mateclaw

mcp
Security Audit
Warn
Health Warn
  • License Ò€” License: Apache-2.0
  • Description Ò€” Repository has a description
  • Active repo Ò€” Last push 0 days ago
  • Low visibility Ò€” Only 5 GitHub stars
Code Warn
  • network request Ò€” Outbound network request in mateclaw-ui/package.json
  • network request Ò€” Outbound network request in mateclaw-ui/pnpm-lock.yaml
  • network request Ò€” Outbound network request in mateclaw-ui/src/api/index.ts
  • network request Ò€” Outbound network request in mateclaw-ui/src/composables/chat/useChat.ts
  • network request Ò€” Outbound network request in mateclaw-ui/src/composables/chat/useStream.ts
Permissions Pass
  • Permissions Ò€” No dangerous permissions requested
Purpose
This project is a personal AI assistant built with Java and Vue 3. It provides multi-agent orchestration, a tool and skill system using the MCP protocol, and multi-channel messaging support across platforms like DingTalk, Discord, and Telegram.

Security Assessment
Risk Rating: Low
The automated scan found no hardcoded secrets, dangerous permissions, or evidence of direct shell command execution. However, it does make several outbound network requests via the frontend. These requests are expected and standard for a chat application, primarily handling API calls, chat functions, and data streaming. Because this tool integrates with 20+ external AI providers (like OpenAI and Anthropic) and supports extensive multi-channel adapters, it inherently processes and transmits conversational data. You will need to ensure your API keys and deployment environment are securely configured.

Quality Assessment
The project is very new and currently has extremely low visibility with only 5 GitHub stars, meaning it has not yet been widely tested or vetted by the open-source community. On the positive side, the repository is under active development with recent commits, includes a proper Apache-2.0 license, and has clear documentation.

Verdict
Use with caution β€” the codebase appears structurally sound and safe, but its low community adoption means you should thoroughly review the code before trusting it in production environments.
SUMMARY

πŸ€– MateClaw β€” Java + Vue 3 AI Assistant with Multi-Agent Orchestration, MCP Protocol, and Multi-Channel Support. Built on Spring AI Alibaba.

README.md

MateClaw

GitHub Repo
Documentation
Live Demo
Website
Java Version
Spring Boot
Vue
Last Commit
License
GitHub Stars
GitHub Forks

[Website] [Live Demo] [Documentation] [δΈ­ζ–‡]

MateClaw Logo

Your AI mate, always ready to lend a claw.

A personal AI assistant system built with Java + Vue 3, powered by Spring AI Alibaba. Features multi-agent orchestration, a flexible tool/skill system with MCP protocol support, multi-layer memory, and multi-channel adapters.

Core capabilities:

Multi-Agent Orchestration β€” ReAct (Thought β†’ Action β†’ Observation loop) and Plan-and-Execute (auto-decompose complex tasks into ordered sub-steps). Create multiple independent agents, each with their own personality and tools.

Tool & Skill System β€” Built-in tools (web search, date/time) + MCP protocol for external tool integration. Pre-configured GitHub and Filesystem MCP servers β€” enable and go. Install skill packages from ClawHub marketplace or custom sources.

Multi-Layer Memory β€” Short-term context window with auto-compression, event-driven post-conversation memory extraction, workspace files (PROFILE.md / MEMORY.md / daily notes), and scheduled memory consolidation.

Every Channel β€” Web console, DingTalk, Feishu, WeChat Work, Telegram, Discord, QQ. One MateClaw, connect as needed.

Multi-Provider Models β€” 20+ providers: DashScope, OpenAI, Anthropic, Google Gemini, DeepSeek, Kimi, MiniMax, Zhipu AI, Volcano Engine, OpenRouter, Ollama, LM Studio, llama.cpp, MLX, and more. Configure in the web UI.

Desktop App β€” Electron-based desktop application with auto-update support. Download and double-click to run.


