Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

ariffazil/MCP Lifeguard

Name: MCP Lifeguard
Author: ariffazil

skills/mcp-lifeguard/SKILL.md

npx skillsauth add ariffazil/openclaw-workspace MCP Lifeguard

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

When to Use

Use when:

An MCP server returns connection refused, timeout, or 5xx
OpenClaw logs show [bundle-mcp] failed to start server
Model fallback chain is failing (DeepSeek 402, Kimi unknown model, Ollama cold-start)
You need a federation MCP status dashboard

MCP Endpoint Map

| Node | URL | Transport | Expected | |------|-----|-----------|----------| | arifOS | http://127.0.0.1:8080/mcp | streamable-http | 200 / JSON | | GEOX | http://127.0.0.1:8081/mcp | streamable-http | 405 (POST only) | | WEALTH | http://127.0.0.1:8082/mcp | streamable-http | JSON-RPC error | | WELL | http://127.0.0.1:8083/mcp | streamable-http | JSON-RPC error |

Note: WEALTH and WELL return JSON-RPC errors on GET — this is normal. A connection refused or timeout is the real failure signal.

Health Probe Commands

Quick Pulse Check

for port in 8080 8081 8082 8083; do
  code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 3 "http://127.0.0.1:${port}/mcp" || echo "000")
  echo "Port $port: HTTP $code"
done

Deep Probe with Response Time

for port in 8080 8081 8082 8083; do
  rt=$(curl -s -o /dev/null -w "%{time_total}" --max-time 5 "http://127.0.0.1:${port}/mcp" || echo "999")
  echo "Port $port: ${rt}s"
done

Auto-Restart Dead MCPs

# Map ports to containers
mcp_map=(
  "8080:arifosmcp"
  "8081:geox_eic"
  "8082:wealth-organ"
  "8083:well"
)

for entry in "${mcp_map[@]}"; do
  port=${entry%%:*}
  container=${entry##*:}
  code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 5 "http://127.0.0.1:${port}/mcp" || echo "000")
  if [ "$code" = "000" ] || [ "$code" = "502" ] || [ "$code" = "503" ]; then
    docker restart "$container"
    echo "$(date -Iseconds) RESTARTED $container (port $port, code $code)"
  fi
done

Model Fallback Chain Monitor

Ping Model Providers

# MiniMax
curl -s https://api.minimax.io/v1/models -H "Authorization: Bearer $MINIMAX_API_KEY" --max-time 5 | grep -q "MiniMax" && echo "MiniMax: OK" || echo "MiniMax: FAIL"

# DeepSeek
curl -s https://api.deepseek.com/v1/models -H "Authorization: Bearer $DEEPSEEK_API_KEY" --max-time 5 | grep -q "deepseek" && echo "DeepSeek: OK" || echo "DeepSeek: FAIL"

# Ollama local
curl -s http://127.0.0.1:11434/api/tags --max-time 5 | grep -q "qwen2.5:7b" && echo "Ollama: OK" || echo "Ollama: FAIL"

Alert Conditions

| Condition | Action | |-----------|--------| | MCP HTTP 000/502/503 | Auto-restart container + log | | MCP response > 3s | WARN in heartbeat | | Model provider 401/402 | Disable from fallback chain + alert | | Ollama cold-start > 15s | Pre-warm model via /api/generate |

Pre-Warm Ollama (Avoid Cold-Start)

curl -s http://127.0.0.1:11434/api/generate \
  -H "Content-Type: application/json" \
  -d '{"model":"qwen2.5:7b","prompt":"warmup","stream":false,"options":{"num_predict":1}}' \
  --max-time 30 > /dev/null
echo "Ollama warmed"

Rules

Never restart Vault999 — append-only ledger, human ack required
Restart one MCP at a time — avoid federation cascade
Log to ~/.openclaw/workspace/logs/mcp-lifeguard.log
Disable dead models — don't let 402s burn event loop cycles
Pre-warm Ollama on gateway startup if it's in fallbacks

ariffazil/MCP Lifeguard

skills/mcp-lifeguard/SKILL.md

Health probe and auto-recovery for constitutional federation MCP servers. Pings arifOS (8080), GEOX (8081), WEALTH (8082), WELL (8083) every 5 minutes. Restarts dead containers and alerts on model fallback chain failures.

