← Back to Skills Marketplace
chrischall

Tmp.Qs5EOZDgAo

by chrischall · GitHub ↗ · v1.1.0 · MIT-0
cross-platform ⚠ suspicious
85
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zola-mcp
Description
This skill should be used when the user asks about Zola wedding planning data. Triggers on phrases like "check Zola", "Zola vendors", "wedding budget", "Zola...
README (SKILL.md)

zola-mcp

MCP server for Zola — 27 tools for managing your entire wedding via the Zola mobile API.

Setup

Option A — Claude Code (direct MCP)

Add to .mcp.json in your project or ~/.claude/mcp.json:

{
  "mcpServers": {
    "zola": {
      "command": "npx",
      "args": ["-y", "zola-mcp"],
      "env": {
        "ZOLA_REFRESH_TOKEN": "your-refresh-token-jwt"
      }
    }
  }
}

Option B — from source

git clone https://github.com/chrischall/zola-mcp
cd zola-mcp
npm install && npm run build

Getting your refresh token

Run the setup script (one-time, token lasts ~1 year):

npm run auth               # prints the token to the console
npm run auth -- .env       # writes ZOLA_REFRESH_TOKEN=\x3Ctoken> to .env

This launches Chrome with a dedicated profile, waits for you to sign in to zola.com, then captures the usr cookie (a ~1-year JWT). Use the printed value with Claude Desktop / MCPB configs, or the .env form when running from source.

If you'd rather not run Chrome via the script, you can also copy the usr cookie manually from DevTools → Application → Cookies after signing in at zola.com.

Credentials

Env var Required Notes
ZOLA_REFRESH_TOKEN Yes Mobile API JWT refresh token (~1 year lifetime)
ZOLA_ACCOUNT_ID No Auto-resolved from API; optional override
ZOLA_REGISTRY_ID No Auto-resolved from API; optional override

Tools

Vendors (5 tools)

Tool Description
list_vendors List all booked vendors with details
search_vendors Search for vendors by name within a category
add_vendor Book a new vendor
update_vendor Update a booked vendor's details
remove_vendor Unbook a vendor

Budget (2 tools)

Tool Description
get_budget Get wedding budget summary with all items
update_budget_item Update a budget item's cost or note

Guests (4 tools)

Tool Description
list_guests List all guest groups with stats
add_guest Add a new guest group (household)
update_guest_address Update a guest group's mailing address
remove_guest Remove a guest group

Seating (4 tools)

Tool Description
list_seating_charts List all seating charts
get_seating_chart Get chart with tables, seats, and occupants
list_unseated_guests List guests not yet assigned a seat
assign_seat Assign a guest to a specific seat

Inquiries (3 tools)

Tool Description
list_inquiries List all vendor inquiries with status
get_inquiry_conversation Get full conversation for an inquiry
mark_inquiry_read Mark an inquiry conversation as read

Events & RSVPs (3 tools)

Tool Description
list_events List all wedding events with RSVP counts
track_rsvps Get RSVP tracking per event
update_event Update event details (time, venue, dress code)

Registry & Gifts (2 tools)

Tool Description
get_registry View the wedding registry with categories
get_gift_tracker View gifts received, values, thank-you status

Discovery (4 tools)

Tool Description
get_wedding_dashboard Get wedding planning dashboard overview
search_storefronts Search vendor marketplace by category/location
get_storefront Get full vendor storefront details
list_favorites List all favorited/saved vendors

Workflows

  • "How's wedding planning going?"get_wedding_dashboard
  • "Who hasn't RSVP'd?"track_rsvps
  • "Find a photographer in Charlotte"search_storefronts with taxonomy_node_id: 2, city: Charlotte, state: NC
  • "Seat Jennifer at Table 1"list_unseated_guestsget_seating_chartassign_seat
  • "Any new vendor messages?"list_inquiries (filter unread) → get_inquiry_conversation
  • "Update the venue cost to $25,000"get_budgetupdate_budget_item
  • "Add my cousin Mike to the guest list"add_guest

Notes

  • All tools use the Zola mobile API (mobile-api.zola.com) with Bearer JWT auth
  • Account and registry IDs are auto-resolved from the API on first use
  • Refresh token expires after ~1 year; re-run setup-auth.sh to renew
Usage Guidance
Use this only if you trust the external zola-mcp package and are comfortable giving it a long-lived Zola token. Before installing, review the source, pin a known version, protect the token like a password, and require the agent to ask before making any changes to your Zola account.
Capability Analysis
Type: OpenClaw Skill Name: zola-mcp Version: 1.1.0 The zola-mcp skill (SKILL.md) manages sensitive wedding data, including guest addresses and budgets, and utilizes a browser-automation script to extract session cookies (JWTs) for authentication. While these capabilities are plausibly needed to interface with the Zola mobile API, the handling of PII and the use of 'npx' for remote execution represent high-risk behaviors under the provided criteria. No clear evidence of intentional malice or prompt injection was found, but the authentication method and broad data access are inherently risky.
Capability Tags
requires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The stated purpose matches the listed Zola wedding-planning tools, including vendors, guests, budget, seating, events, RSVPs, registry, and gift tracking.
Instruction Scope
The skill exposes many write/delete actions, such as adding/removing guests and vendors or changing budget and event details, but it does not describe confirmation, rollback, or approval boundaries for those mutations.
Install Mechanism
Although the registry says this is instruction-only with no install spec or code files, SKILL.md directs users to install and run an external npm/GitHub MCP server, including npm scripts not present for review.
Credentials
The integration requires a long-lived Zola refresh token/cookie and can access sensitive wedding account data; this is relevant to the purpose but high-impact and under-declared in the registry credential requirements.
Persistence & Privilege
The token is described as lasting about one year and may be stored in MCP config or a .env file, creating durable delegated access to the user's Zola account.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install zola-mcp
  3. After installation, invoke the skill by name or use /zola-mcp
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
zola-mcp v1.1.0 - Expanded SKILL.md with a comprehensive, user-focused overview and setup instructions. - Clearly documents 27 API tools for Zola wedding planning, covering vendors, budget, guests, seating, events, registry, and more. - Includes detailed authentication guidance, environment variable usage, and real-world workflow examples. - Now easier for users to understand triggers, capabilities, and configuration.
Metadata
Slug zola-mcp
Version 1.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Tmp.Qs5EOZDgAo?

This skill should be used when the user asks about Zola wedding planning data. Triggers on phrases like "check Zola", "Zola vendors", "wedding budget", "Zola... It is an AI Agent Skill for Claude Code / OpenClaw, with 85 downloads so far.

How do I install Tmp.Qs5EOZDgAo?

Run "/install zola-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Tmp.Qs5EOZDgAo free?

Yes, Tmp.Qs5EOZDgAo is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Tmp.Qs5EOZDgAo support?

Tmp.Qs5EOZDgAo is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Tmp.Qs5EOZDgAo?

It is built and maintained by chrischall (@chrischall); the current version is v1.1.0.

💬 Comments