Mateclaw MCP Server

by mateaix• 1.2k•• Scanned•Claim this listing•Request removal
Developer Toolsagentagent harnessagentscope javaai agentdingtalk robot

🤖 MateClaw — Your second brain with Multi-Agent Orchestration, MCP Protocol, Skills & Memory, Dream, and Multi-Channel Support. Built on Spring AI Alibaba.

Mateclaw is an open-source mcp server by mateaix, written mainly in Java, with 1,175 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 30, 2026.

Scan summary: scanned Nov 5, 2026 at commit 0d87013. Seen able to connect to the internet. Scan policy

Scanned
Full scan at 0d87013 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit303 known vulnerabilitiesfail
Manifestnonewarn
Buildn/a
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (89)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    mateclaw-desktop/electron/main/index.ts:73
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    mateclaw-desktop/electron/main/localBridge.ts:91
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    mateclaw-desktop/electron/main/localBridge.ts:93
  • medium
    @vue/server-renderer@3.5.31: 2 known vulnerabilities
    GHSA-g2v6-rqmx-r4w6, GHSA-g2v6-rqmx-r4w6
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    @xmldom/xmldom@0.8.12: 14 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-2v35-w6hq-6mfw, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59 +9 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    app-builder-lib@25.1.8: 1 known vulnerability
    GHSA-7g7r-gx96-252g
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    brace-expansion@1.1.13: 12 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +7 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    brace-expansion@2.0.3: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    brace-expansion@5.0.5: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    builder-util-runtime@9.2.10: 1 known vulnerability
    GHSA-p2f4-r6v6-j797
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    electron@33.4.11: 46 known vulnerabilities
    GHSA-2p8c-gr87-2676, GHSA-3c8v-cfp5-9885, GHSA-3qxv-5xgr-q7w9, GHSA-4f78-qhmw-8j8m, GHSA-4p4r-m79c-wq3v +41 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    extract-zip@2.0.1: 2 known vulnerabilities
    GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    form-data@4.0.5: 2 known vulnerabilities
    GHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    glob@10.4.5: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    ip-address@10.1.0: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    js-yaml@4.2.0: 3 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 9 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +4 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    postcss@8.5.8: 8 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 3 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    tmp@0.2.5: 1 known vulnerability
    GHSA-ph9p-34f9-6g65
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    vite@6.4.3: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    mateclaw-desktop/pnpm-lock.yaml
  • medium
    com.fasterxml.jackson.core:jackson-core@2.21.5: 2 known vulnerabilities
    GHSA-7hhh-6rmp-j9qf, GHSA-p6pp-m3f8-5c89
    mateclaw-plugin-api/pom.xml
  • medium
    com.fasterxml.jackson.core:jackson-databind@2.21.5: 5 known vulnerabilities
    GHSA-cxp5-3px4-pw24, GHSA-gx83-3vf8-gh7j, GHSA-q4xh-88c3-wmh7, GHSA-wjgm-6hv5-3cvf, GHSA-wv8q-qhhj-9h54
    mateclaw-plugin-api/pom.xml
  • medium
    tools.jackson.core:jackson-core@3.1.5: 2 known vulnerabilities
    GHSA-7hhh-6rmp-j9qf, GHSA-p6pp-m3f8-5c89
    mateclaw-plugin-api/pom.xml
  • medium
    tools.jackson.core:jackson-databind@3.1.5: 5 known vulnerabilities
    GHSA-cxp5-3px4-pw24, GHSA-gx83-3vf8-gh7j, GHSA-q4xh-88c3-wmh7, GHSA-wjgm-6hv5-3cvf, GHSA-wv8q-qhhj-9h54
    mateclaw-plugin-api/pom.xml
  • medium
    org.jsoup:jsoup@1.22.2: 2 known vulnerabilities
    GHSA-65r4-943x-97jj, GHSA-pmhh-3w7g-xqp8
    mateclaw-server/pom.xml
  • medium
    org.postgresql:postgresql@42.7.7: 2 known vulnerabilities
    GHSA-98qh-xjc8-98pq, GHSA-j92g-9f8w-j867
    mateclaw-server/pom.xml
  • medium
    axios@1.14.0: 34 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +29 more
    mateclaw-ui/pnpm-lock.yaml
  • medium
    brace-expansion@2.1.2: 5 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
    mateclaw-ui/pnpm-lock.yaml
  • medium
    brace-expansion@5.0.7: 5 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
    mateclaw-ui/pnpm-lock.yaml
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    mateclaw-ui/pnpm-lock.yaml
  • medium
    dompurify@3.2.7: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    mateclaw-ui/pnpm-lock.yaml
  • medium
    dompurify@3.3.3: 17 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +12 more
    mateclaw-ui/pnpm-lock.yaml
  • medium
    happy-dom@20.9.0: 3 known vulnerabilities
    GHSA-5fpq-26gf-qwcr, GHSA-834v-8h66-3h79, GHSA-c8p4-j97h-3vg8
    mateclaw-ui/pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    mateclaw-ui/pnpm-lock.yaml
  • medium
    pdfjs-dist@6.1.200: 1 known vulnerability
    GHSA-hq66-cqwq-w95j
    mateclaw-ui/pnpm-lock.yaml
  • medium
    uuid@11.1.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    mateclaw-ui/pnpm-lock.yaml
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    mateclaw-ui/pnpm-lock.yaml
  • medium
    vite@7.3.1: 10 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
    mateclaw-ui/pnpm-lock.yaml
  • medium
    postcss@8.5.9: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    mateclaw-webchat/pnpm-lock.yaml
  • medium
    vite@6.4.2: 7 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more
    mateclaw-webchat/pnpm-lock.yaml
  • low
    Possible example credential in docs/tests: curl-auth-header
    4 matches in this file
    mateclaw-server/src/main/resources/docs/en/chat.md:317
  • low
    Possible example credential in docs/tests: curl-auth-header
    4 matches in this file
    mateclaw-server/src/main/resources/docs/en/webchat.md:229
  • low
    Possible example credential in docs/tests: curl-auth-header
    6 matches in this file
    mateclaw-server/src/main/resources/docs/zh/agents.md:441
  • low
    Possible example credential in docs/tests: curl-auth-header
    4 matches in this file
    mateclaw-server/src/main/resources/docs/zh/webchat.md:234
  • low
    Possible example credential in docs/tests: curl-auth-header
    3 matches in this file
    mateclaw-server/src/main/resources/docs/zh/tools.md:329
  • low
    Possible example credential in docs/tests: curl-auth-header
    4 matches in this file
    mateclaw-server/src/main/resources/docs/zh/skills.md:300
  • low
    Possible example credential in docs/tests: curl-auth-header
    4 matches in this file
    mateclaw-server/src/main/resources/docs/zh/chat.md:317
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/main/resources/docs/zh/security.md:55
  • low
    Possible example credential in docs/tests: curl-auth-header
    8 matches in this file
    mateclaw-server/src/main/resources/docs/zh/models.md:435
  • low
    Possible example credential in docs/tests: curl-auth-header
    3 matches in this file
    mateclaw-server/src/main/resources/docs/en/tools.md:334
  • low
    Possible example credential in docs/tests: curl-auth-header
    8 matches in this file
    mateclaw-server/src/main/resources/docs/en/models.md:434
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/main/resources/docs/en/security.md:55
  • low
    Possible example credential in docs/tests: curl-auth-header
    4 matches in this file
    mateclaw-server/src/main/resources/docs/en/skills.md:300
  • low
    Possible example credential in docs/tests: curl-auth-header
    6 matches in this file
    mateclaw-server/src/main/resources/docs/en/agents.md:441
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatArchivePinTest.java:40
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatAuditTrailTest.java:39
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatCreateSessionTest.java:48
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatRegenerateTest.java:42
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatSessionManagementTest.java:41
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatSkillListTest.java:38
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatStopStreamTest.java:45
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatWikiPageListTest.java:39
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatApprovalInteractionTest.java:55
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatSchemaFieldsTest.java:48
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/webchat/WebChatTokenRevocationTest.java:46
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/channel/wecom/cards/tool_guard/ToolGuardCardHandlerTest.java:184
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/auth/sso/SsoStateServiceTest.java:38
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/auth/service/AuthServiceJwtSecretTest.java:22
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/tool/builtin/SkillManageToolWriteFileTest.java:179
  • low
    Possible example credential in docs/tests: generic-api-key
    mateclaw-server/src/test/java/vip/mate/skill/secret/SkillSecretServiceTest.java:38
  • low
    @tootallnate/once@2.0.0: 1 known vulnerability
    GHSA-vpq2-c234-7xj6
    mateclaw-desktop/pnpm-lock.yaml
  • low
    minimatch@10.2.5: 2 known vulnerabilities
    GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
    mateclaw-desktop/pnpm-lock.yaml
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    mateclaw-desktop/pnpm-lock.yaml
  • low
    org.springframework.retry:spring-retry@2.0.12: 1 known vulnerability
    GHSA-2827-2mxx-j8pv
    mateclaw-server/pom.xml
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    mateclaw-ui/pnpm-lock.yaml
  • low
    @intlify/core-base@9.14.4: 2 known vulnerabilities
    GHSA-8rc2-428q-7ww3, GHSA-x8qp-wqqm-57ph
    mateclaw-ui/pnpm-lock.yaml
  • low
    @vitest/mocker@4.1.7: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    mateclaw-ui/pnpm-lock.yaml
  • low
    baseline-browser-mapping@2.10.13: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    mateclaw-ui/pnpm-lock.yaml
  • low
    esbuild@0.27.5: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    mateclaw-ui/pnpm-lock.yaml
  • low
    follow-redirects@1.15.11: 1 known vulnerability
    GHSA-r4q5-vmmm-2653
    mateclaw-ui/pnpm-lock.yaml
  • low
    katex@0.16.45: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    mateclaw-ui/pnpm-lock.yaml
  • low
    mermaid@11.14.0: 9 known vulnerabilities
    GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6m6c-36f7-fhxh, GHSA-6x64-9x62-f2gx, GHSA-87f9-hvmw-gh4p +4 more
    mateclaw-ui/pnpm-lock.yaml
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    mateclaw-ui/pnpm-lock.yaml
  • low
    vitest@4.1.7: 1 known vulnerability
    GHSA-82fw-gwwq-j7x9
    mateclaw-ui/pnpm-lock.yaml
  • low
    vue-i18n@9.14.4: 2 known vulnerabilities
    GHSA-8rc2-428q-7ww3, GHSA-x8qp-wqqm-57ph
    mateclaw-ui/pnpm-lock.yaml
  • low
    No manifest declaring network access and environment variables (agent.json)

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Mateclaw alternatives

View more →

Similar mcp servers in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Mateclaw (this page)
mateaix
1.2kApache-2.0Oct 30, 2026Scanned, no flagged issues
MCP Use
mcp-use
11kMITOct 30, 2026Scanned, no flagged issues
MobileBuildMCP
getsentry
6.5kMITNov 1, 2026Scanned, no flagged issues
Gemini Notebook MCP CLI
jacob-bd
6.4kMITOct 27, 2026Scanned, no flagged issues
Mcporter
openclaw
5.1kMITOct 27, 2026Scanned, no flagged issues
Flint Chart
microsoft
4.5kMITNov 1, 2026Scanned, no flagged issues