QVeris
Run a task
OpenClaw MCP GuideOpenClaw MCP 指南

Best MCP Servers for OpenClaw: Data and Tool AccessOpenClaw 最佳 MCP Server:数据与工具接入指南

Compare MCP servers for OpenClaw by capability fit, permissions, data quality, setup effort, and production reliability.

从能力匹配、权限、数据质量、配置成本和生产可靠性,对比适合 OpenClaw 的 MCP Server。

OpenClaw agent hub connected through permission gates to web, documents, repositories, browser, database, files, memory, and location data
Treat each MCP server as a capability boundary, not as a collectible integration.每个 MCP Server 都是一条能力与权限边界,而不是越多越好的插件收藏。

The short answer: install for outcomes, not coverage快速结论:按结果安装,不追求覆盖数量

For most OpenClaw deployments, a strong starting pair is QVeris for broad, current data and API-backed tools, plus GitHub MCP when work touches repositories. Add Context7 for fast-changing developer documentation and Playwright for browser workflows. Database, filesystem, memory, and team-service servers should be project-specific because their permission surface is materially larger.

OpenClaw can manage outbound MCP definitions and expose configured tools to supported runtimes. Its official CLI documentation distinguishes stdio and remote HTTP servers, supports per-server tool filters, and provides doctor and probe commands. That makes the selection question less about compatibility and more about trust, scope, and whether a server measurably improves a repeated task.

对大多数 OpenClaw 部署而言,可以先用 QVeris 补充广泛、实时的数据与 API 工具;如果任务围绕代码仓库,再配合 GitHub MCP。开发文档变化快时加入 Context7,需要操作或验证网页时加入 Playwright。数据库、文件系统、记忆和团队协作类 Server 的权限面更大,应按项目单独决定。

OpenClaw 可以管理外部 MCP 定义,并向支持的运行时暴露相应工具。官方 CLI 文档区分 stdio 与远程 HTTP Server,支持按 Server 过滤工具,也提供 doctorprobe 命令。因此,真正的选择标准并不是“能不能连”,而是来源是否可信、范围能否收紧,以及它是否能稳定改善重复任务。

Compatibility baseline:兼容性基线: Use the 请先查看 official OpenClaw MCP documentationOpenClaw 官方 MCP 文档 for current transport, authentication, filtering, diagnostics, and runtime behavior.,确认当前版本的传输、认证、过滤、诊断与运行时行为。
#ServerBest for最适合Typical scope典型权限范围Main caution主要注意点
1QVeris MCPCurrent data and API tools实时数据与 API 工具Selected tools/providers指定工具与服务商Choose only needed operations只开放所需操作
2GitHub MCPRepositories, issues, PRs仓库、Issue 与 PRToken and repository scope令牌与仓库范围Avoid broad write access避免宽泛写权限
3Context7Current library documentation最新库文档Remote documentation远程文档读取Confirm library/version确认库与版本
4Playwright MCPBrowser interaction and checks浏览器交互与验证Browser profiles and origins浏览器配置与来源Protect sessions and forms保护会话与表单
5Supabase MCPSupabase project workSupabase 项目工作Project and feature groups项目与功能组Prefer development projects优先连接开发项目
6FilesystemBounded local documents限定范围的本地文件Explicit directories明确指定的目录Never expose broad roots不要暴露宽泛根目录
7FetchSimple URL retrieval简单 URL 内容抓取Network read网络读取Treat pages as untrusted将网页视为不可信输入
8MemoryStructured persistent context结构化持久上下文Dedicated knowledge store专用知识存储Set retention and deletion rules设置保留与删除规则

The 8 best MCP servers for OpenClaw适合 OpenClaw 的 8 个最佳 MCP Server

This ranking prioritizes practical usefulness, first-party or clearly documented maintenance, scope control, and fit with an always-on agent. It is not a benchmark, and no single stack is best for every deployment.本清单优先考虑实际价值、第一方或文档清晰的维护来源、权限可控性,以及与常驻智能体的适配度。它不是性能基准,也不存在适合所有部署的万能组合。

1

QVeris MCP

Best for broad data and tool access综合数据与工具访问首选

QVeris fits OpenClaw workflows that need more than one narrow vendor integration. Its official MCP server exposes a compact discover, inspect, and call flow: find a capability, review its parameters and evidence, then execute it. This is especially useful for research, market monitoring, location, enrichment, or other workflows where current API-backed data matters.

The key advantage is consolidation: OpenClaw can call a smaller, intentional tool surface instead of carrying separate integrations for every data source. The trade-off is governance—you still need to select individual operations, understand provider inputs, and keep credentials out of prompts and shared configuration.

