Xiaozhi Mcp Server

让小智智能盒子连接OpenClaw，成为你的智能语音助手

Security Scan

Files and runtime instructions match the stated purpose (bridging the Xiaozhi device to OpenClaw), but the start script auto-installs Python packages globally and there are a few minor inconsistencies you should review before running.

Purpose & Capability

The code implements an HTTP /mcp endpoint, a WebSocket /ws endpoint, token generation under ~/.config/openclaw-mcp/token, and a run_agent tool that calls the local 'openclaw agent' CLI — all consistent with a MCP server that forwards Xiaozhi voice input to OpenClaw. Minor incoherence: package.json lists Python packages under npm-style dependencies and the project expects a system 'openclaw' CLI which is not declared in metadata.

Instruction Scope

SKILL.md only instructs running scripts/start.sh and configuring the device; actual start.sh will create config.yaml if missing, interactively prompt for target_session, auto-generate a token file, and may install Python deps. The runtime server reads/writes files under the user's home (~/.config/openclaw-mcp) and runs the 'openclaw' CLI — these are within scope for this integration but are not fully documented in SKILL.md.

Install Mechanism

There is no formal install spec in registry metadata (instruction-only), but scripts/start.sh can auto-install Python packages using pip3 with --break-system-packages (global install). That modifies the host Python environment without isolating dependencies (no virtualenv). The script also queries an external service (ifconfig.me) to determine public IP and prints it; contacting that external endpoint on start is a modest privacy/operational concern.

Credentials

The skill does not declare required credentials or config paths beyond its own ~/.config/openclaw-mcp token and a local config.yaml. The code uses an optional environment variable XIAOZHI_MCP_PORT to override the port; this is proportional. No unrelated third-party credentials are requested.

Persistence & Privilege

always is false and the skill does not request elevated platform privileges. It writes state under the user's config directory (~/.config/openclaw-mcp) and creates PID/log files in /tmp — behavior consistent with a userland service. It does not modify other skills or system-wide agent settings.

Assessment

This skill appears to do what it says (bridge Xiaozhi to OpenClaw), but review a few things before installing: 1) inspect scripts/start.sh — it may auto-install Python packages globally using pip3 --break-system-packages; consider running inside a virtualenv or container instead. 2) ensure you trust and have the 'openclaw' CLI installed (server.py calls 'openclaw agent'); otherwise the service will fail. 3) start.sh contacts ifconfig.me to fetch a public IP at startup (no data exfiltration visible, but it's an external network call). 4) check the generated token file at ~/.config/openclaw-mcp/token and the target_session setting to avoid accidentally delivering replies to the wrong account. 5) the package.json metadata is slightly inconsistent (lists Python deps), which looks like sloppy packaging but not necessarily malicious. If you need higher assurance, ask the author for a packaged install or run the server in an isolated environment and audit runtime behavior (network endpoints, spawned processes).

让小智智能盒子连接OpenClaw，成为你的智能语音助手。

一句话说明

安装后，小智说的话会传给OpenClaw处理，小智再把结果念给你听。

功能

• 小智语音 → OpenClaw处理 → 语音播报结果
• 支持各种任务：查天气、写文档、搜信息...
• 异步处理，长任务不超时

安装

clawhub install xiaozhi-mcp-server

使用

1. 启动服务

./scripts/start.sh

2. 获取连接码

cat ~/.config/openclaw-mcp/token

3. 小智配置

1. 瞄小智启动后，跟瞄小智说：微信绑定 ，这时候会出现绑定二维码，微信扫码，绑定 瞄小智服务号

2. 在瞄小智服务号的配置界面填入：

• 服务器地址：你的服务器IP
• 连接码：刚才获取的token
• 端口：28765

3. 完成！现在对小智说话，欧克劳（OpenClaw）会帮你处理。

示例对话

你对小智说	OpenClaw(欧克劳)回复
"问下欧克劳，那边今天天气怎么样"	"北京今天晴，气温11度"
"告诉欧克劳帮我写个会议纪要"	"会议纪要已写好，请查看"
"欧克劳，查一下快递"	"您的快递正在派送中"

配置

编辑 config.yaml：

• port：端口号（默认28765）
• target_session：OpenClaw会话地址

文件

xiaozhi-mcp-server/
├── SKILL.md
├── README.md
├── config.yaml
├── package.json
└── scripts/
    ├── server.py
    ├── start.sh
    └── stop.sh

作者

无敌哥@瞄小智

许可证

MIT