Table of Contents


Quick Start

Prerequisites

  • Java 17+
  • Node.js 18+ & pnpm
  • Maven 3.9+ (or use mvnw)
  • At least one LLM API Key (e.g., DashScope)

Option 1: Local Development

1. Start the backend

cd mateclaw-server
export DASHSCOPE_API_KEY=your-key-here
mvn spring-boot:run
# Backend runs at http://localhost:18088
# H2 Console: http://localhost:18088/h2-console
# API Docs (SpringDoc OpenAPI): http://localhost:18088/swagger-ui.html

2. Start the frontend

cd mateclaw-ui
pnpm install
pnpm dev
# Frontend runs at http://localhost:5173 (proxies /api to :18088)

3. Log in

Open http://localhost:5173 and log in with admin / admin123.

Option 2: Docker

cp .env.example .env
# Edit .env β€” fill in DASHSCOPE_API_KEY and other variables

docker compose up -d
# Service runs at http://localhost:18080 (MySQL + backend)

Option 3: Desktop Application

Download the installer from GitHub Releases:

Platform File Notes
macOS (Apple Silicon) MateClaw_<version>_arm64.dmg Recommended for M1/M2/M3/M4/M5 Mac
macOS (Apple Silicon) MateClaw_<version>_arm64.zip zip format (Apple Silicon)
macOS (Intel) MateClaw_<version>_x64.dmg For Intel-based Mac
macOS (Intel) MateClaw_<version>_x64.zip zip format (Intel)
Windows (x64) MateClaw_<version>_Setup.exe For most Windows PCs (64-bit)
Windows (x64) MateClaw_<version>_x64_Setup.exe Explicit x64 build
Windows (ARM64) MateClaw_<version>_arm64_Setup.exe For ARM-based Windows (e.g. Surface Pro X)

Double-click to run. The app bundles JRE 21 + the Spring Boot backend, no Java installation needed. Supports auto-update via GitHub Releases.

macOS users: If macOS blocks the app, right-click β†’ Open β†’ Open again, or go to System Settings β†’ Privacy & Security β†’ Open Anyway.


Screenshots


Architecture

mateclaw/
β”œβ”€β”€ mateclaw-server/          # Spring Boot backend
β”‚   β”œβ”€β”€ src/main/java/vip/mate/
β”‚   β”‚   β”œβ”€β”€ agent/            # Agent engine (ReAct, Plan-and-Execute, StateGraph)
β”‚   β”‚   β”œβ”€β”€ planning/         # Task planning (Plan / SubPlan models)
β”‚   β”‚   β”œβ”€β”€ tool/             # Tool system (built-in + MCP adapters)
β”‚   β”‚   β”œβ”€β”€ skill/            # Skill management (workspace + ClawHub)
β”‚   β”‚   β”œβ”€β”€ channel/          # Channel adapters (Web, DingTalk, Feishu, etc.)
β”‚   β”‚   β”œβ”€β”€ workspace/        # Conversations, messages, workspace files
β”‚   β”‚   β”œβ”€β”€ memory/           # Memory extraction & consolidation
β”‚   β”‚   β”œβ”€β”€ llm/              # Multi-provider model configs
β”‚   β”‚   β”œβ”€β”€ cron/             # Scheduled tasks (CronJob)
β”‚   β”‚   β”œβ”€β”€ auth/             # Spring Security + JWT
β”‚   β”‚   └── config/           # Spring bean configurations
β”‚   └── src/main/resources/
β”‚       β”œβ”€β”€ application.yml   # Main config (H2 for dev)
β”‚       β”œβ”€β”€ prompts/          # Prompt templates
β”‚       └── db/               # Schema & seed data (schema.sql, data.sql)
β”œβ”€β”€ mateclaw-ui/              # Vue 3 SPA frontend
β”‚   └── src/
β”‚       β”œβ”€β”€ views/            # Pages (ChatConsole, AgentWorkspace, SkillMarket, etc.)
β”‚       β”œβ”€β”€ components/       # Reusable components
β”‚       β”œβ”€β”€ stores/           # Pinia stores (domain-driven)
β”‚       β”œβ”€β”€ api/              # Axios HTTP client
β”‚       β”œβ”€β”€ router/           # Vue Router
β”‚       β”œβ”€β”€ types/            # TypeScript types
β”‚       └── i18n/             # Internationalization (zh-CN, en-US)
β”œβ”€β”€ mateclaw-desktop/         # Electron desktop app
β”œβ”€β”€ docs/                     # VitePress documentation (zh + en)
β”œβ”€β”€ docker-compose.yml
└── .env.example

Tech Stack

Layer Technology
Backend Framework Spring Boot 3.5 + Spring AI Alibaba 1.1
LLM Integration DashScope, OpenAI, Anthropic, Gemini, DeepSeek, Kimi, MiniMax, Zhipu, Volcano Engine, OpenRouter, Ollama, LM Studio, llama.cpp, MLX
Agent Engine StateGraph (ReAct + Plan-and-Execute)
Database H2 (dev) / MySQL 8.0+ (prod)
ORM MyBatis Plus 3.5
Authentication Spring Security + JWT
API Docs SpringDoc OpenAPI 3
Frontend Vue 3 + TypeScript + Vite
State Management Pinia
UI Components Element Plus
Styling TailwindCSS 4
Desktop Electron + electron-updater
Docs Site VitePress

Features

Agent System

  • ReAct Agent β€” Thought β†’ Action β†’ Observation reasoning loop with tool calling
  • Plan-and-Execute β€” Auto-decompose complex tasks into ordered sub-steps with progress tracking
  • Dynamic Agent β€” Load agent configs from database at runtime
  • Multi-Agent β€” Create multiple independent agents, each with their own system prompt, tools, and personality

Tool & Skill System

  • Built-in Tools β€” Web search (Serper/Tavily), date/time, workspace memory read/write
  • MCP Protocol β€” Connect external tools via Model Context Protocol (stdio, SSE, and Streamable HTTP transports). Full lifecycle management in the web UI β€” add, edit, enable/disable, and test connections
  • Pre-configured MCP Servers β€” GitHub (@modelcontextprotocol/server-github) and Filesystem ship out-of-the-box. Enable from the MCP management page and fill in your token β€” no code changes needed
  • Skill Packages β€” Install/uninstall skill packages with SKILL.md manifests
  • ClawHub Marketplace β€” Browse and install skills from the ClawHub registry
  • Workspace Skills β€” Convention-based skill directory at ~/.mateclaw/skills/{name}/

Memory System

  • Short-Term β€” Conversation context window with auto-compression when token budget exceeded
  • Post-Conversation Extraction β€” Event-driven async LLM analysis, writes to PROFILE.md / MEMORY.md / daily notes
  • Memory Consolidation β€” Scheduled daily emergence (CronJob at 2:00 AM) merges daily notes into long-term memory
  • Workspace Files β€” Per-agent AGENTS.md, SOUL.md, PROFILE.md, MEMORY.md, memory/*.md
  • Agent Memory Tool β€” Agents can read/write their own workspace files during conversations

Multi-Channel

  • Web Console β€” SSE streaming with rich message rendering (Markdown, code, plans)
  • DingTalk β€” Webhook + event subscription
  • Feishu (Lark) β€” Webhook + event subscription
  • WeChat Work β€” Callback API
  • Telegram β€” Bot API with webhook
  • Discord β€” Bot with slash commands
  • QQ β€” QQ Bot API

Model Providers

Configure in the web UI (Settings β†’ Models). Supported providers:

Provider Models
Cloud Providers
DashScope (Alibaba) Qwen3.5-Max, Qwen3.5-Plus, Qwen3-Max, Qwen3-Plus, Qwen-Max, Qwen-Plus, Qwen-Turbo, Qwen-Long, DeepSeek-V3.2
ModelScope Qwen3.5-122B-A10B, GLM-5
Aliyun Coding Plan Qwen3.5-Plus, Qwen3-Coder-Next, GLM-5, GLM-4.7, MiniMax-M2.5, Kimi-K2.5
OpenAI GPT-5.2, GPT-5, GPT-5-Mini, GPT-5-Nano, GPT-4.1, GPT-4.1-Mini, GPT-4.1-Nano, o3, o4-mini, GPT-4o
Azure OpenAI GPT-5, GPT-4.1, GPT-4o and more
Anthropic Claude Opus 4.6, Claude Sonnet 4.6 (via model discovery)
Google Gemini Gemini 3.1 Pro, Gemini 3 Flash, Gemini 2.5 Pro, Gemini 2.5 Flash, Gemini 2.0 Flash
DeepSeek DeepSeek-Chat, DeepSeek-Reasoner
Kimi (Moonshot) Kimi-K2.5, Kimi-K2-Thinking, Kimi for Coding (CN / International / Code)
MiniMax MiniMax-M2.7, MiniMax-M2.5 (International / China)
Zhipu AI GLM-5.1, GLM-5, GLM-5-Turbo, GLM-5V-Turbo (CN / International)
Volcano Engine Doubao-1.5-Pro-256K, Doubao-1.5-Lite, Doubao-1.5-Thinking-Pro, Doubao-1.5-Vision-Pro
OpenRouter GPT-5, Claude Opus 4.6, Gemini 2.5 Pro, Llama 4 Maverick, DeepSeek R1, and 200+ more
Local Providers
Ollama Qwen3, Gemma 4, Gemma 3, Llama 3.1, DeepSeek R1, Mistral (auto-detected on startup)
LM Studio Any locally-served model
llama.cpp Any locally-served model
MLX (Apple Silicon) Any locally-served model

Security

  • Spring Security + JWT β€” Token-based authentication
  • Tool Guard β€” Approval rules for sensitive tool operations
  • File Validation β€” Path traversal prevention for workspace files
  • Skill Security β€” Validation during skill installation

Scheduled Tasks

  • CronJob System β€” Create scheduled tasks with 5-field cron expressions
  • Memory Consolidation β€” Auto-triggered daily for each agent
  • Custom Tasks β€” Schedule any prompt to run periodically

Documentation

Topic Description
Introduction What MateClaw is and core concepts
Quick Start Install and run (local, Docker, desktop)
Console Web UI: chat and agent configuration
Agents Agent engine: ReAct, Plan-and-Execute, StateGraph
Models Configure cloud, local, and custom providers
Tools Built-in tools and custom tool development
Skills Skill packages and ClawHub marketplace
MCP Model Context Protocol integration
Memory Multi-layer memory system
Channels DingTalk, Feishu, Telegram, Discord, and more
Security Authentication and tool guard
Desktop Desktop application guide
API Reference REST API documentation
Configuration Configuration reference
FAQ Common questions and troubleshooting

Roadmap

Area Item Status
Agent Multi-agent collaboration and delegation Planned
Agent Multimodal input (image, audio, video) Planned
Models Small + large model routing Planned
Memory Vector DB long-term memory (RAG) Planned
Memory Multimodal memory fusion Planned
Skills Richer ClawHub ecosystem In Progress
Channels WeChat personal (iLink Bot) Planned
Channels Email channel Planned
Desktop Linux support Planned
Security Multi-tenant support Planned
Console Plugin marketplace in web UI Planned

Status: In Progress β€” actively being worked on; Planned β€” queued or under design.


Contributing

MateClaw is open to contributions! Whether it's bug fixes, new features, documentation improvements, or new channel/tool integrations β€” all contributions are welcome.

# Clone the repository
git clone https://github.com/matevip/mateclaw.git
cd mateclaw

# Backend
cd mateclaw-server
mvn clean compile

# Frontend
cd ../mateclaw-ui
pnpm install
pnpm dev

Please read CONTRIBUTING.md (if available) before submitting a PR.


Contact Us

Discord X (Twitter) DingTalk
Coming soon Coming soon Coming soon

Why MateClaw?

Mate β€” a companion, always by your side. Claw β€” sharp, capable, ready to grab any task. MateClaw is your personal AI mate that lends a claw whenever you need it. Built as a monolith with modular design, it's easy to deploy, extend, and customize.


License

MateClaw is released under the Apache License 2.0.

Reviews (0)

No results found