当 OpenClaw 工作流需要跨越多个数据来源,而不是只连接某一家服务时,QVeris 更合适。其官方 MCP Server 提供精简的 discoverinspectcall 流程:先发现能力,再核对参数与依据,最后执行调用。它尤其适用于研究、市场监测、位置查询、数据补全等依赖实时 API 数据的场景。

它的核心价值是整合:OpenClaw 无需为每个来源分别维护一套连接,只需保留精简且明确的工具面。相应地,你仍需逐项选择操作、理解服务商输入,并避免把凭证写入提示词或共享配置。

Choose when适用场景One agent needs several verified data capabilities一个智能体需要多种可核验数据能力
Start scope初始范围Discover and inspect before calling先发现和检查,再执行调用
Avoid when不适用A local static source already answers the task本地静态来源已能完成任务

Read the official QVeris MCP reference阅读 QVeris MCP 官方文档, inspect ,查看 relevant QVeris tools相关 QVeris 工具, then validate the workflow in the ,最后在 QVeris Playground. 中验证工作流。

2

GitHub MCP Server

Best for repository operations代码仓库操作首选

GitHub's official MCP server turns repository context into structured tools for code, issues, pull requests, and related workflows. It is the natural choice when OpenClaw triages incoming work, summarizes project activity, or coordinates a coding agent.

Start with read access to named repositories. Add issue or pull-request writes only after testing the exact workflow and approval path. Repository content is untrusted input: an issue, README, or code comment can contain instructions that should never override your system policy.

GitHub 官方 MCP Server 将代码、Issue、Pull Request 等仓库上下文转化为结构化工具,适合让 OpenClaw 分流任务、总结项目动态或协调编程智能体。

建议从指定仓库的只读权限开始。只有在完整验证工作流与审批路径后,才增加 Issue 或 PR 写权限。仓库内容本身属于不可信输入,Issue、README 或代码注释中的指令都不应覆盖系统策略。

Review GitHub's official MCP setup guidance查看 GitHub 官方 MCP 配置说明.

3

Context7

Best for current developer documentation最新开发文档首选

Context7 retrieves current, library-specific documentation instead of relying only on model memory. It is valuable when an OpenClaw coding workflow spans fast-moving SDKs, frameworks, or APIs and needs version-aware examples.

Ask the agent to identify the library and target version before retrieval. Documentation is evidence, not execution authority: examples still need review against the project's runtime, lockfile, and security policy.

Context7 可获取面向具体库的最新文档,避免完全依赖模型记忆。对于涉及快速迭代 SDK、框架或 API 的 OpenClaw 编程工作流,它能提供更贴近当前版本的资料。

调用前应让智能体明确库名与目标版本。文档是证据,不是执行授权;其中的示例仍需结合项目运行时、锁文件和安全策略进行审查。

Read the official Context7 client documentation阅读 Context7 官方客户端文档.

4

Playwright MCP

Best for browser workflows浏览器工作流首选

Microsoft's Playwright MCP server lets an agent inspect and interact with web pages through structured browser tools. Use it when OpenClaw must verify a user journey, collect evidence from a web application, or perform a bounded browser task.

Use a dedicated browser profile without personal sessions. Restrict target origins where possible, require confirmation before submissions or purchases, and separate read-only inspection from actions that change external state.

Microsoft 的 Playwright MCP Server 让智能体通过结构化浏览器工具检查和操作网页,适合 OpenClaw 验证用户流程、从 Web 应用收集证据,或完成范围明确的浏览器任务。

应使用不含个人会话的专用浏览器配置,并尽量限制目标来源。提交表单、购买或其他外部写操作前必须确认,同时将只读检查与会改变外部状态的动作分开。

Inspect the official Playwright MCP repository查看 Playwright MCP 官方仓库.

5

Supabase MCP

Best for Supabase projectsSupabase 项目首选

Supabase's official server is the right domain-specific choice when the application already uses Supabase. Its documented surface includes project context and documentation search, with feature groups and access controls that should be narrowed to the task.

Connect a development project first. Keep production data and schema-changing operations behind a separate, explicit approval path; database access can turn a plausible but wrong agent step into durable damage.

如果应用本身使用 Supabase,其官方 MCP Server 是更合适的垂直选择。文档中包含项目上下文与文档搜索等能力,并支持通过功能组和访问控制缩小范围。

先连接开发项目。生产数据与会修改 Schema 的操作应设置独立、明确的审批路径,因为数据库访问可能把一次看似合理但错误的智能体操作变成持久性损害。

Read the official Supabase MCP guide阅读 Supabase 官方 MCP 指南.

6

Filesystem

Best for bounded local knowledge限定本地知识首选

The reference Filesystem server is useful for a curated document directory, runbooks, exports, or a project workspace that OpenClaw cannot otherwise access. Its value comes from a narrow root—not from exposing an entire machine.

Create a dedicated directory containing only the material the agent needs. Prefer read-only mounts, exclude secret files and credential stores, and never configure a home directory, filesystem root, or broad shared drive as the allowed path.

