook HMAC signatures. Memory features include Hebbian weight updates from session logs with co-activation analysis. Exports agent deliverables as GitHub PRs, Jira tickets, Linear issues, or Slack digests. Also handles n8n workflow import/export, pgvector memory verification, and agent team DAG orchestration. Reach for this when running persistent AI agent infrastructure that needs fleet coordination, hardened credential management, and cross-system delivery pipelines.
- tools
- 80
- transport
- STDIO
- last updated
- Mar 3, 2026
Tools
80 toolsPublic tool metadata for what this MCP can expose to an agent.
vs_context_pushPush VS Code context → Firm session
Push VS Code context → Firm session
No parameter schema in public metadata yet.
vs_context_pullPull Firm session state → VS Code
Pull Firm session state → VS Code
No parameter schema in public metadata yet.
vs_session_linkAssociate workspace path ↔ session ID
Associate workspace path ↔ session ID
No parameter schema in public metadata yet.
vs_session_statusBridge health check
Bridge health check
No parameter schema in public metadata yet.
firm_gateway_fleet_statusParallel health-check all instances
Parallel health-check all instances
No parameter schema in public metadata yet.
firm_gateway_fleet_addRegister a Gateway instance
Register a Gateway instance
No parameter schema in public metadata yet.
firm_gateway_fleet_removeRemove a Gateway instance
Remove a Gateway instance
No parameter schema in public metadata yet.
firm_gateway_fleet_broadcastBroadcast to all instances
Broadcast to all instances
No parameter schema in public metadata yet.
firm_gateway_fleet_syncSync config+skills to all instances
Sync config+skills to all instances
No parameter schema in public metadata yet.
firm_gateway_fleet_listList instances
List instances
No parameter schema in public metadata yet.
firm_export_github_prCreate draft PR on GitHub
Create draft PR on GitHub
No parameter schema in public metadata yet.
firm_export_jira_ticketCreate Jira ticket (ADF)
Create Jira ticket (ADF)
No parameter schema in public metadata yet.
firm_export_linear_issueCreate Linear issue (GraphQL)
Create Linear issue (GraphQL)
No parameter schema in public metadata yet.
firm_export_slack_digestPost Slack digest (Block Kit)
Post Slack digest (Block Kit)
No parameter schema in public metadata yet.
firm_export_documentWrite local Markdown deliverable
Write local Markdown deliverable
No parameter schema in public metadata yet.
firm_export_autoAuto-route by `delivery_format`
Auto-route by `delivery_format`
No parameter schema in public metadata yet.
firm_security_scanScan files for SQL injection + XSS patterns
Scan files for SQL injection + XSS patterns
No parameter schema in public metadata yet.
firm_sandbox_auditDetect `sandbox.mode: off` → CRITICAL
Detect `sandbox.mode: off` → CRITICAL
No parameter schema in public metadata yet.
firm_session_config_checkDetect ephemeral SESSION_SECRET in .env/compose
Detect ephemeral SESSION_SECRET in .env/compose
No parameter schema in public metadata yet.
firm_rate_limit_checkDetect Funnel without rate limiter → CRITICAL
Detect Funnel without rate limiter → CRITICAL
No parameter schema in public metadata yet.
acp_session_persistPersist ACP session to `~/.firm/acp_sessions.json`
Persist ACP session to `~/.firm/acp_sessions.json`
No parameter schema in public metadata yet.
acp_session_restoreRestore persisted ACP session by run_id
Restore persisted ACP session by run_id
No parameter schema in public metadata yet.
acp_session_list_activeList ACP sessions active in last N hours
List ACP sessions active in last N hours
No parameter schema in public metadata yet.
fleet_session_inject_envInject env vars to spawned sessions (allowlist)
Inject env vars to spawned sessions (allowlist)
No parameter schema in public metadata yet.
fleet_cron_scheduleSchedule cron with sandbox enforcement
Schedule cron with sandbox enforcement
No parameter schema in public metadata yet.
firm_workspace_lockAdvisory file lock with owner tracking (`fcntl`)
Advisory file lock with owner tracking (`fcntl`)
No parameter schema in public metadata yet.
firm_acpx_version_checkACPX plugin version pin (≥0.1.15) + streaming mode check
ACPX plugin version pin (≥0.1.15) + streaming mode check
No parameter schema in public metadata yet.
firm_gateway_probeWS probe with backoff — detects close 1006, returns `launchctl`
WS probe with backoff — detects close 1006, returns `launchctl`
No parameter schema in public metadata yet.
firm_doc_sync_checkDetect version drift in docs vs package.json
Detect version drift in docs vs package.json
No parameter schema in public metadata yet.
firm_channel_auditDetect zombie channel SDK deps (LINE, Baileys…)
Detect zombie channel SDK deps (LINE, Baileys…)
No parameter schema in public metadata yet.
firm_adr_generateGenerate MADR + commit path for architecture decisions
Generate MADR + commit path for architecture decisions
No parameter schema in public metadata yet.
firm_gateway_auth_checkVerify Gateway auth config — CRITICAL if Funnel without password
Verify Gateway auth config — CRITICAL if Funnel without password
No parameter schema in public metadata yet.
firm_credentials_checkCheck Baileys/channel credential integrity and freshness
Check Baileys/channel credential integrity and freshness
No parameter schema in public metadata yet.
firm_webhook_sig_checkVerify HMAC signing secrets for all inbound webhook channels
Verify HMAC signing secrets for all inbound webhook channels
No parameter schema in public metadata yet.
firm_log_config_checkDetect debug/trace logging and missing redactPatterns
Detect debug/trace logging and missing redactPatterns
No parameter schema in public metadata yet.
firm_workspace_integrity_checkValidate ~/.firm/workspace (AGENTS.md, SOUL.md, staleness)
Validate ~/.firm/workspace (AGENTS.md, SOUL.md, staleness)
No parameter schema in public metadata yet.
firm_node_version_checkVerify Node.js ≥ 22.12.0 (CVE-2025-59466, CVE-2026-21636)
Verify Node.js ≥ 22.12.0 (CVE-2025-59466, CVE-2026-21636)
No parameter schema in public metadata yet.
firm_secrets_workflow_checkDetect hardcoded secrets in config.json (migrate to `firm secrets`)
Detect hardcoded secrets in config.json (migrate to `firm secrets`)
No parameter schema in public metadata yet.
firm_http_headers_checkVerify HTTP security headers (HSTS, X-Content-Type-Options, Referrer-Policy)
Verify HTTP security headers (HSTS, X-Content-Type-Options, Referrer-Policy)
No parameter schema in public metadata yet.
firm_nodes_commands_checkDetect dangerous gateway.nodes.allowCommands override
Detect dangerous gateway.nodes.allowCommands override
No parameter schema in public metadata yet.
firm_trusted_proxy_checkVerify trusted-proxy config coherence (bind + trustedProxies + auth mode)
Verify trusted-proxy config coherence (bind + trustedProxies + auth mode)
No parameter schema in public metadata yet.
firm_session_disk_budget_checkVerify session.maintenance.maxDiskBytes / highWaterBytes configured
Verify session.maintenance.maxDiskBytes / highWaterBytes configured
No parameter schema in public metadata yet.
firm_dm_allowlist_checkDetect dmPolicy=allowlist with empty allowFrom (fail-closed) across 9 channels
Detect dmPolicy=allowlist with empty allowFrom (fail-closed) across 9 channels
No parameter schema in public metadata yet.
firm_secrets_lifecycle_checkVerify External Secrets lifecycle (audit/configure/apply/reload)
Verify External Secrets lifecycle (audit/configure/apply/reload)
No parameter schema in public metadata yet.
firm_channel_auth_canon_checkVerify channel auth path canonicalization (encoded traversal)
Verify channel auth path canonicalization (encoded traversal)
No parameter schema in public metadata yet.
firm_exec_approval_freeze_checkVerify exec approval plan immutability (symlink cwd rebind)
Verify exec approval plan immutability (symlink cwd rebind)
No parameter schema in public metadata yet.
firm_hook_session_routing_checkVerify hook session-key routing hardening
Verify hook session-key routing hardening
No parameter schema in public metadata yet.
firm_config_include_checkVerify $include hardlink escape + file-size guardrails
Verify $include hardlink escape + file-size guardrails
No parameter schema in public metadata yet.
firm_config_prototype_checkDetect prototype pollution (__proto__, constructor, prototype) in config
Detect prototype pollution (__proto__, constructor, prototype) in config
No parameter schema in public metadata yet.
firm_safe_bins_profile_checkVerify safeBins entries have explicit profiles
Verify safeBins entries have explicit profiles
No parameter schema in public metadata yet.
firm_group_policy_default_checkVerify group policy default is fail-closed (allowlist)
Verify group policy default is fail-closed (allowlist)
No parameter schema in public metadata yet.
firm_shell_env_checkVerify shell env sanitization (LD_PRELOAD, DYLD_*, ZDOTDIR)
Verify shell env sanitization (LD_PRELOAD, DYLD_*, ZDOTDIR)
No parameter schema in public metadata yet.
firm_plugin_integrity_checkVerify plugin install integrity/pin + drift detection
Verify plugin install integrity/pin + drift detection
No parameter schema in public metadata yet.
firm_token_separation_checkVerify hooks.token ≠ gateway.auth.token
Verify hooks.token ≠ gateway.auth.token
No parameter schema in public metadata yet.
firm_otel_redaction_checkVerify OTEL secret redaction in diagnostics export
Verify OTEL secret redaction in diagnostics export
No parameter schema in public metadata yet.
firm_rpc_rate_limit_checkVerify control-plane RPC rate limiting config
Verify control-plane RPC rate limiting config
No parameter schema in public metadata yet.
firm_observability_pipelineIngest JSONL traces into SQLite for offline analysis
Ingest JSONL traces into SQLite for offline analysis
No parameter schema in public metadata yet.
firm_ci_pipeline_checkValidate CI workflow completeness (lint, test, secrets)
Validate CI workflow completeness (lint, test, secrets)
No parameter schema in public metadata yet.
