N2 Stitch MCP — 技能 — openclaw中文资讯站

技能详情（站内镜像，无评论）

Resilient MCP proxy for Google Stitch — 3-layer safety (auto-retry, token refresh, TCP drop recovery).

开发与 DevOps

许可证：MIT-0

MIT-0 ·免费使用、修改和重新分发。无需归因。

版本：v1.0.0

统计：⭐ 0 · 660 · 1 current installs · 1 all-time installs

⭐ 0

安装量（当前） 1

🛡 VirusTotal ：可疑 · OpenClaw ：可疑

Package：n2-stitch-mcp

安全扫描（ClawHub）

VirusTotal ：可疑
OpenClaw ：可疑

OpenClaw 评估

The skill's description matches a Stitch proxy, but the runtime instructions rely on downloading and running external code (npx) and on Google ADC/API credentials that are not declared in the metadata — this mismatch and implicit external install raise caution.

目的

The skill claims to be a resilient proxy for Google Stitch and the SKILL.md describes behavior consistent with that purpose (token refresh, retries, generation tracking). However the skill metadata declares no required credentials or binaries while the runtime docs explicitly instruct the user/agent to run 'gcloud auth application-default login' or export STITCH_API_KEY and to invoke 'npx n2-stitch-mcp' — credentials and an external package ar…

说明范围

Runtime instructions ask the agent/user to perform Google ADC login and/or set an API key, and to add an MCP entry that runs 'npx n2-stitch-mcp'. These steps grant the skill access to credentials (ADC) and allow dynamic download/execution of remote code. The SKILL.md also references 'auto-discovered' Stitch API tools and virtual tools, but provides no in-bundle code to implement them, giving broad discretion to whatever the npx package does.

安装机制

There is no install spec in the bundle, but the instructions rely on 'npx' to fetch and run the npm package at runtime. That means arbitrary code will be pulled from the npm registry when the MCP server is launched — a higher-risk install mechanism because the package fetched at runtime may differ from what's described and the skill bundle contains no code to audit.

证书

The SKILL.md instructs use of Google application-default credentials (gcloud ADC) or an STITCH_API_KEY, but the registry metadata lists no required env vars or primary credential. ADC via gcloud can expose broad Google Cloud permissions beyond Stitch if the logged-in identity is overprivileged. The required secrets are not declared in the skill metadata, so there is a mismatch between claimed requirements and actual instructions.

持久

The skill is not marked always:true and does not request system-wide privileges in metadata. It instructs adding an MCP server entry (its own config) which is a normal plugin installation pattern. This is expected for MCP-style proxies.

安装（复制给龙虾 AI）

将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「N2 Stitch MCP」。简介：Resilient MCP proxy for Google Stitch — 3-layer safety (auto-retry, token refre…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/choihyunsus/n2-stitch-mcp/SKILL.md
（来源：yingzhi8.cn 技能库）

SKILL.md

打开原始 SKILL.md（GitHub raw）

---
name: n2-stitch-mcp
description: Resilient MCP proxy for Google Stitch — 3-layer safety (auto-retry, token refresh, TCP drop recovery).
homepage: https://nton2.com
user-invocable: true
---

# 🛡️ N2 Stitch MCP — Resilient Proxy Skill

Never lose a screen generation again. The only Stitch MCP proxy with **TCP drop recovery**.

## The Problem

Google Stitch's `generate_screen_from_text` takes **2–10 minutes**, but the API **drops TCP after ~60 seconds**.

```
Other MCP servers:  Request → 60s → TCP drop → ❌ LOST!
N2 Stitch MCP:      Request → 60s → TCP drop → 🛡️ Auto-recovery → ✅ Delivered!
```

## Why This One?

| Feature | Others | **N2 Stitch MCP** |
|---------|:---:|:---:|
| TCP Drop Recovery | ❌ | ✅ Auto-polling |
| Generation Tracking | ❌ | ✅ `generation_status` |
| Exponential Backoff | ❌ | ✅ 3x retry + jitter |
| Auto Token Refresh | ⚠️ | ✅ Background refresh |
| Test Suite | ❌ | ✅ 35 tests |

## Quick Setup

### 1. Authenticate (one-time)
```bash
# Option A: gcloud (recommended)
gcloud auth application-default login

# Option B: API Key
export STITCH_API_KEY="your-key"
```

### 2. Add to MCP Config
```json
{
  "mcpServers": {
    "n2-stitch": {
      "command": "npx",
      "args": ["-y", "n2-stitch-mcp"]
    }
  }
}
```

## Available Tools

### Stitch API (auto-discovered)
- **create_project** — Create a Stitch project
- **list_projects** — List all projects
- **get_project** — Get project details
- **list_screens** — List screens in a project
- **get_screen** — Get screen HTML/CSS
- **generate_screen_from_text** — ✨ Generate UI from text (Resilient!)
- **edit_screens** — Edit existing screens
- **generate_variants** — Generate design variants

### Virtual Tools (N2 Exclusive)
- **generation_status** — Check generation progress in real-time
- **list_generations** — List all tracked generations

## Links
- NPM: https://www.npmjs.com/package/n2-stitch-mcp
- GitHub: https://github.com/choihyunsus/n2-stitch-mcp
- Website: https://nton2.com

---
*Part of the N2 AI Body series — Building the Body for AI*