Atlas / MCP servers / fo0 / clawstash

clawstashCAUTION

Name: clawstash
Author: fo0

mcp/fo0/clawstash

MCP server by fo0 · ai tools · api · claw util · Audited 2026-10-11

AI-optimized stash storage — dynamic RAG for agents. Store, search, and retrieve docs, code, and data on demand via MCP or REST API.

Verdict

CAUTION

Grade

Trust score

83 /100

Exposed tools

16 15r · 1w · 0d

Transport

stdio · streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Persistent storage for AI agents. Store text, code, configs, and files — retrieve them via MCP or REST API.

Built for agents like OpenClaw that need a reliable place to save and recall information across sessions.

Why ClawStash?

AI agents lose context between sessions. ClawStash gives them a persistent memory:

Store anything — code snippets, configs, notes, multi-file projects
Organize with tags & metadata — structured key-value metadata and tags for easy retrieval
Full-text search — find stashes by content, name, description, or tags
Token-efficient — MCP tools return summaries first, full content only on demand
Version history — every change is tracked, diffable, and restorable; the last 200 snapshots per stash are kept (STASH_VERSION_LIMIT, 0 = keep everything — what gets deleted, and when)
Duplicate a stash — open any stash as a pre-filled new one and use it as a template
Import files from disk — drop text files onto the editor (or pick them) to add them as file rows, instead of copy-pasting each one
GitHub backup — mirror all stashes into a GitHub repo (scheduled, on change, or manual) with "Sign in with GitHub" or a PAT — see docs/backup.md
Mermaid diagrams — .mmd files and inline `mermaid blocks in Markdown render as diagrams (lazy-loaded, no bundle bloat)
One-click code copy — every fenced code block in rendered Markdown gets a copy button (keyboard reachable, always visible on touch)
Maximize a file — blow any one file of a stash (HTML preview, Mermaid diagram, Markdown, code) up to fill the screen; the Restore button or a backdrop click restores it, Esc too once focus is outside the HTML preview
Web GUI included — dark-themed dashboard to browse, search, and manage stashes manually, with a resizable sidebar that reme

Read from source at commit 134e4d7bc342OBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add clawstash --env ADMIN_PASSWORD=${ADMIN_PASSWORD} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "clawstash": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ADMIN_PASSWORD": "${ADMIN_PASSWORD}"
      }
    }
  }
}

Exposed tools (16)

15 read · 1 write · 0 destructive.

Tool	Risk	Description
`Alpha`	read	first
`Backup`	write	GitHub backup configuration and sync
`First`	read
`Hello`	read	desc
`Notes`	read
`Second`	read
`Stash`	read
`Stashes`	read	Stash CRUD operations
`System`	read	System endpoints
`Tokens`	read	API token management
`changed`	read	new-desc
`list_stashes`	read	List stashes
`n`	read	d
`name-v1`	read	desc-v1
`original`	read	orig-desc
`unrelated`	read	random

Trust audit

CAUTIONgrade B · trust 83/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (8 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: found

Findings (25)

MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319

src/components/settings/BackupConnectCard.tsx:38

'oauth_application[callback_url]': 'http://localhost',

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

Dockerfile:65

CMD node -e 'fetch("http://127.0.0.1:"+(process.env.PORT||3000)+"/api/health").then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))'

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

src/server/backup/__tests__/github-client.test.ts:95

const token = 'ghp_supersecret_value';

LOWInventory / provenance · inv.hidden_file · CWE-1104

.git-blame-ignore-revs

.git-blame-ignore-revs

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.prettierignore

.prettierignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.prettierrc.json

.prettierrc.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/__tests__/next-config.test.ts:2

import nextConfig from '../../next.config';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/app/[...slug]/page.tsx:3

import App from '../../App';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/app/[...slug]/page.tsx:4

import ErrorBoundary from '../../components/ErrorBoundary';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/components/__tests__/Dashboard.clearfilters.test.tsx:5

import type { StashListItem } from '../../types';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/components/__tests__/Dashboard.refresh.test.tsx:5

import type { StashListItem } from '../../types';

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/utils/mermaid-hydrate.ts:55

const bin = atob(s);

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@modelcontextprotocol/sdk, adm-zip, archiver, better-sqlite3, diff, marked, mermaid, next

Why it matters. 34 dependency range(s) float

Fix. pin exact versions or ship a lockfile

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

BACKLOG.md:174

| 48               | 2026-03-19 | 2026-05-23     | Code Smells       | src/server/auth.ts + src/app/api/\_helpers.ts                                                    | Already unified — `requireAdmi