2 stars

tools

Updated Jul 13, 2026

$ install --global

skillsauth

npx skillsauth add ariffazil/openclaw-workspace MCP Lifeguard

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: Jul 13, 2026, 3:46 AM264.5s3 files scanned

SKILL.md

name:: MCP Lifeguard
slug:: mcp-lifeguard
version:: 1.0.0
homepage:: https://arif-fazil.com/skills/mcp-lifeguard
description:: Health probe and auto-recovery for constitutional federation MCP servers. Pings arifOS (8080), GEOX (8081), WEALTH (8082), WELL (8083) every 5 minutes. Restarts dead containers and alerts on model fallback chain failures.
metadata:: {"clawdbot":{"emoji":"🚁","requires":{"bins":["docker","curl"]},"os":["linux"]}}

When to Use

Use when:

An MCP server returns connection refused, timeout, or 5xx
OpenClaw logs show [bundle-mcp] failed to start server
Model fallback chain is failing (DeepSeek 402, Kimi unknown model, Ollama cold-start)
You need a federation MCP status dashboard

MCP Endpoint Map

Note: WEALTH and WELL return JSON-RPC errors on GET — this is normal. A connection refused or timeout is the real failure signal.

Health Probe Commands

Quick Pulse Check

for port in 8080 8081 8082 8083; do
  code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 3 "http://127.0.0.1:${port}/mcp" || echo "000")
  echo "Port $port: HTTP $code"
done

Deep Probe with Response Time

for port in 8080 8081 8082 8083; do
  rt=$(curl -s -o /dev/null -w "%{time_total}" --max-time 5 "http://127.0.0.1:${port}/mcp" || echo "999")
  echo "Port $port: ${rt}s"
done

Auto-Restart Dead MCPs

# Map ports to containers
mcp_map=(
  "8080:arifosmcp"
  "8081:geox_eic"
  "8082:wealth-organ"
  "8083:well"
)

for entry in "${mcp_map[@]}"; do
  port=${entry%%:*}
  container=${entry##*:}
  code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 5 "http://127.0.0.1:${port}/mcp" || echo "000")
  if [ "$code" = "000" ] || [ "$code" = "502" ] || [ "$code" = "503" ]; then
    docker restart "$container"
    echo "$(date -Iseconds) RESTARTED $container (port $port, code $code)"
  fi
done

Model Fallback Chain Monitor

Ping Model Providers

# MiniMax
curl -s https://api.minimax.io/v1/models -H "Authorization: Bearer $MINIMAX_API_KEY" --max-time 5 | grep -q "MiniMax" && echo "MiniMax: OK" || echo "MiniMax: FAIL"

# DeepSeek
curl -s https://api.deepseek.com/v1/models -H "Authorization: Bearer $DEEPSEEK_API_KEY" --max-time 5 | grep -q "deepseek" && echo "DeepSeek: OK" || echo "DeepSeek: FAIL"

# Ollama local
curl -s http://127.0.0.1:11434/api/tags --max-time 5 | grep -q "qwen2.5:7b" && echo "Ollama: OK" || echo "Ollama: FAIL"

Alert Conditions

Pre-Warm Ollama (Avoid Cold-Start)

curl -s http://127.0.0.1:11434/api/generate \
  -H "Content-Type: application/json" \
  -d '{"model":"qwen2.5:7b","prompt":"warmup","stream":false,"options":{"num_predict":1}}' \
  --max-time 30 > /dev/null
echo "Ollama warmed"

Rules

Never restart Vault999 — append-only ledger, human ack required
Restart one MCP at a time — avoid federation cascade
Log to ~/.openclaw/workspace/logs/mcp-lifeguard.log
Disable dead models — don't let 402s burn event loop cycles
Pre-warm Ollama on gateway startup if it's in fallbacks

Related Skills

ariffazil/XAUUSD-trading-stack

development

VerifiedTrustedCommunity

Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.

2SKILL.mdUpdated Jul 24, 2026

ariffazil/XAUUSD-trading-stack

ariffazil/wealth-claim-state

development

VerifiedTrustedCommunity

Capital claim state management — tracks claim lifecycle across WEALTH organ.

2SKILL.mdUpdated Jul 24, 2026

ariffazil/wealth-claim-state

ariffazil/warga-constitutional

development

VerifiedTrustedCommunity

Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.

2SKILL.mdUpdated Jul 24, 2026

ariffazil/warga-constitutional

ariffazil/warga

testing

VerifiedTrustedCommunity

Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.

2SKILL.mdUpdated Jul 24, 2026

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/ariffazil/openclaw-workspace.git

# Copy into Claude Code skills folder (global)
cp -r openclaw-workspace/skills/mcp-lifeguard ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

ariffazil/openclaw-workspace

2 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT