Install source points to URL shortener or raw IP.
Warn
- Code
- suspicious.install_untrusted_source
- Location
- openclaw.plugin.json:12
- Evidence
"default": "http://127.0.0.1:12306/mcp",
Security audit
MCP Client Plugin
Security checks across malware telemetry and agentic risk
Overview
This plugin appears to do what it claims—connect OpenClaw to a configured MCP server—but that server can define tools and receive tool-call arguments, so it should be trusted.
This looks like a coherent MCP bridge. Install it only if you intend OpenClaw to use tools from an MCP server, and configure it to a trusted endpoint because that server can define available tools and receive the data sent in tool calls.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
Detected: suspicious.install_untrusted_source