Skills gate-mcp-installer
📦

gate-mcp-installer

v2026.3.4-1 Content revision r1 High Risk 🌐 Network access📁 Filesystem access⚙️ External commands

Install Gate MCP for OpenClaw

Gate MCP setup requires installing mcporter, adding an endpoint, and checking connectivity. This skill automates those steps and gives clear troubleshooting guidance.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "gate-mcp-installer" from https://skillstore.io/skills/gate-gate-mcp-installer.md and its manifest at https://skillstore.io/api/skills/gate-gate-mcp-installer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/gate-gate-mcp-installer.md Signed manifest GET /api/skills/gate-gate-mcp-installer/manifest Signed lockfile GET /api/skills/gate-gate-mcp-installer/lockfile

Test it

Using "gate-mcp-installer". help me install Gate MCP

Expected outcome:

npm was available, mcporter was installed, the Gate endpoint was added, and MCP tools were verified.

Using "gate-mcp-installer". is Gate MCP working?

Expected outcome:

  • mcporter is installed.
  • Gate configuration is present.
  • The tool listing check succeeded.

Using "gate-mcp-installer". Gate MCP connection timeout

Expected outcome:

The local setup exists, but endpoint verification failed. Check network access and retry when the service is reachable.

Security Audit

High Risk
v4 • 7/5/2026 Open versioned report

The hidden-file alerts are false positives because they reference the documented OpenClaw skill directory, and the Markdown backtick alerts are formatting. Real risks remain: the skill runs a bash installer, installs an unpinned global npm package, and configures a persistent third-party MCP endpoint.

5
Files scanned
422
Lines analyzed
4
Review items
0
False positives ignored

Confirmed security concerns (2)

High
scripts/install-gate-mcp.sh:37-41
Unpinned Global Package Installation
The installer runs a global npm installation for mcporter without pinning a version or verifying package integrity. A compromised or changed package could execute with the user permissions available to npm.
The script directly installs or updates mcporter globally through npm. The package is not pinned and no integrity check is present in the installer.
Medium
scripts/install-gate-mcp.sh:53-67README.md:97SKILL.md:44
Persistent External MCP Configuration
The installer adds a persistent home-scope Gate MCP configuration pointing to an external endpoint. Future MCP usage may send tool requests or query context to that third-party service.
The endpoint and config command are explicit in both the script and documentation. The risk is contextual because the endpoint is intended, but it persists beyond initial installation.
Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
scripts/install-gate-mcp.sh:1
Unix shell invocation
#!/bin/bash
The file is a bash installer that can modify the local environment by installing a global package and changing MCP configuration. Shell execution should require explicit user trust.
Low
README.md:97
Hardcoded URL
mcporter config add gate https://api.gatemcp.ai/mcp --scope home
The manual setup command configures a fixed external Gate MCP endpoint. This is intended behavior, but future MCP calls may send requests to a third-party service.
Low
scripts/install-gate-mcp.sh:53
Hardcoded URL
GATE_URL="https://api.gatemcp.ai/mcp"
The installer stores a fixed external Gate MCP endpoint for future use. This is expected, but it creates a third-party network dependency for MCP activity.
Low
SKILL.md:44
Hardcoded URL
mcporter config add gate https://api.gatemcp.ai/mcp --scope home
The documented manual command configures a fixed external Gate MCP endpoint. This is intended, but it should be disclosed as a third-party network dependency.