firm_pgvector_memory_checkVerify pgvector config (HNSW index, dimensions, distance metrics)
Verify pgvector config (HNSW index, dimensions, distance metrics)
No parameter schema in public metadata yet.
firm_knowledge_graph_checkAudit knowledge graph integrity (orphan nodes, cycles, TTL)
Audit knowledge graph integrity (orphan nodes, cycles, TTL)
No parameter schema in public metadata yet.
firm_agent_team_orchestrateTask DAG execution with topological sort + parallel layers
Task DAG execution with topological sort + parallel layers
No parameter schema in public metadata yet.
firm_agent_team_statusCheck orchestration status by ID or list all
Check orchestration status by ID or list all
No parameter schema in public metadata yet.
firm_i18n_auditScan locale files for missing keys, empty values, interpolation mismatches
Scan locale files for missing keys, empty values, interpolation mismatches
No parameter schema in public metadata yet.
firm_skill_lazy_loaderLazy-load SKILL.md metadata (YAML front-matter, 5min cache)
Lazy-load SKILL.md metadata (YAML front-matter, 5min cache)
No parameter schema in public metadata yet.
firm_skill_searchKeyword/tag search across cached skills with relevance scoring
Keyword/tag search across cached skills with relevance scoring
No parameter schema in public metadata yet.
firm_n8n_workflow_exportExport agent pipeline as n8n-compatible workflow JSON
Export agent pipeline as n8n-compatible workflow JSON
No parameter schema in public metadata yet.
firm_n8n_workflow_importValidate & import n8n workflow JSON into workspace
Validate & import n8n workflow JSON into workspace
No parameter schema in public metadata yet.
firm_browser_context_checkValidate Playwright/Puppeteer headless config for agents
Validate Playwright/Puppeteer headless config for agents
No parameter schema in public metadata yet.
firm_hebbian_harvestIngest JSONL session logs → SQLite (PII stripped) — CDC §4.1
Ingest JSONL session logs → SQLite (PII stripped) — CDC §4.1
No parameter schema in public metadata yet.
firm_hebbian_weight_updateCompute/apply Hebbian weight updates on Layer 2 — CDC §4.3
Compute/apply Hebbian weight updates on Layer 2 — CDC §4.3
No parameter schema in public metadata yet.
firm_hebbian_analyzeCo-activation pattern analysis (Jaccard similarity) — CDC §4.3
Co-activation pattern analysis (Jaccard similarity) — CDC §4.3
No parameter schema in public metadata yet.
firm_hebbian_statusDashboard: weights, atrophy, promotions — CDC §7
Dashboard: weights, atrophy, promotions — CDC §7
No parameter schema in public metadata yet.
firm_hebbian_layer_validateValidate 4-layer Claude.md structure — CDC §3.3
Validate 4-layer Claude.md structure — CDC §3.3
No parameter schema in public metadata yet.
firm_hebbian_pii_checkAudit PII stripping config — CDC §5.2
Audit PII stripping config — CDC §5.2
No parameter schema in public metadata yet.
firm_hebbian_decay_config_checkValidate learning rate, decay, thresholds — CDC §4.3
Validate learning rate, decay, thresholds — CDC §4.3
No parameter schema in public metadata yet.
firm_hebbian_drift_checkCosine similarity drift detection vs baseline — CDC §5.1
Cosine similarity drift detection vs baseline — CDC §5.1
No parameter schema in public metadata yet.
firm_a2a_card_generateGenerate agent-card.json from SOUL.md (RC v1.0)
Generate agent-card.json from SOUL.md (RC v1.0)
No parameter schema in public metadata yet.
firm_a2a_card_validateValidate A2A Agent Card against RC v1.0 spec
Validate A2A Agent Card against RC v1.0 spec
No parameter schema in public metadata yet.
firm_a2a_task_sendSend message/task to an A2A agent (SendMessage)
Send message/task to an A2A agent (SendMessage)
No parameter schema in public metadata yet.
firm_a2a_task_statusGet task status or list tasks (RC v1.0)
Get task status or list tasks (RC v1.0)
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
firm-mcp-server
Python MCP server (port 8012) that bridges VS Code Copilot agents to the [Firm](https://github.com/the server) Gateway ecosystem. Companion to setup-vs-agent-firm.
Tools (138)
Details
- Repository
- github.com/romainsantoli-web/mcp-openclaw
- Categories
- AI & LLM Tools, Security & Pentesting
- Package
mcp-openclaw-extensions- Transport
- STDIO
- Registry
- MCP registry, active
More from romainsantoli-web
Related AI & LLM Tools MCP servers
View all
knowmindschubeler-consulting/knowmindAI agent memory & knowledge graph, hosted in Germany (GDPR). Recall, relations, store via MCP.0stars
Contextateleengco/contexta-mcpPersistent memory and knowledge graph for AI assistants — keyword + vector + graph search.0stars
Skillsindexthomasblc/skillsindex-mcpSearch and score 11,000+ AI agent tools: MCP servers, Claude skills, GPT actions, IDE plugins.0stars
Memoryoracletooloracle/memoryoracleMemoryOracle - 10 agent memory tools: vector store, recall, summarization, redaction.0stars