参考实现 Filesystem Server 适合向 OpenClaw 提供经过整理的文档目录、运行手册、导出文件或项目工作区。它的价值来自目录边界足够窄,而不是让智能体看到整台机器。

应建立只包含任务资料的专用目录,优先使用只读挂载,并排除密钥文件与凭证存储。不要把用户主目录、文件系统根目录或宽泛共享盘设置为允许范围。

Review the MCP reference server examples查看 MCP 参考 Server 示例.

7

Fetch

Best for simple web retrieval简单网页抓取首选

Fetch is a lightweight option when OpenClaw needs to retrieve a known URL and extract readable content without a full browser. It suits public documentation, static pages, and bounded research inputs.

It does not replace search, JavaScript-capable browsing, or source verification. Treat returned content as untrusted, enforce network policy, and avoid internal addresses or endpoints that could expose metadata and private services.

当 OpenClaw 只需获取已知 URL 并提取可读内容,而不需要完整浏览器时,Fetch 是更轻量的选择,适用于公开文档、静态页面和范围明确的研究输入。

它不能替代搜索、支持 JavaScript 的浏览器或来源核验。返回内容应视为不可信输入,同时应执行网络策略,并阻止可能暴露元数据或内部服务的私有地址。

8

Memory

Best for structured persistent context结构化持久上下文首选

A Memory server can preserve entities, relationships, preferences, or decisions across sessions in a structured store. Use it only when OpenClaw's existing memory model does not meet a clearly defined retention need.

Persistent context creates privacy and lifecycle obligations. Define what may be stored, who can retrieve it, how corrections work, and when records expire. Do not use memory as a silent archive of every conversation.

Memory Server 可在不同会话之间保存实体、关系、偏好或决策等结构化信息。只有当 OpenClaw 现有记忆机制无法满足明确的保留需求时,才值得引入。

持久上下文会带来隐私与生命周期责任。需要明确哪些内容可保存、谁能读取、如何纠错以及何时过期;不要把记忆系统变成无提示地保存所有对话的档案库。

How to choose the right OpenClaw MCP stack如何选择合适的 OpenClaw MCP 组合

1. Start with the missing capability1. 从缺失能力出发

Write one representative task and identify the exact information or action OpenClaw lacks.先写出一个代表性任务,再明确 OpenClaw 缺少的具体信息或动作。

2. Prefer authoritative maintainers2. 优先权威维护方

Choose first-party or clearly documented servers with source, releases, and an explicit security model.优先选择第一方或文档清晰、源码与版本记录可查且安全模型明确的 Server。

3. Compare the permission surface3. 比较权限面

A read-only data tool and a browser with an authenticated session have very different failure impact.只读数据工具与持有登录会话的浏览器,在失败影响上完全不同。

4. Measure a real workflow4. 用真实流程验证

Test success, denial, bad input, timeout, and server downtime before expanding access.扩大权限前,验证成功、拒绝、错误输入、超时与 Server 宕机等路径。

Three sensible starter stacks三种实用入门组合

Workflow工作流Start with起始组合Add only if needed按需增加
Research and monitoring研究与监测QVeris + FetchPlaywright for interactive pages交互页面再加 Playwright
Software delivery软件交付GitHub + Context7Playwright for end-to-end checks端到端验证再加 Playwright
Supabase applicationSupabase 应用Supabase + Context7GitHub for issue/PR workflowsIssue/PR 流程再加 GitHub

Configure MCP servers in OpenClaw safely在 OpenClaw 中安全配置 MCP Server

Use OpenClaw's MCP CLI as the source of truth for configuration. A safe rollout is incremental: add one definition, inspect the resolved configuration, run static diagnostics, probe the live connection, review the discovered tools, and apply include/exclude filters before making the server available to normal agent sessions.

  1. Choose stdio for a local process or Streamable HTTP for a supported remote service.
  2. Keep credentials in environment variables or a secret reference—not literal shared config.
  3. Run openclaw mcp doctor to catch local setup errors.
  4. Run openclaw mcp probe <name> and inspect the exposed capabilities.
  5. Use toolFilter.include to admit only the tools required by the workflow.
  6. Test with non-production data and require approval for state-changing actions.

