INWX

INWX domain registrar management: domain registration, availability check, DNS records, nameservers, DNSSEC, pricing, transfers.

Security Scan

The skill's code, manifest, and instructions are consistent with an INWX registrar integration that requires INWX account credentials; nothing in the package indicates unexplained or disproportionate access.

Purpose & Capability

Name, description, manifest, SKILL.md and source files all align: this is an INWX (DomRobot) client exposing read/write domain and DNS operations. The required credentials (username/password and optional otpSecret) are appropriate and declared in openclaw.plugin.json. No unrelated services, binaries, or credentials are requested.

Instruction Scope

SKILL.md and README instruct npm installation and configuring an INWX account, using an OTE sandbox for tests, and describe explicit tools (23 ops). Runtime instructions and code only call the INWX API (via domrobot-client) and accept injected ISPConfig toolsets for optional orchestration; there are no instructions to read arbitrary system files or exfiltrate data to unexpected endpoints.

Install Mechanism

Registry lists no install spec (instruction-only at platform level) but the package contains a package.json and SKILL.md instructs npm install @elvatis_com/openclaw-inwx. That will pull the domrobot-client dependency from the npm registry. This is expected for a Node plugin but means code will be fetched from npm at install time — review the npm package/source if you require an audited dependency chain.

Credentials

The plugin asks for an INWX username/password and optional otpSecret via its config manifest (openclaw.plugin.json) — these are proportional to registrar operations. The repository's OTE tests reference environment variables for convenience (INWX_OTE_USERNAME, INWX_OTE_PASSWORD, INWX_OTE_OTP) but those are only for running tests and are not required by the plugin at runtime. No unrelated secrets or broad environment access are requested.

Persistence & Privilege

The skill is not marked always:true and uses the normal model-invocation flow. It does not attempt to modify other skills or global agent settings. The provisioning helper will call injected external toolsets (e.g., isp_provision_site) — this is by design and requires the caller to supply those toolsets.

Assessment

This plugin appears to do exactly what it says: it talks to the INWX API and exposes read and write domain/DNS operations. Before installing and supplying credentials: 1) Only provide an INWX account username/password (and optional 2FA secret) you trust the plugin to use — consider using a dedicated test account or OTE sandbox for initial testing. 2) Use readOnly=true or allowedOperations to limit write capabilities when you only need queries. 3) Installing via npm will pull domrobot-client from the npm registry; if you require strict supply-chain assurance, review the published npm package and its dependencies. 4) If you call provisionDomainWithHosting, note it will invoke whatever ISPConfig toolset you supply — ensure that toolset is trustworthy. If you want additional assurance, run the included unit tests and (safely) the OTE integration tests in an isolated environment first.

openclaw-inwx

OpenClaw plugin for INWX (InterNetworX) domain registrar automation.

It provides 23 tools for domain lifecycle operations, DNS management, DNSSEC, contact handling, WHOIS, and account checks.

Features

• INWX DomRobot JSON-RPC integration via domrobot-client
• Environment switch: production or ote
• Optional 2FA login support (otpSecret)
• Safety controls:
  • readOnly blocks all write tools
  • allowedOperations allowlist for tool-level policy
• TypeScript strict mode

Installation

npm install @elvatis_com/openclaw-inwx

For local development:

npm install
npm run build
npm test

INWX Account Setup

1. Create or use your INWX account.
2. Enable API access in INWX account settings.
3. If 2FA is enabled, provide a shared secret via otpSecret.
4. For safe testing, use OTE environment (ote.inwx.com).

Plugin Config

{
  "username": "your-inwx-user",
  "password": "your-inwx-password",
  "otpSecret": "optional-2fa-secret",
  "environment": "ote",
  "readOnly": false,
  "allowedOperations": []
}

Tool List

Read Tools

1. inwx_domain_check
   • INWX method: domain.check
   • Params: domain (string)
2. inwx_domain_list
   • INWX method: domain.list
   • Params: optional filters (object)
3. inwx_domain_info
   • INWX method: domain.info
   • Params: domain (string)
4. inwx_domain_pricing
   • INWX method: domain.check
   • Params: domain (string) or domains (string[])
5. inwx_nameserver_list
   • INWX method: nameserver.list or domain.info
   • Params: optional domain
6. inwx_dns_record_list
   • INWX method: nameserver.info
   • Params: domain (string)
7. inwx_dnssec_list
   • INWX method: dnssec.info
   • Params: optional filters
8. inwx_contact_list
   • INWX method: contact.list
   • Params: optional filters
9. inwx_whois
   • INWX method: domain.whois
   • Params: domain (string)
10. inwx_account_info
    • INWX method: account.info
    • Params: none

Write Tools

11. inwx_domain_register
    • INWX method: domain.create
    • Params: domain, period, contacts, ns
12. inwx_domain_update
    • INWX method: domain.update
    • Params: method payload
13. inwx_domain_delete
    • INWX method: domain.delete
    • Params: method payload
14. inwx_domain_transfer
    • INWX method: domain.transfer
    • Params: method payload
15. inwx_domain_renew
    • INWX method: domain.renew
    • Params: method payload
16. inwx_nameserver_set
    • INWX method: domain.update
    • Params: domain, ns (string[])
17. inwx_dns_record_add
    • INWX method: nameserver.createRecord
    • Params: method payload
18. inwx_dns_record_update
    • INWX method: nameserver.updateRecord
    • Params: method payload
19. inwx_dns_record_delete
    • INWX method: nameserver.deleteRecord
    • Params: method payload
20. inwx_dnssec_enable
    • INWX method: dnssec.create
    • Params: method payload
21. inwx_dnssec_disable
    • INWX method: dnssec.delete
    • Params: method payload
22. inwx_contact_create
    • INWX method: contact.create
    • Params: method payload
23. inwx_contact_update
    • INWX method: contact.update
    • Params: method payload

OTE Test Environment

Set:

{ "environment": "ote" }

This points the client to INWX OTE API endpoint and allows free integration testing without production costs.

Integration with openclaw-ispconfig

This plugin exports provisionDomainWithHosting() for end-to-end domain-to-hosting provisioning. It orchestrates both plugins without a hard dependency:

1. Domain check - inwx_domain_check
2. Domain register - inwx_domain_register (skipped if taken or skipRegistration=true)
3. Nameserver set - inwx_nameserver_set
4. Hosting provision - isp_provision_site (site, DNS zone, mail, database)

import { buildToolset, provisionDomainWithHosting } from "@elvatis_com/openclaw-inwx";
import ispPlugin from "@elvatis_com/openclaw-ispconfig";

const result = await provisionDomainWithHosting(
  buildToolset(inwxConfig),
  ispPlugin.buildToolset(ispConfig),
  { domain: "example.com", nameservers: ["ns1.host.de"], serverIp: "1.2.3.4", clientName: "Acme", clientEmail: "[e-mail]" },
);

Safety

• readOnly=true allows only:
  • domain check/list/info/pricing
  • nameserver list
  • dns record list
  • dnssec list
  • contact list
  • whois
  • account info
• allowedOperations can restrict to explicit tool names.

Notes

• No live tests are included in this repository.
• Unit tests use mocks only.