360 Secure SkillHub
360 安全技能中心

Mova Connector Setup

帮助用户把自有业务系统(ERP、CRM、AML、行情数据等)的 HTTPS 端点注册为 MOVA 连接器覆盖:列出并筛选可用连接器、确认注册结果,也支持删除覆盖以恢复沙箱模拟。依赖 openclaw-mova 插件与 mova-bridge 命令行,注册所需的连接器 ID、端点地址与认证头会发送到 MOVA 接口。

mova-compact
mova-compact
热度 43.00
最近更新 2026-05-11 17:35:54
分类:开发依赖:代码执行 / 第三方 API应用场景:API 集成

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add mova-connector-setup
Metadata
name
mova-connector-setup
description
Help the user connect their real business systems (ERP, CRM, AML, market data, etc.) to MOVA by registering custom connector endpoints. Trigger when the user asks "how do I use my real data", "connect my ERP", "use production data", "register a connector", or mentions wanting to replace the MOVA sandbox mock with their own system.
license
MIT-0
metadata
{"openclaw":{"plugin":{"name":"MOVA","installCmd":"openclaw plugins install openclaw-mova"},"dataSentToExternalServices":[{"service":"MOVA API (api.mova-lab.eu)","data":"connector ID, endpoint URL, auth header — to register connector overrides for your org"}]}}

Ecosystem Skill — Supports building and managing the MOVA ecosystem. Requires the openclaw-mova plugin.

MOVA Connector Setup

Help the user register their real business system endpoints to replace the MOVA sandbox mock.

What this skill does

MOVA has 40+ connectors for ERP, CRM, AML, market data, sanctions screening, and more. By default all connectors use a sandbox mock that returns realistic test data.

To use live data from your own systems, you register an HTTPS endpoint per connector. After registration, all contracts your org runs will call your endpoint instead of the mock — no code changes, no redeployment.

When to trigger

  • User says "how do I connect my ERP / CRM / AML system?"
  • User asks "how do I use real data instead of the demo?"
  • User says "replace the mock", "use production data", "register my endpoint"
  • User asks "what connectors are available?"

Step 1 — List available connectors

mova-bridge call mova_list_connectors

Or filter by domain keyword:

mova-bridge call mova_list_connectors --keyword erp
mova-bridge call mova_list_connectors --keyword aml
mova-bridge call mova_list_connectors --keyword crm
mova-bridge call mova_list_connectors --keyword market

The response shows:

  • connectors — all available connectors with has_override: true/false
  • overrides — endpoints you have already registered

Step 2 — Identify the right connector

Show the user the filtered list. Ask which system they want to connect. Common choices by skill:

Skill Key connectors
Invoice OCR connector.erp.invoice_post_v1, connector.finance.duplicate_check_v1, connector.tax.vat_validate_v1
PO Approval connector.erp.po_lookup_v1, connector.erp.vendor_registry_v1, connector.erp.budget_check_v1, connector.erp.hr_employee_v1
AML Triage connector.screening.pep_sanctions_v1, connector.aml.transaction_history_v1, connector.policy.aml_rules_v1
Complaints connector.crm.customer_lookup_v1, connector.policy.complaints_rules_v1
Crypto Trade connector.market.price_feed_v1, connector.wallet.balance_v1, connector.market.portfolio_risk_v1

Step 3 — Register the endpoint

Ask the user for:

  1. Their HTTPS endpoint URL
  2. Auth method (API key header, Bearer token, or none)
  3. A label (e.g. "Production ERP")

Then run:

mova-bridge call mova_register_connector \
  --connector-id CONNECTOR_ID \
  --endpoint https://their-system.example.com/api/endpoint \
  --label "Their label" \
  --auth-header X-Api-Key \
  --auth-value THEIR_KEY

The endpoint must be HTTPS. Auth header and value are optional — omit if not needed.

Step 4 — Confirm registration

mova-bridge call mova_list_connectors --keyword KEYWORD

Verify has_override: true appears for the registered connector. Tell the user: "Done — all future contracts in your org will now call your endpoint for [connector name]."

Removing an override

To revert a connector back to the sandbox mock:

mova-bridge call mova_delete_connector_override --connector-id CONNECTOR_ID

Viewing all current overrides

mova-bridge call mova_list_connectors

Check the overrides array in the response.

What MOVA sends to the user's endpoint

Each connector call is a POST with a JSON body matching the connector's schema. The user's endpoint must return a JSON response. The MOVA runtime does not store or log the response data beyond what is needed for the current contract execution.

Rules

  • NEVER make HTTP requests manually
  • NEVER store or display auth values the user provides beyond what is needed for registration
  • Always confirm the endpoint URL before registering — ask if unclear
  • Endpoint must be HTTPS — reject HTTP endpoints
  • Run exec directly: mova-bridge call ... (not wrapped in bash or sh)