Risk Factors

🌐 Network access (4)
README.md:97 scripts/install-gate-mcp.sh:23 scripts/install-gate-mcp.sh:53 SKILL.md:44
📁 Filesystem access (10)
README.md:84 README.md:84 scripts/install-gate-mcp.sh:21 scripts/install-gate-mcp.sh:31 scripts/install-gate-mcp.sh:44 scripts/install-gate-mcp.sh:56 scripts/install-gate-mcp.sh:58 scripts/install-gate-mcp.sh:76 SKILL.md:17 SKILL.md:17
⚙️ External commands (15)
scripts/install-gate-mcp.sh:26 scripts/install-gate-mcp.sh:32 scripts/install-gate-mcp.sh:48 scripts/install-gate-mcp.sh:58 scripts/install-gate-mcp.sh:77 scripts/install-gate-mcp.sh:1 SKILL.md:16-18 SKILL.md:18-35 SKILL.md:35-39 SKILL.md:39-43 SKILL.md:43-45 SKILL.md:45-49 SKILL.md:49-55 SKILL.md:55-72 SKILL.md:72
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/gate-gate-mcp-installer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/gate-gate-mcp-installer/security.svg)](https://skillstore.io/skills/gate-gate-mcp-installer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/gate-gate-mcp-installer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gate-gate-mcp-installer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/gate-gate-mcp-installer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

gate. (2026). gate-mcp-installer security audit report (audit version 4) [Author version 2026.3.4-1]. Skillstore. https://skillstore.io/skills/gate-gate-mcp-installer/audits/4

BibTeX citation

@techreport{gate-gate-gate-mcp-installer-2026, author = {gate}, title = {gate-mcp-installer security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/gate-gate-mcp-installer/audits/4}, note = {Author version 2026.3.4-1} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "gate-mcp-installer security audit report (audit version 4)" version: "2026.3.4-1" type: report authors: - name: "gate" date-released: "2026-07-05" url: "https://skillstore.io/skills/gate-gate-mcp-installer/audits/4" identifiers: - type: other value: "skillstore:gate-gate-mcp-installer:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
77
Architecture
90
Maintainability
85
Content
69
Community
91
Spec Compliance

What You Can Build

Set Up Gate MCP

Install mcporter, add the Gate endpoint, and verify that OpenClaw can reach MCP tools.

Verify An Existing Setup

Check the installed CLI, saved Gate configuration, and tool listing before using market data workflows.

Recover From Setup Errors

Diagnose missing commands, configuration problems, and connection failures with guided repair steps.

Try These Prompts

Install Gate MCP 
Install Gate MCP for OpenClaw and verify it works.
Check My Setup 
Check whether Gate MCP is configured correctly. Report each check and the next fix if one fails.
Troubleshoot Connection Failure 
Gate MCP cannot connect. Diagnose npm, mcporter, config, and network status before changing anything.
Reinstall And Validate 
Update mcporter, reconfigure Gate MCP only if needed, then list available tools and summarize changed settings.

Best Practices

  • Review the installer script before running it.
  • Confirm global npm installation is acceptable for your environment.
  • Run verification after installation and keep endpoint configuration visible to administrators.

Avoid

  • Running the installer in locked-down production shells without approval.
  • Using the skill where Node.js and npm are not allowed.
  • Assuming MCP tool results replace independent market or security review.

Frequently Asked Questions

Does this skill need API keys?
No. It uses a public Gate MCP endpoint and does not store credentials.
What does it install?
It installs the mcporter CLI globally through npm.
Can it run without internet access?
No. It needs network access for npm installation and endpoint verification.
Can I verify before changing configuration?
Yes. Ask for a health check before requesting installation or reconfiguration.
Which AI tools can use it?
The skill declares support for Claude, Codex, and Claude Code.
What should security reviewers inspect?
Review the global npm install, the external endpoint, and the home-scope MCP configuration.

Developer Details

Author

gate

License

MIT

Author version

v2026.3.4-1

Skillstore revision

r1

Repository

https://github.com/gate/gate-skills/tree/master/skills/gate-mcp-installer/

Ref

30c73eac2afe762f6aa9c4553158769369d47351

Maintenance freshness

7/20/2026

Usage

7 downloads · 164 views

File structure

📁 references/

📄 scenarios.md

📁 scripts/

📄 install-gate-mcp.sh

📄 CHANGELOG.md

📄 README.md

📄 SKILL.md