Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
- Added Spotify as a supported provider for Permissions Broker. - No other changes detected.
What This Skill Does
A proxy layer that routes AI agent requests to external APIs (Google, GitHub, iCloud CalDAV, Spotify) through a broker that requires explicit user approval in Telegram before execution. The agent proposes the exact upstream URL and method; the user approves or denies it in Telegram. OAuth tokens are injected by the broker, so credentials never pass through the agent.
Agents can interact with personal accounts without ever holding credentials, since the broker injects OAuth tokens only after the user explicitly approves each request.
When to use it
- Listing or searching Google Drive files from an agent session
- Opening GitHub pull requests or issues on your behalf
- Reading iCloud calendar events or reminders through an agent
- Controlling Spotify playback with agent commands
- Cloning or pushing to a GitHub repo with per-session approval gating
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Show me my last 5 Google Drive files
- 1Creates a broker request targeting the Drive files API with pageSize=5 and a consent hint explaining the reason
- 2Tells the user to approve the request in Telegram
- 3Polls broker status for up to 30 seconds
- 4Executes the approved request and retrieves the upstream response bytes
- 5Parses and returns the file names and IDs to the user
A list of 5 recent Drive file names and IDs
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.