ToolRouter

One MCP gateway to 230+ AI tools — SEO, web search, image generation, video, screenshots, security scanning, and more. Auto-provisions on first use with no A...

Security Scan

The skill's instructions broadly match a tool-aggregator but include steps that let the agent fetch and run remote code (npx) and auto-provision accounts/billing without declared credentials — these behaviors are coherent with the stated purpose but raise notable operational and trust risks.

Purpose & Capability

Name/description align with the instructions: the SKILL.md points to a single MCP endpoint and an npm 'toolrouter-mcp' runner that would expose many tools. Modifying the OpenClaw mcpServers config is consistent with adding a gateway MCP integration.

Instruction Scope

Instructions ask the agent/user to add a toolrouter entry to ~/.openclaw/openclaw.json and optionally connect to https://api.toolrouter.com/mcp. They do not request unrelated files or secrets, but they do describe auto-provisioning (account creation and a claim URL for billing) which implies external account creation and potential transmission of identifying/billing information.

Install Mechanism

There is no built-in install spec, but SKILL.md directs use of 'npx -y toolrouter-mcp' which will fetch and execute code from the npm registry at runtime. Running npx executes remote package code and can be high-risk unless the npm package and publisher are verified. The skill does offer a direct remote MCP URL as an alternative, which still routes agent traffic to an external service.

Credentials

The skill declares no environment variables or credentials, which is plausible for a gateway that handles provider credentials server-side. However, the auto-provisioning/billing flow means the service will create an account and later request billing details externally — this is not represented in requires.env and is an operational privacy/billing consideration rather than a missing declared secret.

Persistence & Privilege

always is false (good). The SKILL.md instructs editing the agent's ~/.openclaw/openclaw.json to add the MCP entry — modifying the agent config is expected for MCP integrations, but the skill is marked agent-requested: true and user-invocable: false, which suggests it may be installed or activated by agent logic rather than directly by the user. That combination can lead to the agent autonomously adding a remote-executing entry without an explicit user install action.

What to consider before installing

This skill appears to do what it says (a single gateway to many tools), but it instructs the agent to fetch and run an npm package (npx -y toolrouter-mcp) and to auto-provision an account that will later ask for billing info. Before installing: verify the npm package (owner, weekly downloads, inspect source on npm/GitHub), review the toolrouter.com privacy and billing terms, prefer using the documented remote MCP URL only if you trust the service, and be cautious about letting an agent autonomously modify ~/.openclaw/openclaw.json. If you need stronger assurance, ask the maintainer for the package repository URL and inspect the code yourself (or run the MCP in an isolated environment) before allowing your agent to run it.

ToolRouter gives AI agents access to 230+ tools through a single MCP connection. One integration replaces managing dozens of separate provider accounts and API keys.

Install in OpenClaw

Add to ~/.openclaw/openclaw.json:

{
  "mcpServers": {
    "toolrouter": {
      "command": "npx",
      "args": ["-y", "toolrouter-mcp"]
    }
  }
}

Or paste this into OpenClaw and it sets itself up:

Add ToolRouter MCP server to my OpenClaw config at ~/.openclaw/openclaw.json. Add a "toolrouter" entry under mcpServers with command "npx" and args ["-y", "toolrouter-mcp"]. No API key needed — account auto-provisions on first use.

Restart OpenClaw. All ToolRouter tools will be available.

Remote MCP (no install)

Connect directly without npx:

https://api.toolrouter.com/mcp

How It Works

• Auto-provisions — no API key or account setup needed. On first use it auto-creates an account and prints a claim URL to add billing details.
• 230+ tools — SEO, web search, image generation, video, screenshots, security scanning, company lookup, flight search, social media, financial data, and more.
• One connection — replaces managing separate accounts for dozens of providers.
• Usage-based — free tools work immediately. Paid tools cost fractions of a cent per call.

Discover Tools

discover *              # list all available tools
discover seo            # search by category
discover screenshots    # search by keyword

Example Calls

use_tool("seo", "analyze_page", { url: "https://example.com" })
use_tool("web-search", "search", { query: "latest AI news" })
use_tool("generate-image", "text_to_image", { prompt: "a cat in space" })
use_tool("web-screenshot", "capture", { url: "https://example.com" })
use_tool("company-lookup", "get_company", { domain: "example.com" })

Links

• Website: https://toolrouter.com
• Tools catalog: https://toolrouter.com/tools
• Setup guide: https://toolrouter.com/connect
• npm: https://www.npmjs.com/package/toolrouter-mcp