应以 OpenClaw MCP CLI 作为配置事实来源,并采用增量上线方式:添加一个定义,检查解析后的配置,运行静态诊断,探测实时连接,核对发现的工具,再通过 include/exclude 过滤后,才向日常智能体会话开放。

  1. 本地进程使用 stdio;受支持的远程服务使用 Streamable HTTP。
  2. 凭证放在环境变量或密钥引用中,不要写入共享配置。
  3. 运行 openclaw mcp doctor 检查本地配置错误。
  4. 运行 openclaw mcp probe <name> 并检查暴露能力。
  5. 通过 toolFilter.include 只允许工作流所需工具。
  6. 先用非生产数据测试,所有会改变外部状态的操作都需要审批。
openclaw mcp list
openclaw mcp doctor
openclaw mcp probe <server-name>
openclaw mcp tools <server-name>

Command availability and exact flags can change; confirm them in the 命令与参数可能随版本变化,请以 current OpenClaw CLI reference当前 OpenClaw CLI 参考文档. 为准。

OpenClaw MCP security checklistOpenClaw MCP 安全检查清单

  • Verify the maintainer, repository, package name, release history, and official documentation before installation.安装前核对维护者、仓库、包名、版本记录与官方文档。
  • Pin or review versions. Convenience tags are useful for evaluation, not a complete supply-chain policy.固定或审查版本;便捷标签适合评估,但不能替代供应链策略。
  • Use per-server tool filters and prefer read-only actions with narrow resource scopes.使用按 Server 的工具过滤,并优先开放资源范围明确的只读操作。
  • Treat pages, issues, documents, database rows, and tool descriptions as untrusted content that may contain prompt injection.网页、Issue、文档、数据库记录和工具描述都可能包含提示注入,应视为不可信内容。
  • Keep secrets in approved environment or secret-reference mechanisms and redact them from logs.使用合规的环境变量或密钥引用机制保存凭证,并从日志中脱敏。
  • Separate read, write, publish, payment, deletion, and production access into distinct approval classes.将读取、写入、发布、支付、删除与生产访问划分为不同审批等级。
  • Record server identity, tool name, decision, result status, and latency without logging unnecessary personal data.记录 Server 身份、工具名、决策、结果状态与延迟,但不记录无必要的个人数据。
  • Define a disable path. One unhealthy or compromised server should be removable without breaking the entire agent.预先设计停用路径;单个异常或受损 Server 不应拖垮整个智能体。

Frequently asked questions常见问题

Does OpenClaw support MCP servers?OpenClaw 支持 MCP Server 吗?

Yes. OpenClaw's official CLI documentation covers saved outbound MCP server definitions, local and remote transports, authentication, tool filtering, diagnostics, and probing. Runtime exposure still depends on the active tool profile and adapter.支持。OpenClaw 官方 CLI 文档说明了外部 MCP Server 定义、本地与远程传输、认证、工具过滤、诊断与探测;最终是否向会话暴露,还取决于当前工具配置与运行时适配器。

Which MCP server should I add first to OpenClaw?OpenClaw 应先添加哪个 MCP Server?

Start with the smallest server that closes a recurring capability gap. For broad current data, consider QVeris; for repository work, GitHub; for fast-changing developer docs, Context7. Do not install a universal bundle before defining a task.先选择能补齐一个重复性能力缺口的最小 Server。综合实时数据可考虑 QVeris,仓库工作选择 GitHub,快速变化的开发文档选择 Context7。不要在没有明确任务前安装“万能套装”。

How many MCP servers should OpenClaw use?OpenClaw 应使用多少个 MCP Server?

There is no universal limit. You have too many when tools overlap, selection becomes unreliable, latency and failure modes increase, or permissions become difficult to audit. Two to four project-specific servers are usually easier to govern than a broad global stack.没有统一上限。当工具重叠、选择不稳定、延迟与故障点增加,或权限难以审计时,数量就已经过多。相比宽泛的全局组合,每个项目保留两到四个专用 Server 通常更容易治理。

Can OpenClaw auto-approve MCP tools?OpenClaw 可以自动批准 MCP 工具吗?

Only for narrowly scoped, well-tested actions with low impact. Keep writes, publishing, purchases, deletion, credential access, and production changes behind explicit approval. A server-wide wildcard is rarely a safe starting point.只应对范围窄、经过充分测试且影响较低的操作自动批准。写入、发布、购买、删除、凭证访问与生产变更应保留明确审批。对整个 Server 使用通配授权通常不是安全起点。

Are MCP servers the same as OpenClaw skills?MCP Server 和 OpenClaw Skill 是一回事吗?

No. A skill primarily supplies instructions and workflow knowledge, while an MCP server exposes callable tools, resources, or prompts over the protocol. They can complement each other: a skill can teach OpenClaw when and how to use a narrowly scoped MCP tool.不是。Skill 主要提供指令与工作流知识,MCP Server 则通过协议暴露可调用的工具、资源或提示。两者可以互补:Skill 负责告诉 OpenClaw 何时、如何使用范围明确的 MCP 工具。

Give OpenClaw the smallest useful toolset为 OpenClaw 配置最小但够用的工具集

Choose one missing capability, inspect its source and permissions, test it with representative data, and expand only after the complete workflow is reliable.先确定一个缺失能力,核对来源与权限,用代表性数据测试;只有完整工作流可靠后,才扩大工具范围。